asd

OTL Extras logfile created on: 4/27/2016 10:12:34 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\hemz\Downloads\Programs
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

7.25 Gb Total Physical Memory | 4.61 Gb Available Physical Memory | 63.55% Memory free
14.50 Gb Paging File | 11.66 Gb Available in Paging File | 80.42% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 63.92 Gb Total Space | 0.94 Gb Free Space | 1.47% Space Free | Partition Type: NTFS
Drive D: | 87.35 Gb Total Space | 12.79 Gb Free Space | 14.64% Space Free | Partition Type: NTFS
Drive E: | 146.72 Gb Total Space | 16.03 Gb Free Space | 10.93% Space Free | Partition Type: NTFS
Drive G: | 465.76 Gb Total Space | 49.95 Gb Free Space | 10.72% Space Free | Partition Type: NTFS

Computer Name: HEMZ-PC | User Name: hemz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\QQPCFileOpen.exe" "%1" (Tencent)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PCLink] -- C:\Program Files (x86)\ASUS\PC Link\PCLinkFileTransfer.exe %1 ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\QQPCFileOpen.exe" "%1" (Tencent)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PCLink] -- C:\Program Files (x86)\ASUS\PC Link\PCLinkFileTransfer.exe %1 ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{554B6C41-7609-440C-BEC9-C5BB5F89B492}" = lport=57007 | protocol=6 | dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{63F898B4-70D4-4704-A873-8F115F20724C}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{73098471-4253-4390-8CBA-0F8F3BFE207B}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{9DAB3220-4871-402A-8C2A-B161FDE282F5}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0497D59F-1022-4126-B58F-7DC4A5746E0F}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3updater.exe |
"{05C1A29C-DCD7-4353-ADDF-1E40927174F1}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpctray.exe |
"{05EF6A7D-D507-4269-B2C0-43136D372659}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmdl.exe |
"{0AB5C86B-67CC-435C-B276-4E1FDBFB54CB}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcupdateavlib.exe |
"{0E1B0AFF-E718-4BD3-8F99-39B156C788DC}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2\left4dead2.exe |
"{0EAECB2F-58DF-405C-83C7-B3F1317D32C5}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{0FBED1FB-8359-4E3E-AF50-EC3FD81C462E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0FD88056-8C85-4822-B43C-BC8717005422}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{10ED1ED5-09B1-4849-8B6E-293A8C22FE50}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"{11CEAE8F-07C4-4A20-8795-83CAAA680B7C}" = protocol=17 | dir=in | app=c:\windows\temp\download\minithunderplatform.exe |
"{1480CEE9-DF30-416A-9B79-BE23AFD95450}" = protocol=6 | dir=in | app=c:\windows\temp\download\minithunderplatform.exe |
"{14ED2DCB-F285-4F2E-8475-46B26A6FF6DF}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"{158E0861-E9D9-4439-9C20-42008CA1FF15}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{19E8678C-19A6-486E-886B-33D127D3983F}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcmgr.exe |
"{1F0C683F-3AAD-4CA9-BA11-199A184AC068}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmroutermgr.exe |
"{219A493E-F41A-405A-B736-AD131984B15E}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{22328913-247A-4195-84F3-BCB9DAEA1995}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgdiagex.exe |
"{2A5DAB27-0620-47E7-84CC-EB46342B2987}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpclaunch.exe |
"{2A7A180B-A608-479E-80FE-3C0EB43732F0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{2FE12280-BCED-44A3-9189-4A56A35B9618}" = dir=in | app=c:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe |
"{306EE7C3-35ED-4FC0-B8E1-F3B3C7514C40}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{329704E9-E2C3-4AED-BBD7-30816A322D09}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{33CC247E-D2D8-49B6-8BF5-4DD0705E8261}" = protocol=6 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{363B1FA9-F4B3-4E17-9175-9C662661B14D}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3.exe |
"{3B17A9D6-B0D8-43F4-A850-A6C90DBE23B8}" = protocol=6 | dir=in | app=c:\users\hemz\appdata\roaming\upupdata\download\minithunderplatform.exe |
"{3E51B769-9F87-44C1-B882-05FB42FF8384}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\frosty kiss\frosty kiss steam build.exe |
"{44981476-1728-4B65-B21B-CA489A67BBF2}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
"{47F06E59-153C-4407-ABDF-0C7727D4831F}" = dir=in | app=c:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe |
"{4A939277-345B-4CD0-AF7C-F0D565A66F10}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe |
"{51264F7B-5A97-4B7A-B7D9-4C251882F24E}" = protocol=6 | dir=out | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{55C54F4A-635C-4189-B6A4-2B0692ABB9D8}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\tpkupdate.exe |
"{55E8517B-F5AF-4F1F-AA8F-5664CEFD77D0}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe |
"{5690A1AF-CB4A-4F21-8393-B19D0298C445}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
"{5995C0BA-76F5-419A-AD65-5F5821F3BEF8}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3.exe |
"{5C55C777-9474-45B8-BAEB-CCEF58355597}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\uninst.exe |
"{5F23D40F-A4BB-401D-87A4-C54264831E55}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
"{649CEE84-173D-4C83-9D50-7CDB8B5A1AD5}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe |
"{659B743A-7350-4152-84C2-B7EC866EB99C}" = dir=in | app=c:\program files (x86)\asus\share link\sharelink.exe |
"{68F563C6-81F5-4942-BE04-24A595E496BA}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3editor.exe |
"{695D3D58-4A29-4B29-A017-3FEB9EBD90A2}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcfileopen.exe |
"{6B78E3C7-31A9-4B5B-AEB4-D341BF91796B}" = protocol=17 | dir=in | app=c:\users\hemz\appdata\roaming\upupdata\download\minithunderplatform.exe |
"{6CE6D0A8-6786-455F-A7A4-D1CD9FFCE7D5}" = protocol=17 | dir=out | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{6CEFC2CF-09A1-4FF9-B54A-0D502FF20033}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcsoftgame.exe |
"{71971895-BE2A-4CAD-AD6D-3180FD80168F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{71C0A75F-B378-4CD0-947F-0F8464D4ABA2}" = dir=in | app=g:\point blank garena id\garenapbid\gamedata\ggdllhost.exe |
"{73176760-8F79-4CE0-8233-7AD36853C4D2}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{74135F98-CC0F-497E-BDB4-5811D8BBFFFD}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcleakscan.exe |
"{7998FECD-4E16-4967-88AA-2D3CB16C734B}" = dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{8175F71B-C959-443A-A06E-A78FBF6C5F16}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\plugins\checkpcmgrupdate.exe |
"{82D55DA0-075F-4C9A-A7F9-249B51A6249D}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\frosty kiss\frosty kiss steam build.exe |
"{86035857-83E1-4014-B768-AAFFC284C11F}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgdiagex.exe |
"{8A0F25B7-DF10-4025-AC1C-202C104C67FE}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpconfig.exe |
"{8C034212-B015-44F3-A16E-4D386DCA5B92}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{8D9623ED-17A0-4846-9C04-AF2DFD980B74}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\plugins\qmnetmon\qqpcnetflow.exe |
"{8F0CA2C7-8E45-4C00-B0E6-14861269F020}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2 beta\left4dead2_beta.exe |
"{A4223EB5-48F6-49FE-8B96-91D25C873BE6}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcsoftmgr.exe |
"{A51C5ACB-9D6D-49C2-98D9-A2CAE36EE53D}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2\left4dead2.exe |
"{A6ACE5B6-66F6-43EA-AC8F-D0D6719D8082}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{AE08D914-524A-4D88-BD0E-755978080D3E}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcrtp.exe |
"{AF443A86-2142-4B5F-9BE1-ECA8C4CB401F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{AF611B4E-75BF-4167-9547-6219029D2A4F}" = protocol=17 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{AFF024A9-9064-40D5-AEBA-C9B924C79BC1}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcbtu.exe |
"{B1052996-2FBE-4715-9C77-66E18D5B9B9A}" = dir=in | app=g:\point blank garena id\garenapbid\gamedata\ggdllhost.exe |
"{B28756DB-C80C-4CFD-9A58-6FD8E2C3E0E6}" = protocol=17 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{B2B11D1D-CC8D-4B10-B9B7-BDE75BBFC162}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{B6DC3C61-F38F-45C9-B2CA-F8AAD1156837}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmupdate\qqpcmgrupdate.exe |
"{BD932DC5-AB83-47CE-9E8E-E26A46A8364C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{C0CFC026-16F8-41CC-8DE8-068BAAF5AE91}" = protocol=6 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{C2EC61E2-3F7B-4072-A470-D3EBB7BA663F}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmadblock.exe |
"{C4306BDB-8906-4A44-A040-9EC3DDB1D892}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{C5463BA5-BE93-4EB9-AF74-8BD7E0C1CAAD}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3updater.exe |
"{C57A3000-4D94-434A-BCA6-3B782AAE6310}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{D11AB4F7-E7DC-4C07-B2E6-648A2746B77A}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{D1E2151E-98DC-4C25-A10F-0997FCF932F3}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{D2394D01-FE4E-405A-BDB0-172D1358A0D4}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{D25CA6F9-2EBC-40F2-BE44-D8312B5D3F3F}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3editor.exe |
"{D3682DD0-4E06-472C-982F-D8137F8B2903}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{D71775B5-2276-494C-930D-D249722F1A01}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcpatch.exe |
"{E4A445B1-FF7C-4932-AC1A-3AA347219787}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{E544A126-6F36-4EC1-B196-B81E807D5C65}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmaccountprotection.exe |
"{E66383FC-2713-45CF-BE3D-28B7458356A6}" = dir=in | app=c:\program files (x86)\asus\pc link\pclinkservice.exe |
"{E91F1FB7-3A16-481E-9F1A-5426F6BB4FE8}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{EA4C1E58-4F73-4528-A8C1-E52AC95B7827}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{EB922419-4530-4247-BF56-A2EFE1381739}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\bugreport.exe |
"{F6BA51CF-F766-47C1-912D-D14237CEE02B}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2 beta\left4dead2_beta.exe |
"{F6D271AF-E671-4A36-8978-57E51B216795}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe |
"{F6E8B622-BA31-475C-B9E2-B8CDA1D7B1CE}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcclinic.exe |
"{F90B2798-FFC4-4E42-8432-191D7945ABC9}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{FA559639-AFB2-411D-AC88-54E200359F14}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqrepair.exe |
"{FCE3BF1E-F5B5-451B-BDBC-44984329D316}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcsysoptimize.exe |
"{FE972A34-CBA3-4117-A18E-A74DDDA481BD}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
"{FFC3EF65-D334-4B37-9EE8-BDE9D233631E}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcmgrinstallguide.exe |
"TCP Query User{05367F72-7014-4805-A3B9-C4516079DB4E}E:\my documents\downloads\compressed\rief irc\mirc.exe" = protocol=6 | dir=in | app=e:\my documents\downloads\compressed\rief irc\mirc.exe |
"TCP Query User{0EE9BB7E-2AD4-4DBD-9260-90905E47D9FA}D:\pro evolution soccer 2016\pes2016.exe" = protocol=6 | dir=in | app=d:\pro evolution soccer 2016\pes2016.exe |
"TCP Query User{15739D35-938E-4703-9AB3-8B3AE02140E3}G:\program files (x86)\l2asia\system\l2.bin" = protocol=6 | dir=in | app=g:\program files (x86)\l2asia\system\l2.bin |
"TCP Query User{26FAAB49-382B-432E-BC4A-72A88942D5F3}G:\point blank garena id\garenapbid\gamedata\garenamessenger.exe" = protocol=6 | dir=in | app=g:\point blank garena id\garenapbid\gamedata\garenamessenger.exe |
"TCP Query User{41F97C51-D421-445B-94B6-BA0C66B16E82}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe" = protocol=6 | dir=in | app=c:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe |
"TCP Query User{81ADA18D-C64E-45BA-A1FD-1B1A576988AD}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{A43A5647-DABA-4941-9461-4F24EF7A006C}C:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe" = protocol=6 | dir=in | app=c:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe |
"TCP Query User{AD007C0A-76B4-431C-9269-EA7A815939AF}D:\program files (x86)\pro evolution soccer 2016\pes2016.exe" = protocol=6 | dir=in | app=d:\program files (x86)\pro evolution soccer 2016\pes2016.exe |
"TCP Query User{AD62650D-E64F-4B45-99B9-52F9AE12F97E}D:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe" = protocol=6 | dir=in | app=d:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe |
"TCP Query User{B37975B9-D707-4DC2-ADE4-6A552EF60907}D:\games\dragon age origins\bin_ship\daorigins.exe" = protocol=6 | dir=in | app=d:\games\dragon age origins\bin_ship\daorigins.exe |
"TCP Query User{C92542F2-FEC9-4651-A58A-E6AF0AD209C8}D:\program files (x86)\need for speed(tm) the run\need for speed the run.exe" = protocol=6 | dir=in | app=d:\program files (x86)\need for speed(tm) the run\need for speed the run.exe |
"TCP Query User{F48918BB-CB6E-4DE4-BEA9-14351E8D7CD2}D:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe" = protocol=6 | dir=in | app=d:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe |
"UDP Query User{01855248-B3A4-4744-8741-8C3CBF9AA795}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{256830B7-FE8B-41A4-A3C3-A72A7821234F}D:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe" = protocol=17 | dir=in | app=d:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe |
"UDP Query User{3A45B630-5FCE-40B9-A9BF-92C9D0B83A60}G:\point blank garena id\garenapbid\gamedata\garenamessenger.exe" = protocol=17 | dir=in | app=g:\point blank garena id\garenapbid\gamedata\garenamessenger.exe |
"UDP Query User{56C060AD-6B37-4D14-8ED1-31B184DBA7EF}D:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe" = protocol=17 | dir=in | app=d:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe |
"UDP Query User{58899BB8-AF51-447E-ABA3-282337B49D3A}G:\program files (x86)\l2asia\system\l2.bin" = protocol=17 | dir=in | app=g:\program files (x86)\l2asia\system\l2.bin |
"UDP Query User{7D5BEFC4-E766-4BE0-AA73-21A8857FB602}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe" = protocol=17 | dir=in | app=c:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe |
"UDP Query User{AA7D6CD4-E7FF-46E7-8F77-0F68035C3A57}D:\pro evolution soccer 2016\pes2016.exe" = protocol=17 | dir=in | app=d:\pro evolution soccer 2016\pes2016.exe |
"UDP Query User{C11E7441-1011-402E-850D-B1C35DFF4F49}D:\program files (x86)\pro evolution soccer 2016\pes2016.exe" = protocol=17 | dir=in | app=d:\program files (x86)\pro evolution soccer 2016\pes2016.exe |
"UDP Query User{C2A923FA-ED72-4466-AA6D-73726180A4A0}D:\games\dragon age origins\bin_ship\daorigins.exe" = protocol=17 | dir=in | app=d:\games\dragon age origins\bin_ship\daorigins.exe |
"UDP Query User{D981A2E7-E64C-4E20-95E7-371B5677C30D}D:\program files (x86)\need for speed(tm) the run\need for speed the run.exe" = protocol=17 | dir=in | app=d:\program files (x86)\need for speed(tm) the run\need for speed the run.exe |
"UDP Query User{FCA9FE2B-AA3A-4547-8575-185A13AF96AB}C:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe" = protocol=17 | dir=in | app=c:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe |
"UDP Query User{FFE180A4-1B2E-45A1-91AA-CE87DA2BCA70}E:\my documents\downloads\compressed\rief irc\mirc.exe" = protocol=17 | dir=in | app=e:\my documents\downloads\compressed\rief irc\mirc.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{1E9871B6-7C44-9A3A-A1C0-F9729663C7F5}" = AMD Catalyst Install Manager
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{418EFDFF-7119-71EE-9E3F-D18AC2F92E42}" = AMD Fuel
"{67631D8E-EB7F-5D02-002C-D682BCF1D3EB}" = AMD Accelerated Video Transcoding
"{69045C17-66CE-1316-6CC9-7EA496D1F6EA}" = ccc-utility64
"{6CD32B6F-4807-4C26-B274-4EE75DC335A4}" = AVG 2016
"{8719FCC9-FE23-4CFC-B2D7-9929B799B4B5}" = AVG
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.6
"{94A631D5-B30A-3DD8-B65C-1117C09DA73E}" = Microsoft .NET Framework 4.6
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{A954D353-9DAF-4916-8E71-F1E959EBCD1E}" = STCServ
"{CC7BE036-EA2E-5EED-2820-EF42498025DA}" = AMD Drag and Drop Transcoding
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{DFD2C0B0-664C-4383-B348-2F531462EBAD}" = Intel® CCF Manager
"{FAA6526A-BDA0-4D97-B79F-718937AAFACB}" = FMW 1
"{FFCEA5CD-93FE-F0DB-57AB-0E0A62F0214A}" = AMD Media Foundation Decoders
"A877FD5856151D202B724718A4F58CF0089A558C" = Windows Driver Package - ASUS Tek. Corporation (ATP) Mouse  (07/27/2015 7.0.0.7)
"AVG" = AVG Protection
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.74
"CPUID HWMonitorPro_is1" = CPUID HWMonitor Pro 1.23
"VLC media player" = VLC media player

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{07B98CCD-72B4-7F02-F9C1-B0410BA81580}" = CCC Help Norwegian
"{0D66D9EB-2DAE-599C-92D0-E2E6CCAA0666}" = CCC Help Japanese
"{0f3d8dd5-54af-4404-a01c-4967e485a065}" = Intel® CCF Manager
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6
"{1CA07BFA-8F7C-80CA-0A69-EAA93C7C7744}" = CCC Help Chinese Traditional
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{239D758B-F854-D61D-AC4E-1AAA9654426F}" = CCC Help French
"{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1" = Aegisub 3.2.2
"{2B2782F8-929D-AE80-1297-488D7590D208}" = CCC Help Portuguese
"{31DF9E67-DA8A-5C06-BBAD-3B3BCB5B2304}" = CCC Help Polish
"{3282FBE1-35FC-48D8-98CA-115A5EF1F9B4}" = NVIDIA PhysX
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{473E82D7-79E2-43DF-8FA0-025407C93191}" = BlueStacks Notification Center
"{4D3286A6-F6AB-498A-82A4-E4F040529F3D}" = ASUS Smart Gesture
"{4D3BF70D-19A9-F87B-7B8B-8BADDFF9C8A5}" = CCC Help Finnish
"{51853D9B-0D96-7A31-88D7-8520B50373F0}" = CCC Help Italian
"{52AE8601-EA55-456E-80A9-7FB48E82CF81}_is1" = ASUS PC Link
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{580B86B2-0E0F-996C-0045-38D0B681B16E}" = CCC Help Danish
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{6A0549A9-1B96-498C-ACBC-3943001FEB19}" = Skype™ 7.15
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8624569E-94AE-EF90-92E2-6AD8E5A617ED}" = AMD Catalyst Control Center
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{88B2ABCF-9C00-47C1-8FC4-369B98845DD7}" = Catalyst Control Center - Branding
"{8A6F6649-5244-9C2E-80CD-AD49603321AF}" = CCC Help German
"{8BF66753-6750-D41C-43EB-F64C54A8E80D}" = CCC Help Chinese Standard
"{8EA39464-1316-0125-7FD8-E74B49ADB429}" = CCC Help Turkish
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90D2DF70-F0E8-2CA3-F3B9-DD7CE267BB19}" = Catalyst Control Center Graphics Previews Common
"{9785513D-0335-E199-3AC0-74DF83246F20}" = CCC Help Czech
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A049FD86-61DA-E6DB-2602-0065CB7D4414}" = CCC Help Greek
"{A7B4D968-7FB7-2CD3-9792-5ACCAECAC72E}" = CCC Help Korean
"{AC08BBA0-96B9-431A-A7D0-D8598E493775}_is1" = Resident Evil 5  1.0
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.0
"{AF599C42-A2E5-4251-B7EE-4925A268D7C1}" = Hotspot Shield 5.20.19 Embedded
"{B05FBD47-2A22-2259-E65C-A2D3FB647A6A}" = CCC Help Russian
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B328A1B9-D169-FBA9-F4AF-806E0046F89A}" = CCC Help Spanish
"{B5BE22C7-420A-5F14-A1B9-4AB3F3DE0A3E}" = Catalyst Control Center InstallProxy
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{BDAF092D-6368-432E-A51D-F3837BB717EE}" = Echo of Soul
"{BE73543D-E7A0-01D8-7866-C05693BB6BBE}" = CCC Help English
"{c3bcc1e3-f950-439c-bcae-f01283e9f2a4}_is1" = ASUS Share Link
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{D59CEE5A-645E-44B0-B0BF-39255AB84C56}" = Simple DNSCrypt
"{D9E34320-D91C-E961-D902-B60788EAA26E}" = CCC Help Hungarian
"{DF4CBDE3-8789-A589-46F2-7F5B78092D5F}" = CCC Help Swedish
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = COWON Media Center - jetAudio Plus VX
"{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}" = Far Cry 3
"{EC2D4C8B-D8BF-7E06-C094-26B4CE84BF8C}" = CCC Help Dutch
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FB474A6C-CB62-AA42-A618-2EA58F0F2504}" = Catalyst Control Center Localization All
"{FFB3193B-D922-DD38-B218-EB86DD3F3FAD}" = CCC Help Thai
"7 Sins_is1" = 7 Sins
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"AIDA64 Extreme_is1" = AIDA64 Extreme v5.20
"AIMP3" = AIMP3
"AVG Web TuneUp" = AVG Web TuneUp
"BlueStacks App Player" = BlueStacks App Player
"Cheat Engine 6.5_is1" = Cheat Engine 6.5
"DAEMON Tools Pro Advanced" = DAEMON Tools Pro Advanced
"ENTERPRISE" = Microsoft Office Enterprise 2007
"GameSpy Arcade" = GameSpy Arcade
"Google Chrome" = Google Chrome
"Guitar Pro 5_is1" = Guitar Pro 5.0
"HotspotShield" = Hotspot Shield 5.20.19
"Internet Download Manager" = Internet Download Manager
"Jogotempo" = Jogotempo 4.0.0.0
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.9.5
"LINE" = LINE
"MiniLyrics" = MiniLyrics
"Mozilla Firefox 45.0.1 (x86 id)" = Mozilla Firefox 45.0.1 (x86 id)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"RiseOfNations 1.0" = Microsoft Rise Of Nations
"Steam" = Steam
"Steam App 223530" = Left 4 Dead 2 Beta
"Steam App 431540" = Frosty Kiss
"Steam App 550" = Left 4 Dead 2
"Steam App 730" = Counter-Strike: Global Offensive
"TeamViewer" = TeamViewer 10
"UHJvRXZvbHV0aW9uU29jY2VyMjAxNg==_is1" = Pro Evolution Soccer 2016
"Uninstall - clc" = hohosearch - Uninstall
"Uplay" = Uplay
"WinRAR archiver" = WinRAR 4.20 (32-bit)
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 4/23/2016 11:41:38 AM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/23/2016 11:41:43 AM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: TeamViewer_Service.exe, version: 10.0.47484.0,
 time stamp: 0x55f2f2db  Faulting module name: TeamViewer_Service.exe, version: 10.0.47484.0,
 time stamp: 0x55f2f2db  Exception code: 0x40000015  Fault offset: 0x00334663  Faulting
 process id: 0xdf4  Faulting application start time: 0x01d19d7688bb8910  Faulting application
 path: C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe  Faulting module path:
 C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe  Report Id: e0996317-0969-11e6-80a0-d8cb8a57e3c3

Error - 4/23/2016 10:45:17 PM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/24/2016 2:51:52 AM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: nations.exe, version: 1.13.4.1801, time
 stamp: 0x21544c66  Faulting module name: ntdll.dll, version: 6.1.7601.17514, time
 stamp: 0x4ce7ba58  Exception code: 0xc0000374  Fault offset: 0x000ce653  Faulting process
 id: 0x1100  Faulting application start time: 0x01d19de5477ec1e8  Faulting application
 path: C:\Program Files (x86)\Microsoft Games\Rise of Nations\nations.exe  Faulting
 module path: C:\Windows\SysWOW64\ntdll.dll  Report Id: 05f34edd-09e9-11e6-b5bb-d8cb8a57e3c3

Error - 4/24/2016 11:08:01 AM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/25/2016 2:07:28 AM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: l2.bin, version: 0.0.0.0, time stamp: 0x50721d6e
Faulting
 module name: NWindow.DLL, version: 0.0.0.0, time stamp: 0x50721dad  Exception code:
 0xc0000005  Fault offset: 0x005334f2  Faulting process id: 0x1220  Faulting application
 start time: 0x01d19e3bb288a0d1  Faulting application path: G:\Program Files (x86)\L2Asia\System\l2.bin
Faulting
 module path: G:\Program Files (x86)\L2Asia\System\NWindow.DLL  Report Id: fc4f7b34-0aab-11e6-84e5-d8cb8a57e3c3

Error - 4/25/2016 12:14:01 PM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: l2.bin, version: 0.0.0.0, time stamp: 0x50721d6e
Faulting
 module name: NWindow.DLL, version: 0.0.0.0, time stamp: 0x50721dad  Exception code:
 0xc0000005  Fault offset: 0x005334f2  Faulting process id: 0x14b4  Faulting application
 start time: 0x01d19f008f55c1d2  Faulting application path: G:\Program Files (x86)\L2Asia\System\l2.bin
Faulting
 module path: G:\Program Files (x86)\L2Asia\System\NWindow.DLL  Report Id: b88f3576-0b00-11e6-84e5-d8cb8a57e3c3

Error - 4/27/2016 3:05:20 AM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/27/2016 10:35:13 AM | Computer Name = hemz-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Cryptographic Services failed while processing the OnIdentity() call
 in the System Writer Object.  Details: AddWin32ServiceFiles: Unable to back up image
 of service BugreportW since QueryServiceConfig API failed  System Error: The system
 cannot find the file specified.  .

Error - 4/27/2016 10:59:26 AM | Computer Name = hemz-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Cryptographic Services failed while processing the OnIdentity() call
 in the System Writer Object.  Details: AddWin32ServiceFiles: Unable to back up image
 of service BugreportW since QueryServiceConfig API failed  System Error: The system
 cannot find the file specified.  .

[ System Events ]
Error - 4/27/2016 4:04:14 AM | Computer Name = hemz-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
 storage could not grow due to a user imposed limit.

Error - 4/27/2016 10:16:11 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The Dravsynlether Core service is marked as an interactive service.
  However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:16:13 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The BugreportW service is marked as an interactive service.  However,
 the system is configured to not allow interactive services.  This service may not
 function properly.

Error - 4/27/2016 10:19:44 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7034
Description = The 2d06143005c71a1c1ec2461b0563508c service terminated unexpectedly.
  It has done this 1 time(s).

Error - 4/27/2016 10:51:23 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The Windows Media Player Network Access Service service is marked
as an interactive service.  However, the system is configured to not allow interactive
 services.  This service may not function properly.

Error - 4/27/2016 10:51:24 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7000
Description = The BugreportW service failed to start due to the following error:
   %%3

Error - 4/27/2016 10:51:24 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The Pwtyfemuk Cache service is marked as an interactive service.
However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:51:33 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The GoogleChromeUpService service is marked as an interactive service.
  However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:52:35 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The QQPCMgr RTP Service service is marked as an interactive service.
  However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:53:32 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7034
Description = The Receive Sort service terminated unexpectedly.  It has done this
 1 time(s).


< End of report >

OTL Extras logfile created on: 4/27/2016 10:12:34 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\hemz\Downloads\Programs
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

7.25 Gb Total Physical Memory | 4.61 Gb Available Physical Memory | 63.55% Memory free
14.50 Gb Paging File | 11.66 Gb Available in Paging File | 80.42% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 63.92 Gb Total Space | 0.94 Gb Free Space | 1.47% Space Free | Partition Type: NTFS
Drive D: | 87.35 Gb Total Space | 12.79 Gb Free Space | 14.64% Space Free | Partition Type: NTFS
Drive E: | 146.72 Gb Total Space | 16.03 Gb Free Space | 10.93% Space Free | Partition Type: NTFS
Drive G: | 465.76 Gb Total Space | 49.95 Gb Free Space | 10.72% Space Free | Partition Type: NTFS

Computer Name: HEMZ-PC | User Name: hemz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\QQPCFileOpen.exe" "%1" (Tencent)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PCLink] -- C:\Program Files (x86)\ASUS\PC Link\PCLinkFileTransfer.exe %1 ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\QQPCFileOpen.exe" "%1" (Tencent)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PCLink] -- C:\Program Files (x86)\ASUS\PC Link\PCLinkFileTransfer.exe %1 ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{554B6C41-7609-440C-BEC9-C5BB5F89B492}" = lport=57007 | protocol=6 | dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{63F898B4-70D4-4704-A873-8F115F20724C}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{73098471-4253-4390-8CBA-0F8F3BFE207B}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{9DAB3220-4871-402A-8C2A-B161FDE282F5}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0497D59F-1022-4126-B58F-7DC4A5746E0F}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3updater.exe |
"{05C1A29C-DCD7-4353-ADDF-1E40927174F1}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpctray.exe |
"{05EF6A7D-D507-4269-B2C0-43136D372659}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmdl.exe |
"{0AB5C86B-67CC-435C-B276-4E1FDBFB54CB}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcupdateavlib.exe |
"{0E1B0AFF-E718-4BD3-8F99-39B156C788DC}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2\left4dead2.exe |
"{0EAECB2F-58DF-405C-83C7-B3F1317D32C5}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{0FBED1FB-8359-4E3E-AF50-EC3FD81C462E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0FD88056-8C85-4822-B43C-BC8717005422}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{10ED1ED5-09B1-4849-8B6E-293A8C22FE50}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"{11CEAE8F-07C4-4A20-8795-83CAAA680B7C}" = protocol=17 | dir=in | app=c:\windows\temp\download\minithunderplatform.exe |
"{1480CEE9-DF30-416A-9B79-BE23AFD95450}" = protocol=6 | dir=in | app=c:\windows\temp\download\minithunderplatform.exe |
"{14ED2DCB-F285-4F2E-8475-46B26A6FF6DF}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"{158E0861-E9D9-4439-9C20-42008CA1FF15}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{19E8678C-19A6-486E-886B-33D127D3983F}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcmgr.exe |
"{1F0C683F-3AAD-4CA9-BA11-199A184AC068}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmroutermgr.exe |
"{219A493E-F41A-405A-B736-AD131984B15E}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{22328913-247A-4195-84F3-BCB9DAEA1995}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgdiagex.exe |
"{2A5DAB27-0620-47E7-84CC-EB46342B2987}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpclaunch.exe |
"{2A7A180B-A608-479E-80FE-3C0EB43732F0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{2FE12280-BCED-44A3-9189-4A56A35B9618}" = dir=in | app=c:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe |
"{306EE7C3-35ED-4FC0-B8E1-F3B3C7514C40}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{329704E9-E2C3-4AED-BBD7-30816A322D09}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{33CC247E-D2D8-49B6-8BF5-4DD0705E8261}" = protocol=6 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{363B1FA9-F4B3-4E17-9175-9C662661B14D}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3.exe |
"{3B17A9D6-B0D8-43F4-A850-A6C90DBE23B8}" = protocol=6 | dir=in | app=c:\users\hemz\appdata\roaming\upupdata\download\minithunderplatform.exe |
"{3E51B769-9F87-44C1-B882-05FB42FF8384}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\frosty kiss\frosty kiss steam build.exe |
"{44981476-1728-4B65-B21B-CA489A67BBF2}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
"{47F06E59-153C-4407-ABDF-0C7727D4831F}" = dir=in | app=c:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe |
"{4A939277-345B-4CD0-AF7C-F0D565A66F10}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe |
"{51264F7B-5A97-4B7A-B7D9-4C251882F24E}" = protocol=6 | dir=out | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{55C54F4A-635C-4189-B6A4-2B0692ABB9D8}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\tpkupdate.exe |
"{55E8517B-F5AF-4F1F-AA8F-5664CEFD77D0}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe |
"{5690A1AF-CB4A-4F21-8393-B19D0298C445}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
"{5995C0BA-76F5-419A-AD65-5F5821F3BEF8}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3.exe |
"{5C55C777-9474-45B8-BAEB-CCEF58355597}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\uninst.exe |
"{5F23D40F-A4BB-401D-87A4-C54264831E55}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
"{649CEE84-173D-4C83-9D50-7CDB8B5A1AD5}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe |
"{659B743A-7350-4152-84C2-B7EC866EB99C}" = dir=in | app=c:\program files (x86)\asus\share link\sharelink.exe |
"{68F563C6-81F5-4942-BE04-24A595E496BA}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3editor.exe |
"{695D3D58-4A29-4B29-A017-3FEB9EBD90A2}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcfileopen.exe |
"{6B78E3C7-31A9-4B5B-AEB4-D341BF91796B}" = protocol=17 | dir=in | app=c:\users\hemz\appdata\roaming\upupdata\download\minithunderplatform.exe |
"{6CE6D0A8-6786-455F-A7A4-D1CD9FFCE7D5}" = protocol=17 | dir=out | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{6CEFC2CF-09A1-4FF9-B54A-0D502FF20033}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcsoftgame.exe |
"{71971895-BE2A-4CAD-AD6D-3180FD80168F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{71C0A75F-B378-4CD0-947F-0F8464D4ABA2}" = dir=in | app=g:\point blank garena id\garenapbid\gamedata\ggdllhost.exe |
"{73176760-8F79-4CE0-8233-7AD36853C4D2}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{74135F98-CC0F-497E-BDB4-5811D8BBFFFD}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcleakscan.exe |
"{7998FECD-4E16-4967-88AA-2D3CB16C734B}" = dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{8175F71B-C959-443A-A06E-A78FBF6C5F16}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\plugins\checkpcmgrupdate.exe |
"{82D55DA0-075F-4C9A-A7F9-249B51A6249D}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\frosty kiss\frosty kiss steam build.exe |
"{86035857-83E1-4014-B768-AAFFC284C11F}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgdiagex.exe |
"{8A0F25B7-DF10-4025-AC1C-202C104C67FE}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpconfig.exe |
"{8C034212-B015-44F3-A16E-4D386DCA5B92}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{8D9623ED-17A0-4846-9C04-AF2DFD980B74}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\plugins\qmnetmon\qqpcnetflow.exe |
"{8F0CA2C7-8E45-4C00-B0E6-14861269F020}" = protocol=6 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2 beta\left4dead2_beta.exe |
"{A4223EB5-48F6-49FE-8B96-91D25C873BE6}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcsoftmgr.exe |
"{A51C5ACB-9D6D-49C2-98D9-A2CAE36EE53D}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2\left4dead2.exe |
"{A6ACE5B6-66F6-43EA-AC8F-D0D6719D8082}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{AE08D914-524A-4D88-BD0E-755978080D3E}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcrtp.exe |
"{AF443A86-2142-4B5F-9BE1-ECA8C4CB401F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{AF611B4E-75BF-4167-9547-6219029D2A4F}" = protocol=17 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{AFF024A9-9064-40D5-AEBA-C9B924C79BC1}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcbtu.exe |
"{B1052996-2FBE-4715-9C77-66E18D5B9B9A}" = dir=in | app=g:\point blank garena id\garenapbid\gamedata\ggdllhost.exe |
"{B28756DB-C80C-4CFD-9A58-6FD8E2C3E0E6}" = protocol=17 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{B2B11D1D-CC8D-4B10-B9B7-BDE75BBFC162}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{B6DC3C61-F38F-45C9-B2CA-F8AAD1156837}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmupdate\qqpcmgrupdate.exe |
"{BD932DC5-AB83-47CE-9E8E-E26A46A8364C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{C0CFC026-16F8-41CC-8DE8-068BAAF5AE91}" = protocol=6 | dir=in | app=c:\users\hemz\appdata\roaming\utorrent\utorrent.exe |
"{C2EC61E2-3F7B-4072-A470-D3EBB7BA663F}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmadblock.exe |
"{C4306BDB-8906-4A44-A040-9EC3DDB1D892}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{C5463BA5-BE93-4EB9-AF74-8BD7E0C1CAAD}" = protocol=6 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3updater.exe |
"{C57A3000-4D94-434A-BCA6-3B782AAE6310}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{D11AB4F7-E7DC-4C07-B2E6-648A2746B77A}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{D1E2151E-98DC-4C25-A10F-0997FCF932F3}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{D2394D01-FE4E-405A-BDB0-172D1358A0D4}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{D25CA6F9-2EBC-40F2-BE44-D8312B5D3F3F}" = protocol=17 | dir=in | app=d:\program files (x86)\ubisoft\farcry 3\bin\fc3editor.exe |
"{D3682DD0-4E06-472C-982F-D8137F8B2903}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{D71775B5-2276-494C-930D-D249722F1A01}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcpatch.exe |
"{E4A445B1-FF7C-4932-AC1A-3AA347219787}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{E544A126-6F36-4EC1-B196-B81E807D5C65}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qmaccountprotection.exe |
"{E66383FC-2713-45CF-BE3D-28B7458356A6}" = dir=in | app=c:\program files (x86)\asus\pc link\pclinkservice.exe |
"{E91F1FB7-3A16-481E-9F1A-5426F6BB4FE8}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{EA4C1E58-4F73-4528-A8C1-E52AC95B7827}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{EB922419-4530-4247-BF56-A2EFE1381739}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\bugreport.exe |
"{F6BA51CF-F766-47C1-912D-D14237CEE02B}" = protocol=17 | dir=in | app=g:\steamlibrary\steamapps\common\left 4 dead 2 beta\left4dead2_beta.exe |
"{F6D271AF-E671-4A36-8978-57E51B216795}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe |
"{F6E8B622-BA31-475C-B9E2-B8CDA1D7B1CE}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcclinic.exe |
"{F90B2798-FFC4-4E42-8432-191D7945ABC9}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{FA559639-AFB2-411D-AC88-54E200359F14}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqrepair.exe |
"{FCE3BF1E-F5B5-451B-BDBC-44984329D316}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcsysoptimize.exe |
"{FE972A34-CBA3-4117-A18E-A74DDDA481BD}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
"{FFC3EF65-D334-4B37-9EE8-BDE9D233631E}" = dir=in | app=c:\program files (x86)\tencent\qqpcmgr\11.4.17339.217\qqpcmgrinstallguide.exe |
"TCP Query User{05367F72-7014-4805-A3B9-C4516079DB4E}E:\my documents\downloads\compressed\rief irc\mirc.exe" = protocol=6 | dir=in | app=e:\my documents\downloads\compressed\rief irc\mirc.exe |
"TCP Query User{0EE9BB7E-2AD4-4DBD-9260-90905E47D9FA}D:\pro evolution soccer 2016\pes2016.exe" = protocol=6 | dir=in | app=d:\pro evolution soccer 2016\pes2016.exe |
"TCP Query User{15739D35-938E-4703-9AB3-8B3AE02140E3}G:\program files (x86)\l2asia\system\l2.bin" = protocol=6 | dir=in | app=g:\program files (x86)\l2asia\system\l2.bin |
"TCP Query User{26FAAB49-382B-432E-BC4A-72A88942D5F3}G:\point blank garena id\garenapbid\gamedata\garenamessenger.exe" = protocol=6 | dir=in | app=g:\point blank garena id\garenapbid\gamedata\garenamessenger.exe |
"TCP Query User{41F97C51-D421-445B-94B6-BA0C66B16E82}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe" = protocol=6 | dir=in | app=c:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe |
"TCP Query User{81ADA18D-C64E-45BA-A1FD-1B1A576988AD}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{A43A5647-DABA-4941-9461-4F24EF7A006C}C:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe" = protocol=6 | dir=in | app=c:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe |
"TCP Query User{AD007C0A-76B4-431C-9269-EA7A815939AF}D:\program files (x86)\pro evolution soccer 2016\pes2016.exe" = protocol=6 | dir=in | app=d:\program files (x86)\pro evolution soccer 2016\pes2016.exe |
"TCP Query User{AD62650D-E64F-4B45-99B9-52F9AE12F97E}D:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe" = protocol=6 | dir=in | app=d:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe |
"TCP Query User{B37975B9-D707-4DC2-ADE4-6A552EF60907}D:\games\dragon age origins\bin_ship\daorigins.exe" = protocol=6 | dir=in | app=d:\games\dragon age origins\bin_ship\daorigins.exe |
"TCP Query User{C92542F2-FEC9-4651-A58A-E6AF0AD209C8}D:\program files (x86)\need for speed(tm) the run\need for speed the run.exe" = protocol=6 | dir=in | app=d:\program files (x86)\need for speed(tm) the run\need for speed the run.exe |
"TCP Query User{F48918BB-CB6E-4DE4-BEA9-14351E8D7CD2}D:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe" = protocol=6 | dir=in | app=d:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe |
"UDP Query User{01855248-B3A4-4744-8741-8C3CBF9AA795}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{256830B7-FE8B-41A4-A3C3-A72A7821234F}D:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe" = protocol=17 | dir=in | app=d:\program files (x86)\gog.com\the witcher 2 enhanced edition\bin\witcher2.exe |
"UDP Query User{3A45B630-5FCE-40B9-A9BF-92C9D0B83A60}G:\point blank garena id\garenapbid\gamedata\garenamessenger.exe" = protocol=17 | dir=in | app=g:\point blank garena id\garenapbid\gamedata\garenamessenger.exe |
"UDP Query User{56C060AD-6B37-4D14-8ED1-31B184DBA7EF}D:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe" = protocol=17 | dir=in | app=d:\games\dead island game of the year edition pc + dlcs ^^nosteam^^\dead island game of the year edition\deadislandgame.exe |
"UDP Query User{58899BB8-AF51-447E-ABA3-282337B49D3A}G:\program files (x86)\l2asia\system\l2.bin" = protocol=17 | dir=in | app=g:\program files (x86)\l2asia\system\l2.bin |
"UDP Query User{7D5BEFC4-E766-4BE0-AA73-21A8857FB602}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe" = protocol=17 | dir=in | app=c:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe |
"UDP Query User{AA7D6CD4-E7FF-46E7-8F77-0F68035C3A57}D:\pro evolution soccer 2016\pes2016.exe" = protocol=17 | dir=in | app=d:\pro evolution soccer 2016\pes2016.exe |
"UDP Query User{C11E7441-1011-402E-850D-B1C35DFF4F49}D:\program files (x86)\pro evolution soccer 2016\pes2016.exe" = protocol=17 | dir=in | app=d:\program files (x86)\pro evolution soccer 2016\pes2016.exe |
"UDP Query User{C2A923FA-ED72-4466-AA6D-73726180A4A0}D:\games\dragon age origins\bin_ship\daorigins.exe" = protocol=17 | dir=in | app=d:\games\dragon age origins\bin_ship\daorigins.exe |
"UDP Query User{D981A2E7-E64C-4E20-95E7-371B5677C30D}D:\program files (x86)\need for speed(tm) the run\need for speed the run.exe" = protocol=17 | dir=in | app=d:\program files (x86)\need for speed(tm) the run\need for speed the run.exe |
"UDP Query User{FCA9FE2B-AA3A-4547-8575-185A13AF96AB}C:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe" = protocol=17 | dir=in | app=c:\program files (x86)\r.g. catalyst\resident evil 5\re5dx10.exe |
"UDP Query User{FFE180A4-1B2E-45A1-91AA-CE87DA2BCA70}E:\my documents\downloads\compressed\rief irc\mirc.exe" = protocol=17 | dir=in | app=e:\my documents\downloads\compressed\rief irc\mirc.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{1E9871B6-7C44-9A3A-A1C0-F9729663C7F5}" = AMD Catalyst Install Manager
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{418EFDFF-7119-71EE-9E3F-D18AC2F92E42}" = AMD Fuel
"{67631D8E-EB7F-5D02-002C-D682BCF1D3EB}" = AMD Accelerated Video Transcoding
"{69045C17-66CE-1316-6CC9-7EA496D1F6EA}" = ccc-utility64
"{6CD32B6F-4807-4C26-B274-4EE75DC335A4}" = AVG 2016
"{8719FCC9-FE23-4CFC-B2D7-9929B799B4B5}" = AVG
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.6
"{94A631D5-B30A-3DD8-B65C-1117C09DA73E}" = Microsoft .NET Framework 4.6
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{A954D353-9DAF-4916-8E71-F1E959EBCD1E}" = STCServ
"{CC7BE036-EA2E-5EED-2820-EF42498025DA}" = AMD Drag and Drop Transcoding
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{DFD2C0B0-664C-4383-B348-2F531462EBAD}" = Intel® CCF Manager
"{FAA6526A-BDA0-4D97-B79F-718937AAFACB}" = FMW 1
"{FFCEA5CD-93FE-F0DB-57AB-0E0A62F0214A}" = AMD Media Foundation Decoders
"A877FD5856151D202B724718A4F58CF0089A558C" = Windows Driver Package - ASUS Tek. Corporation (ATP) Mouse  (07/27/2015 7.0.0.7)
"AVG" = AVG Protection
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.74
"CPUID HWMonitorPro_is1" = CPUID HWMonitor Pro 1.23
"VLC media player" = VLC media player

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{07B98CCD-72B4-7F02-F9C1-B0410BA81580}" = CCC Help Norwegian
"{0D66D9EB-2DAE-599C-92D0-E2E6CCAA0666}" = CCC Help Japanese
"{0f3d8dd5-54af-4404-a01c-4967e485a065}" = Intel® CCF Manager
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6
"{1CA07BFA-8F7C-80CA-0A69-EAA93C7C7744}" = CCC Help Chinese Traditional
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{239D758B-F854-D61D-AC4E-1AAA9654426F}" = CCC Help French
"{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1" = Aegisub 3.2.2
"{2B2782F8-929D-AE80-1297-488D7590D208}" = CCC Help Portuguese
"{31DF9E67-DA8A-5C06-BBAD-3B3BCB5B2304}" = CCC Help Polish
"{3282FBE1-35FC-48D8-98CA-115A5EF1F9B4}" = NVIDIA PhysX
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{473E82D7-79E2-43DF-8FA0-025407C93191}" = BlueStacks Notification Center
"{4D3286A6-F6AB-498A-82A4-E4F040529F3D}" = ASUS Smart Gesture
"{4D3BF70D-19A9-F87B-7B8B-8BADDFF9C8A5}" = CCC Help Finnish
"{51853D9B-0D96-7A31-88D7-8520B50373F0}" = CCC Help Italian
"{52AE8601-EA55-456E-80A9-7FB48E82CF81}_is1" = ASUS PC Link
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{580B86B2-0E0F-996C-0045-38D0B681B16E}" = CCC Help Danish
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{6A0549A9-1B96-498C-ACBC-3943001FEB19}" = Skype™ 7.15
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8624569E-94AE-EF90-92E2-6AD8E5A617ED}" = AMD Catalyst Control Center
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{88B2ABCF-9C00-47C1-8FC4-369B98845DD7}" = Catalyst Control Center - Branding
"{8A6F6649-5244-9C2E-80CD-AD49603321AF}" = CCC Help German
"{8BF66753-6750-D41C-43EB-F64C54A8E80D}" = CCC Help Chinese Standard
"{8EA39464-1316-0125-7FD8-E74B49ADB429}" = CCC Help Turkish
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90D2DF70-F0E8-2CA3-F3B9-DD7CE267BB19}" = Catalyst Control Center Graphics Previews Common
"{9785513D-0335-E199-3AC0-74DF83246F20}" = CCC Help Czech
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A049FD86-61DA-E6DB-2602-0065CB7D4414}" = CCC Help Greek
"{A7B4D968-7FB7-2CD3-9792-5ACCAECAC72E}" = CCC Help Korean
"{AC08BBA0-96B9-431A-A7D0-D8598E493775}_is1" = Resident Evil 5  1.0
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.0
"{AF599C42-A2E5-4251-B7EE-4925A268D7C1}" = Hotspot Shield 5.20.19 Embedded
"{B05FBD47-2A22-2259-E65C-A2D3FB647A6A}" = CCC Help Russian
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B328A1B9-D169-FBA9-F4AF-806E0046F89A}" = CCC Help Spanish
"{B5BE22C7-420A-5F14-A1B9-4AB3F3DE0A3E}" = Catalyst Control Center InstallProxy
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{BDAF092D-6368-432E-A51D-F3837BB717EE}" = Echo of Soul
"{BE73543D-E7A0-01D8-7866-C05693BB6BBE}" = CCC Help English
"{c3bcc1e3-f950-439c-bcae-f01283e9f2a4}_is1" = ASUS Share Link
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{D59CEE5A-645E-44B0-B0BF-39255AB84C56}" = Simple DNSCrypt
"{D9E34320-D91C-E961-D902-B60788EAA26E}" = CCC Help Hungarian
"{DF4CBDE3-8789-A589-46F2-7F5B78092D5F}" = CCC Help Swedish
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = COWON Media Center - jetAudio Plus VX
"{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}" = Far Cry 3
"{EC2D4C8B-D8BF-7E06-C094-26B4CE84BF8C}" = CCC Help Dutch
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FB474A6C-CB62-AA42-A618-2EA58F0F2504}" = Catalyst Control Center Localization All
"{FFB3193B-D922-DD38-B218-EB86DD3F3FAD}" = CCC Help Thai
"7 Sins_is1" = 7 Sins
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"AIDA64 Extreme_is1" = AIDA64 Extreme v5.20
"AIMP3" = AIMP3
"AVG Web TuneUp" = AVG Web TuneUp
"BlueStacks App Player" = BlueStacks App Player
"Cheat Engine 6.5_is1" = Cheat Engine 6.5
"DAEMON Tools Pro Advanced" = DAEMON Tools Pro Advanced
"ENTERPRISE" = Microsoft Office Enterprise 2007
"GameSpy Arcade" = GameSpy Arcade
"Google Chrome" = Google Chrome
"Guitar Pro 5_is1" = Guitar Pro 5.0
"HotspotShield" = Hotspot Shield 5.20.19
"Internet Download Manager" = Internet Download Manager
"Jogotempo" = Jogotempo 4.0.0.0
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.9.5
"LINE" = LINE
"MiniLyrics" = MiniLyrics
"Mozilla Firefox 45.0.1 (x86 id)" = Mozilla Firefox 45.0.1 (x86 id)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"RiseOfNations 1.0" = Microsoft Rise Of Nations
"Steam" = Steam
"Steam App 223530" = Left 4 Dead 2 Beta
"Steam App 431540" = Frosty Kiss
"Steam App 550" = Left 4 Dead 2
"Steam App 730" = Counter-Strike: Global Offensive
"TeamViewer" = TeamViewer 10
"UHJvRXZvbHV0aW9uU29jY2VyMjAxNg==_is1" = Pro Evolution Soccer 2016
"Uninstall - clc" = hohosearch - Uninstall
"Uplay" = Uplay
"WinRAR archiver" = WinRAR 4.20 (32-bit)
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 4/23/2016 11:41:38 AM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/23/2016 11:41:43 AM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: TeamViewer_Service.exe, version: 10.0.47484.0,
 time stamp: 0x55f2f2db  Faulting module name: TeamViewer_Service.exe, version: 10.0.47484.0,
 time stamp: 0x55f2f2db  Exception code: 0x40000015  Fault offset: 0x00334663  Faulting
 process id: 0xdf4  Faulting application start time: 0x01d19d7688bb8910  Faulting application
 path: C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe  Faulting module path:
 C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe  Report Id: e0996317-0969-11e6-80a0-d8cb8a57e3c3

Error - 4/23/2016 10:45:17 PM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/24/2016 2:51:52 AM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: nations.exe, version: 1.13.4.1801, time
 stamp: 0x21544c66  Faulting module name: ntdll.dll, version: 6.1.7601.17514, time
 stamp: 0x4ce7ba58  Exception code: 0xc0000374  Fault offset: 0x000ce653  Faulting process
 id: 0x1100  Faulting application start time: 0x01d19de5477ec1e8  Faulting application
 path: C:\Program Files (x86)\Microsoft Games\Rise of Nations\nations.exe  Faulting
 module path: C:\Windows\SysWOW64\ntdll.dll  Report Id: 05f34edd-09e9-11e6-b5bb-d8cb8a57e3c3

Error - 4/24/2016 11:08:01 AM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/25/2016 2:07:28 AM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: l2.bin, version: 0.0.0.0, time stamp: 0x50721d6e
Faulting
 module name: NWindow.DLL, version: 0.0.0.0, time stamp: 0x50721dad  Exception code:
 0xc0000005  Fault offset: 0x005334f2  Faulting process id: 0x1220  Faulting application
 start time: 0x01d19e3bb288a0d1  Faulting application path: G:\Program Files (x86)\L2Asia\System\l2.bin
Faulting
 module path: G:\Program Files (x86)\L2Asia\System\NWindow.DLL  Report Id: fc4f7b34-0aab-11e6-84e5-d8cb8a57e3c3

Error - 4/25/2016 12:14:01 PM | Computer Name = hemz-PC | Source = Application Error | ID = 1000
Description = Faulting application name: l2.bin, version: 0.0.0.0, time stamp: 0x50721d6e
Faulting
 module name: NWindow.DLL, version: 0.0.0.0, time stamp: 0x50721dad  Exception code:
 0xc0000005  Fault offset: 0x005334f2  Faulting process id: 0x14b4  Faulting application
 start time: 0x01d19f008f55c1d2  Faulting application path: G:\Program Files (x86)\L2Asia\System\l2.bin
Faulting
 module path: G:\Program Files (x86)\L2Asia\System\NWindow.DLL  Report Id: b88f3576-0b00-11e6-84e5-d8cb8a57e3c3

Error - 4/27/2016 3:05:20 AM | Computer Name = hemz-PC | Source = WinMgmt | ID = 10
Description =

Error - 4/27/2016 10:35:13 AM | Computer Name = hemz-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Cryptographic Services failed while processing the OnIdentity() call
 in the System Writer Object.  Details: AddWin32ServiceFiles: Unable to back up image
 of service BugreportW since QueryServiceConfig API failed  System Error: The system
 cannot find the file specified.  .

Error - 4/27/2016 10:59:26 AM | Computer Name = hemz-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Cryptographic Services failed while processing the OnIdentity() call
 in the System Writer Object.  Details: AddWin32ServiceFiles: Unable to back up image
 of service BugreportW since QueryServiceConfig API failed  System Error: The system
 cannot find the file specified.  .

[ System Events ]
Error - 4/27/2016 4:04:14 AM | Computer Name = hemz-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
 storage could not grow due to a user imposed limit.

Error - 4/27/2016 10:16:11 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The Dravsynlether Core service is marked as an interactive service.
  However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:16:13 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The BugreportW service is marked as an interactive service.  However,
 the system is configured to not allow interactive services.  This service may not
 function properly.

Error - 4/27/2016 10:19:44 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7034
Description = The 2d06143005c71a1c1ec2461b0563508c service terminated unexpectedly.
  It has done this 1 time(s).

Error - 4/27/2016 10:51:23 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The Windows Media Player Network Access Service service is marked
as an interactive service.  However, the system is configured to not allow interactive
 services.  This service may not function properly.

Error - 4/27/2016 10:51:24 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7000
Description = The BugreportW service failed to start due to the following error:
   %%3

Error - 4/27/2016 10:51:24 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The Pwtyfemuk Cache service is marked as an interactive service.
However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:51:33 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The GoogleChromeUpService service is marked as an interactive service.
  However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:52:35 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7030
Description = The QQPCMgr RTP Service service is marked as an interactive service.
  However, the system is configured to not allow interactive services.  This service
 may not function properly.

Error - 4/27/2016 10:53:32 AM | Computer Name = hemz-PC | Source = Service Control Manager | ID = 7034
Description = The Receive Sort service terminated unexpectedly.  It has done this
 1 time(s).


< End of report >