OTL Extras logfile created on: 04/12/2014 10:39:08 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Agnese\Downloads\OTL
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy
 
3,00 Gb Total Physical Memory | 1,54 Gb Available Physical Memory | 51,42% Memory free
6,00 Gb Paging File | 4,26 Gb Available in Paging File | 71,01% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,79 Gb Total Space | 67,78 Gb Free Space | 29,12% Space Free | Partition Type: NTFS
 
Computer Name: AGNESE-PC | User Name: Agnese | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- "C:\Program Files\Opera\Opera.exe" "%1"
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0693BE2F-D627-4291-82F7-A46A8824D0F2}" = lport=137 | protocol=17 | dir=in | app=system | 
"{0D53F213-7F14-4002-990B-224A8F5C3F7E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{289BA137-C97A-4859-A9DC-704BF1A5A920}" = lport=445 | protocol=6 | dir=in | app=system | 
"{350BA9D2-7CE1-4B3D-9270-555AE26FA71D}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{3A7AB728-98FC-4A3C-A3D3-8A51F3F9146D}" = lport=49306 | protocol=6 | dir=in | name=akamai netsession interface | 
"{44E383B1-1281-4B90-85B7-42C278D7CB16}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
"{56FF6B8A-F150-4967-AE23-99F0A82BE379}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{57B9FC99-492B-461F-A958-6BCDD1928321}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{5DC79BA4-D43C-4EC1-ADB9-EA305EBED095}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{677A9372-7AB7-4BEA-8F00-687D080663F2}" = rport=137 | protocol=17 | dir=out | app=system | 
"{68447610-55AF-40AD-B65F-A82B744C7003}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{6DC66F56-6560-4798-8BEB-0CBE4AAD3F30}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{737F5A5D-738A-408D-9B8D-9ED2A7E1E0B4}" = lport=139 | protocol=6 | dir=in | app=system | 
"{8224A3BF-3F0D-4992-8A52-59B88DE85B10}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | 
"{8501B13D-B904-47A9-8E1B-5E5E6A1F341B}" = lport=58340 | protocol=6 | dir=in | name=pando media booster | 
"{85655851-5BE2-4C59-8693-C9B894B825D5}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{869D5AE4-8558-45BC-B4A7-F9D8D448B37D}" = lport=58340 | protocol=17 | dir=in | name=pando media booster | 
"{88AD0C53-3662-43F5-939B-B7C3A0CFFA19}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{8DB7A927-8DBA-42DF-9AD0-B87D4022AA0D}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{A5DDD6D9-16C6-46C2-85F5-DCB7AE1583F1}" = lport=58340 | protocol=17 | dir=in | name=pando media booster | 
"{A8249D40-5128-4C1D-9101-700C7BD60E40}" = lport=58340 | protocol=6 | dir=in | name=pando media booster | 
"{AD09ECD7-6FB4-47CB-AC80-D53306E8B061}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{B0F9F061-734E-46E4-AA09-04DA3BDFD3E4}" = rport=138 | protocol=17 | dir=out | app=system | 
"{B22C1183-A7A0-47DF-B57E-63AF14C42BA1}" = lport=138 | protocol=17 | dir=in | app=system | 
"{C5172A4D-7A30-4197-A45C-AF9D22EA3B98}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D05AB605-F680-4DBC-A7EC-72D41D9A0935}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{D53E20EA-3738-45E0-8E82-DA2ABE2D3566}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D8CAC98D-8730-44F1-9325-5D91F8A2CBE8}" = rport=139 | protocol=6 | dir=out | app=system | 
"{EB094CFE-448F-440F-9A98-86260ADAACA6}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{FDE72B06-6FD3-4419-9FEF-CF9485A94CFF}" = rport=445 | protocol=6 | dir=out | app=system | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0510ECDF-E5F6-4ED8-8A61-F84906D6D3C1}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{067BBBC5-0532-4F32-BF85-777D1D0E2E56}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{08969287-C6F6-4126-829F-34D2DB16D772}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{09EBD6C3-CEC6-4171-92B5-2B3211F73453}" = protocol=17 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe | 
"{0B139CA8-612F-4453-8E23-DC9C62CD79BC}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{0D1A3B6F-B943-4D49-B380-DBF5C779FE73}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{1566E6C0-AE61-4E7E-8207-DD2D9A9568F0}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{164DB581-1E7E-420A-A599-D859D7010BFA}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{18482C7A-2697-4271-A3B9-C9E01E2A4CDA}" = protocol=6 | dir=in | app=c:\program files\world of warcraft\launcher.exe | 
"{1915DDD8-D706-455C-99F4-7B74EEC10DE4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1C705D59-5747-4868-A68E-F8573EEF106D}" = protocol=6 | dir=in | app=c:\users\agnese\appdata\local\google\chrome\application\chrome.exe | 
"{219D1577-00EE-41FC-B125-DB96F9AD7673}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{25D55524-D32B-425C-824F-0407FBEEDCC4}" = protocol=6 | dir=in | app=c:\users\agnese\appdata\local\temp\dsoclient\dlcache\app.n3app | 
"{28AEC025-A0B5-4564-BAA3-8222EC3D2A96}" = protocol=17 | dir=in | app=c:\program files\gamersfirst\apb reloaded\binaries\apb.exe | 
"{337190F9-C541-4FA9-B49D-F31B53941EE8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{362D043B-965F-4759-A683-63CEE2D80AD6}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe | 
"{3A78E78D-285E-4F2F-8F3C-B6826F8B446C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{3C4C62FA-FD97-43F5-BB3A-2ADFD5E8F616}" = protocol=6 | dir=in | app=c:\program files\point blank italia\pointblank.exe | 
"{40224E5E-50C1-4F7F-ACFD-15D1026EB468}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpiscnapp.exe | 
"{42E11A26-DB74-4E4C-8861-4F0888A8E370}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{42E4DFD5-1FDA-4162-8004-D4E54F878181}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{50CB5AD9-01EB-4B61-8B0C-D62A14330714}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{51CCBA27-7935-40BD-ACF2-473B95B99AE4}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{567CA014-210B-451C-9AE9-57189A9DD2D3}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{5AD504CC-A261-4E61-8CED-30F0FFF47C2A}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"{5B55D07F-3044-4955-819E-2671FF5FBBA7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{5F9697EE-ABBF-420B-9E85-2546203DC200}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{6113823D-471E-4BA1-A7D6-08A563B36E00}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\mediabar\datamngr\toolbar\dtuser.exe | 
"{614586E1-37CB-4032-91AD-06CCCE875592}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpfccopy.exe | 
"{616C89FA-B9AA-4680-A91D-8C859246B04D}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\mediabar\datamngr\toolbar\dtuser.exe | 
"{66103A9B-B3DA-44AD-A9C1-EAF979FE8F68}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{67613909-AF76-476C-BC58-12D75137564B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{80015745-7D8C-4D8F-9CCA-76752994A66C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{8422B5CF-D08C-46D3-9799-F7005022EBF6}" = protocol=17 | dir=in | app=c:\program files\gamersfirst\apb reloaded\binaries\vivoxvoiceservice.exe | 
"{8457FF81-5939-49EF-8CE6-CABFE00DBF65}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{8682B8A2-8D06-40C9-88BD-716CF954C6C5}" = protocol=6 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe | 
"{87A9F7C3-73E8-4E3A-A240-585C06964CE7}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{8A323CF4-6FC4-49B2-A069-D5309BD308F9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{8B6AC9D7-53EE-4CEE-8F49-390324F11E00}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{943DA31F-EF80-42F8-A00C-B2E0E262A907}" = protocol=17 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"{9629FF77-305D-44A2-A577-28D71EA918B2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{972914CD-EDB8-4263-9508-E36173822051}" = protocol=6 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"{973A9303-4C50-4D30-AD45-679D1A2331EB}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"{99AA8CF5-4285-431C-998D-829AED312C67}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{9A63FECE-D99D-443C-BBE8-A7DAF2748DA2}" = protocol=17 | dir=in | app=c:\users\agnese\appdata\local\google\chrome\application\chrome.exe | 
"{A2A9D3B2-BF68-470F-AC7A-69A1E4743AE2}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{A700C52C-92DC-4E6C-9F46-67E7BFBBEE6C}" = protocol=17 | dir=in | app=c:\program files\world of warcraft\launcher.exe | 
"{ABE18275-0B73-4851-80EE-71AA5D3179D0}" = protocol=17 | dir=in | app=c:\users\agnese\appdata\local\temp\dsoclient\dlcache\app.n3app | 
"{ACD02156-CA91-4C1E-9BBF-A5463862EB2D}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{ACF7BC5E-60CE-4CED-9992-6973AC3005FC}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{B00F22F0-A909-4606-893B-6608DB092099}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{B48FAC4D-42FC-49A9-962A-B63ADA4ABEC6}" = protocol=17 | dir=in | app=c:\program files\world of warcraft\launcher.patch.exe | 
"{B7806A53-8E38-4085-A49D-D76AA9847434}" = protocol=17 | dir=in | app=c:\program files\point blank italia\pointblank.exe | 
"{B7A00C9E-7A4C-4750-B382-BEFD9F26D732}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{BCCDFD01-CA30-4FA9-B4BB-8419639CB841}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{C0E10097-0EE4-4C7B-B345-65D1F84DE58A}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{C2A6EE33-AEB7-479C-9110-59D1BCFFC960}" = protocol=6 | dir=in | app=c:\program files\world of warcraft\launcher.patch.exe | 
"{C9489C70-3A18-471F-8E51-18FD706C2877}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{C95CF7E1-8FBA-449A-8C3F-D5BA198EEDD3}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{CFCCE2B5-6B23-4A83-823D-1A30928BB13B}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{D0870960-ECFB-423B-85F5-3458D97C631E}" = protocol=6 | dir=in | app=c:\program files\gamersfirst\apb reloaded\binaries\apb.exe | 
"{D0EB837A-F34D-4E6E-8188-25E3EEE8C1C1}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{D2D51AF3-A1BA-4091-B5D3-EAC711918B62}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{D36FBE20-DE0C-4A92-A202-5183EAFB206D}" = protocol=6 | dir=in | app=c:\program files\gamersfirst\apb reloaded\binaries\vivoxvoiceservice.exe | 
"{D5E1C5B4-8ACD-4269-8AD9-8B98F4416C35}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D7AB69D0-5297-4718-863C-BD5DBCCEA8E1}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{DFCD88F8-EF09-4E5E-9001-6D53999626D3}" = protocol=6 | dir=out | app=system | 
"{E670DB6F-8818-4B29-972C-DB6FFBA39677}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"{E9702650-5E1B-4085-B92A-E8C139B3173E}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{E9ACAFF4-0C30-4E84-BDE7-9A4DFF0B2673}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{ED06965D-1F46-47D2-BB58-1B97FB9F2B2E}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{F154B771-1A08-40D4-B417-F064A0403B54}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{F23F5FCA-41EA-41F9-888B-DE984A2DA8D5}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{F5829ED8-70AB-41AE-876C-F30D22B64166}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{F6A19ED8-8D6F-4F43-AB46-6D0DC375FAB0}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{FB9DC19D-7D60-4A8F-8708-EA26A1C4CA03}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{FC6DEE85-6ED7-47D3-B9F1-7C3734D7DE2F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{FF2E3234-8FAC-4FD2-A82B-82AEFB19CC96}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"TCP Query User{179C1BA1-5415-4EDC-8F72-B93C35A3DB8B}C:\program files\kbot\kopenstealth 1.34\kopenstealth.exe" = protocol=6 | dir=in | app=c:\program files\kbot\kopenstealth 1.34\kopenstealth.exe | 
"TCP Query User{2CC11EF5-25C6-40DB-A6BC-8B95DBA8B533}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{2ECDE95A-A821-48C3-9F72-636F55D2FA5C}C:\program files\kbot\kopenstealth 1.34\kbotcc.exe" = protocol=6 | dir=in | app=c:\program files\kbot\kopenstealth 1.34\kbotcc.exe | 
"TCP Query User{383CD700-B572-47BF-98F5-39BD2120F477}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{3EE4E34E-0FE0-49C9-A33E-8D383D09AD55}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{41AE06F9-F628-490F-8BE8-9DD08999B00A}C:\program files\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files\xfire\xfire.exe | 
"TCP Query User{430B47C2-18C2-41DA-8E4F-CACE80F5484A}C:\program files\profibot\openstealth 1.21\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.21\openstealth.exe | 
"TCP Query User{4A4624DA-2F5F-4F8B-8AAE-7D0241918CD4}C:\program files\gamespy\comrade\comrade.exe" = protocol=6 | dir=in | app=c:\program files\gamespy\comrade\comrade.exe | 
"TCP Query User{4DDC426C-B9D0-494D-9CEE-22EFF45CB25E}C:\program files\imesh applications\imesh\imesh.exe" = protocol=6 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"TCP Query User{510AC167-2F9C-41F0-93F3-F6C07C28EBF4}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | 
"TCP Query User{531F59D6-CEE6-46F4-B324-340DDF0C10C6}C:\program files\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\backgrounddownloader.exe | 
"TCP Query User{55EA15EB-1D83-4C10-A1DF-A65F26EA466B}C:\program files\profibot\openstealth 1.27\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.27\openstealth.exe | 
"TCP Query User{572600C1-791D-4803-BA8C-96FEA6896859}C:\program files\profibot\openstealth 1.68\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.68\openstealth.exe | 
"TCP Query User{5ECBF5D2-1A4C-4043-96BA-14B2F1C84F0E}C:\soldat\soldat.exe" = protocol=6 | dir=in | app=c:\soldat\soldat.exe | 
"TCP Query User{709B070D-1FF2-4BB0-B8D9-358AA886441D}C:\program files\profibot\openstealth 1.28\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.28\openstealth.exe | 
"TCP Query User{770E93D4-E9F4-4762-B2A5-1D628F0A3C54}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{896C091A-A870-46B0-8C2C-33A59A59BBF7}C:\program files\profibot\openstealth 1.22\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.22\openstealth.exe | 
"TCP Query User{A2A10590-ECEF-49FC-BA0D-D8AD3D743484}C:\program files\profibot\openstealth 1.26\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.26\openstealth.exe | 
"TCP Query User{A88EBE21-953B-447C-9572-42C218378CF2}C:\program files\profibot\openstealth 1.25\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.25\openstealth.exe | 
"TCP Query User{C91882A8-3B33-4C68-A0ED-41FF1BB7B319}C:\program files\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe | 
"TCP Query User{CB06F10A-7C8B-445F-976F-DDC4286E7EE4}C:\program files\profibot\openstealth 1.23\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.23\openstealth.exe | 
"TCP Query User{D0288A82-F5C8-4D74-8F0F-29C669CD6FC7}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | 
"TCP Query User{D4B67161-374D-45DE-B50B-668DC9992427}C:\program files\profibot\openstealth 1.70\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.70\openstealth.exe | 
"TCP Query User{D552D7BB-AD14-4745-B8F2-2DB0D5FA18C6}C:\users\agnese\desktop\123141dish0ned\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=c:\users\agnese\desktop\123141dish0ned\dishonored\binaries\win32\dishonored.exe | 
"TCP Query User{ECAAC3F2-F240-47F6-9AAD-1347EDF7D1DA}C:\program files\profibot\openstealth 1.55\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.55\openstealth.exe | 
"TCP Query User{EFBF8A4E-7ED9-4C9E-8806-1053A3B0FA7F}C:\program files\profibot\openstealth 1.69\openstealth.exe" = protocol=6 | dir=in | app=c:\program files\profibot\openstealth 1.69\openstealth.exe | 
"UDP Query User{20A67A7D-0CF5-496F-B087-095B6517CAF6}C:\program files\profibot\openstealth 1.22\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.22\openstealth.exe | 
"UDP Query User{2FC8F6D6-22CC-48CD-BC00-85130C720D0F}C:\program files\profibot\openstealth 1.23\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.23\openstealth.exe | 
"UDP Query User{3E672B0C-B019-4F3E-BD99-C85AA626648E}C:\program files\imesh applications\imesh\imesh.exe" = protocol=17 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe | 
"UDP Query User{43F399D5-1C69-4556-9B60-EFA7683478D8}C:\program files\profibot\openstealth 1.21\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.21\openstealth.exe | 
"UDP Query User{442A824B-A200-4FC0-8843-045154268D55}C:\program files\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\backgrounddownloader.exe | 
"UDP Query User{464C923D-F7ED-48E1-AD50-087AAB55E0DD}C:\program files\profibot\openstealth 1.28\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.28\openstealth.exe | 
"UDP Query User{4D821BF0-2705-4A3D-B7C1-254702E13A38}C:\program files\kbot\kopenstealth 1.34\kbotcc.exe" = protocol=17 | dir=in | app=c:\program files\kbot\kopenstealth 1.34\kbotcc.exe | 
"UDP Query User{619EBFB5-ECE7-46A9-BF0D-6A0F1A15E336}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{689E3FB8-1730-4BD3-BD26-AF7399124416}C:\program files\profibot\openstealth 1.70\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.70\openstealth.exe | 
"UDP Query User{6F600025-69B8-4185-AAD8-3A0E5FC35375}C:\program files\profibot\openstealth 1.69\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.69\openstealth.exe | 
"UDP Query User{70BE503A-B142-4604-9456-8B8B28BB816D}C:\program files\profibot\openstealth 1.26\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.26\openstealth.exe | 
"UDP Query User{75888D38-2072-42E8-A564-88622F92728F}C:\program files\kbot\kopenstealth 1.34\kopenstealth.exe" = protocol=17 | dir=in | app=c:\program files\kbot\kopenstealth 1.34\kopenstealth.exe | 
"UDP Query User{7CCAACFE-A306-46BA-82EF-7B592AA6753E}C:\program files\gamespy\comrade\comrade.exe" = protocol=17 | dir=in | app=c:\program files\gamespy\comrade\comrade.exe | 
"UDP Query User{83D3072C-7FB1-432D-96DF-3165EAEB1070}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{8455C19C-B79D-494B-8DA0-C1B9C828F6F9}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | 
"UDP Query User{8B7F5D47-330D-4A00-AFE4-B6BBDD143881}C:\program files\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe | 
"UDP Query User{9C833517-D660-4F99-B3A8-3B3AB43E088F}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{A1AFCE53-3F7A-4C7E-8C5A-16E0FD5257B8}C:\program files\profibot\openstealth 1.27\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.27\openstealth.exe | 
"UDP Query User{A4F170E9-AEBF-43C2-8A39-A42C88CDCABA}C:\program files\profibot\openstealth 1.68\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.68\openstealth.exe | 
"UDP Query User{AF1E6717-4CFD-4E49-9417-FD2C1384CDF9}C:\soldat\soldat.exe" = protocol=17 | dir=in | app=c:\soldat\soldat.exe | 
"UDP Query User{BA5EFDB7-AE61-4FE2-9747-E7ECDA5B4414}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{BCF39C61-11E8-4EB5-AF23-96818BB0222B}C:\users\agnese\desktop\123141dish0ned\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=c:\users\agnese\desktop\123141dish0ned\dishonored\binaries\win32\dishonored.exe | 
"UDP Query User{C20D7C46-C658-4707-ACC6-F982B021D151}C:\program files\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files\xfire\xfire.exe | 
"UDP Query User{D7131DC1-2041-464B-B725-6FC6A920450D}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | 
"UDP Query User{ED00FB29-1BB6-4E3C-87D7-66DA611B70E5}C:\program files\profibot\openstealth 1.55\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.55\openstealth.exe | 
"UDP Query User{FD364323-D3CA-4529-A120-9EDFD7A6B013}C:\program files\profibot\openstealth 1.25\openstealth.exe" = protocol=17 | dir=in | app=c:\program files\profibot\openstealth 1.25\openstealth.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01B91C29-337A-1FFD-7CFC-473451D2F861}" = AppPitooU
"{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B500125-92A7-40BF-ACF0-45A9221ADE21}_is1" = PowerOffer 2.0
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}" = Google Earth
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 6.20
"{268278CF-FB69-4D98-B70E-BFEC1CDCA225}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java(TM) 6 Update 32
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox
"{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}" = SmartSound Quicktracks 5
"{32714140-CBC5-3FAF-BFC2-3A7376C3EECF}" = Microsoft .NET Framework 4 Client Profile ITA Language Pack
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{43E57D32-0C22-4E90-8332-AA3B445E4CEC}_is1" = SGC 2.0.1.248
"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Supporto applicazioni Apple
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{5546F4E9-B0F4-4F54-B949-2AB006C9284F}" = DJ_AIO_06_F2400_SW_Min
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf}" = Fast And Safe
"{60FFB3E0-6D5B-4D73-AE5B-07E58B83AF0C}" = 32 Bit HP CIO Components Installer
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6AEFCA01-8DF1-11E1-A17B-F04DA23A5C58}" = Vegas Pro 11.0
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{6E8AFC13-F7B8-41D8-88AB-F1D0CFC56305}" = Windows Live Messenger
"{6EB5DB54-4B19-4AC9-9AE3-8514709FFCBA}_is1" = VidPlaya versione 1.0.1
"{70CB6C40-8DF1-11E1-BDCF-F04DA23A5C58}" = MSVCRT Redists
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{819CA3BC-2FF8-4811-B42F-421F7BFD3559}" = HP Deskjet F2400 All-in-One Driver 14.0 Rel. 6
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0015-0410-0000-0000000FF1CE}" = Microsoft Office Access MUI (Italian) 2007
"{90120000-0015-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0410-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Italian) 2007
"{90120000-0016-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0410-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Italian) 2007
"{90120000-0018-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0410-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Italian) 2007
"{90120000-0019-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0410-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Italian) 2007
"{90120000-001A-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0410-0000-0000000FF1CE}" = Microsoft Office Word MUI (Italian) 2007
"{90120000-001B-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0410-0000-0000000FF1CE}" = Microsoft Office Proofing (Italian) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0410-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Italian) 2007
"{90120000-0044-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0410-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Italian) 2007
"{90120000-006E-0410-0000-0000000FF1CE}_ENTERPRISE_{C0C7E58F-D0A1-4102-855B-0B7AA2E8F1C1}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0410-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Italian) 2007
"{90120000-00A1-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0410-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Italian) 2007
"{90120000-00BA-0410-0000-0000000FF1CE}_ENTERPRISE_{7F40286D-09A7-4DC0-A2A4-AA18D026D369}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Centro gestione dispositivi Windows Mobile
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel(R) Matrix Storage Manager
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A5355F15-F98B-4704-9BAE-E53B9FE48F48}" = SDFormatter
"{A6629839-6636-4998-95D6-2B0F52141861}_is1" = SGC 2.0.1.250
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-7AD7-1040-7B44-AA1000000001}" = Adobe Reader X (10.1.12) - Italiano
"{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}" = Nokia Connectivity Cable Driver
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}" = siaver Box
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}" = WinZip 14.5
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF097717-F174-4144-954A-FBC4BF301040}" = Nero 7 Premium
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DEA314C4-0929-4250-BC92-98E4C105F28D}" = NVIDIA PhysX
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E6C44758-FF49-47D1-8182-65E3818ACE23}" = AuthenTec TrueSuite
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL
"{FC445A2F-2571-40C4-AA7A-41F3B9EFC5EC}" = S4 League_EU
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"7289-1030-5602-7421" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 15 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 15 Plugin
"Akamai" = Akamai NetSession Interface
"DivX Setup.divx.com" = DivX Setup
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Gadu-Gadu 10" = Gadu-Gadu 10
"HyperCam 2" = HyperCam 2
"Hyperionics DB Toolbar" = Hyperionics DB Toolbar
"InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}" = SmartSound Quicktracks 5
"InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"KLiteCodecPack_is1" = K-Lite Codec Pack 10.6.5 Full
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile ITA Language Pack" = Microsoft .NET Framework 4 Client Profile - Language Pack (ITA)
"Mozilla Firefox 30.0 (x86 it)" = Mozilla Firefox 30.0 (x86 it)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA Drivers" = NVIDIA Drivers
"PhotoScape" = PhotoScape
"PunkBusterSvc" = PunkBuster Services
"RealPlayer 15.0" = RealPlayer
"SearchProtect" = Search Protect
"Soldat_is1" = Soldat 1.6.3
"SupTab" = SupTab
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"VLC media player" = VLC media player 1.1.9
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.11 (32-bit)
"WNLT" = IB Updater Service
"Xvid_is1" = Xvid MPEG-4 Video Codec
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-3345188048-2503292345-2761132505-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"337Games" = 337 GAMES
"Google Chrome" = Google Chrome
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"UnityWebPlayer" = Unity Web Player
"Video Player" = Video Player
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 03/12/2014 12:42:07 | Computer Name = Agnese-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Le stringhe relative alle prestazioni nel valore Performance del Registro
 di sistema sono state danneggiate durante l'elaborazione dell'estensione del provider
 contatori Performance. Il valore BaseIndex è il primo valore DWORD della sezione
 Data, il valore LastCounter è il secondo valore DWORD della sezione Data e il valore
 LastHelp è il terzo valore DWORD della sezione Data.
 
Error - 03/12/2014 12:42:07 | Computer Name = Agnese-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Le stringhe relative alle prestazioni nel valore Performance del Registro
 di sistema sono state danneggiate durante l'elaborazione dell'estensione del provider
 contatori Performance. Il valore BaseIndex è il primo valore DWORD della sezione
 Data, il valore LastCounter è il secondo valore DWORD della sezione Data e il valore
 LastHelp è il terzo valore DWORD della sezione Data.
 
Error - 03/12/2014 12:42:07 | Computer Name = Agnese-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Scaricamento delle stringhe dei contatori delle prestazioni per il
 servizio WmiApRpl (WmiApRpl) non riuscito. Il primo valore DWORD nella sezione 
Data contiene il codice di errore.
 
Error - 03/12/2014 19:34:07 | Computer Name = Agnese-PC | Source = SideBySide | ID = 16842785
Description = Generazione del contesto di attivazione non riuscita per "c:\Users\Agnese\AppData\Local\Temp\7zS7DC2\setup\hpzdui40.exe".
Impossibile
 trovare l'assembly dipendente Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Utilizzare
 sxstrace.exe per ottenere una diagnosi dettagliata.
 
Error - 03/12/2014 19:34:07 | Computer Name = Agnese-PC | Source = SideBySide | ID = 16842785
Description = Generazione del contesto di attivazione non riuscita per "c:\Users\Agnese\AppData\Local\Temp\7zS7DC2\setup\hpznui40.exe".
Impossibile
 trovare l'assembly dipendente Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Utilizzare
 sxstrace.exe per ottenere una diagnosi dettagliata.
 
Error - 03/12/2014 19:34:07 | Computer Name = Agnese-PC | Source = SideBySide | ID = 16842785
Description = Generazione del contesto di attivazione non riuscita per "c:\Users\Agnese\AppData\Local\Temp\7zS7DC2\setup\hpzpnp40.exe".
Impossibile
 trovare l'assembly dipendente Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Utilizzare
 sxstrace.exe per ottenere una diagnosi dettagliata.
 
Error - 03/12/2014 19:34:07 | Computer Name = Agnese-PC | Source = SideBySide | ID = 16842785
Description = Generazione del contesto di attivazione non riuscita per "c:\Users\Agnese\AppData\Local\Temp\7zS7DC2\setup\hpzprl40.exe".
Impossibile
 trovare l'assembly dipendente Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Utilizzare
 sxstrace.exe per ottenere una diagnosi dettagliata.
 
Error - 03/12/2014 19:34:08 | Computer Name = Agnese-PC | Source = SideBySide | ID = 16842785
Description = Generazione del contesto di attivazione non riuscita per "c:\Users\Agnese\AppData\Local\Temp\7zS7DC2\setup\hpzscr40.exe".
Impossibile
 trovare l'assembly dipendente Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Utilizzare
 sxstrace.exe per ottenere una diagnosi dettagliata.
 
Error - 03/12/2014 19:34:08 | Computer Name = Agnese-PC | Source = SideBySide | ID = 16842785
Description = Generazione del contesto di attivazione non riuscita per "c:\Users\Agnese\AppData\Local\Temp\7zS7DC2\setup\hpzshl40.exe".
Impossibile
 trovare l'assembly dipendente Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Utilizzare
 sxstrace.exe per ottenere una diagnosi dettagliata.
 
Error - 03/12/2014 19:35:31 | Computer Name = Agnese-PC | Source = SideBySide | ID = 16842785
Description = Generazione del contesto di attivazione non riuscita per "c:\program
 files\alaplaya\S4League\Aegis64.exe".  Impossibile trovare l'assembly dipendente 
Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Utilizzare
 sxstrace.exe per ottenere una diagnosi dettagliata.
 
[ System Events ]
Error - 28/11/2014 07:56:26 | Computer Name = Agnese-PC | Source = Service Control Manager | ID = 7023
Description = Servizio Akamai NetSession Interface terminato con l'errore:   %%126
 
Error - 28/11/2014 07:56:39 | Computer Name = Agnese-PC | Source = Service Control Manager | ID = 7000
Description = Il servizio rimmptsk non è stato avviato per il seguente errore:   %%1058
 
Error - 28/11/2014 07:56:39 | Computer Name = Agnese-PC | Source = Service Control Manager | ID = 7000
Description = Il servizio rimsptsk non è stato avviato per il seguente errore:   %%1058
 
Error - 01/12/2014 05:12:22 | Computer Name = Agnese-PC | Source = BTHUSB | ID = 327697
Description = Errore indeterminato della scheda Bluetooth locale. Tale scheda non
 verrà utilizzata. Il driver è stato scaricato.
 
Error - 01/12/2014 06:31:31 | Computer Name = Agnese-PC | Source = BTHUSB | ID = 327697
Description = Errore indeterminato della scheda Bluetooth locale. Tale scheda non
 verrà utilizzata. Il driver è stato scaricato.
 
Error - 01/12/2014 06:43:22 | Computer Name = Agnese-PC | Source = BTHUSB | ID = 327697
Description = Errore indeterminato della scheda Bluetooth locale. Tale scheda non
 verrà utilizzata. Il driver è stato scaricato.
 
Error - 03/12/2014 12:36:17 | Computer Name = Agnese-PC | Source = EventLog | ID = 6008
Description = Precedente arresto del sistema inatteso a 17:32:42 su ?03/?12/?2014.
 
Error - 03/12/2014 12:36:19 | Computer Name = Agnese-PC | Source = Service Control Manager | ID = 7023
Description = Servizio Akamai NetSession Interface terminato con l'errore:   %%126
 
Error - 03/12/2014 12:36:25 | Computer Name = Agnese-PC | Source = Service Control Manager | ID = 7000
Description = Il servizio rimmptsk non è stato avviato per il seguente errore:   %%1058
 
Error - 03/12/2014 12:36:25 | Computer Name = Agnese-PC | Source = Service Control Manager | ID = 7000
Description = Il servizio rimsptsk non è stato avviato per il seguente errore:   %%1058
 
 
< End of report >