• Registrarse
  • Iniciar sesión


  • Página 2 de 4 PrimeroPrimero 1234 ÚltimoÚltimo
    Resultados 11 al 20 de 33

    Problema con ventanas emergentes (eoRezo) y portatil congelado.

    4.1 Reporte OTL (cuarta parte) [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\schemas [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\SchCache [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\Resources ...

    1. #11
      Usuario Avatar de Roxo
      Registrado
      may 2008
      Ubicación
      Irlanda
      Mensajes
      75

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      4.1 Reporte OTL (cuarta parte)

      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\schemas
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\SchCache
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\Resources
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\rescache
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\registration
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\Provisioning
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\PolicyDefinitions
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\etc
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\DriverStore
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\de-DE
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\da-DK
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\cs-CZ
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\config
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\com
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\CodeIntegrity
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot2
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\Boot
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\bg-BG
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\ar-SA
      [2006/11/02 12:18:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\AdvancedInstallers
      [2006/11/02 12:18:35 | 000,000,000 | R-SD | C] -- C:\Windows\Media
      [2006/11/02 12:18:35 | 000,000,000 | R--D | C] -- C:\Windows\Offline Web Pages
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\PLA
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\nap
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\MSAgent
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\ModemLogs
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\Microsoft.NET
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\Logs
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\LiveKernelReports
      [2006/11/02 12:18:35 | 000,000,000 | ---D | C] -- C:\Windows\L2Schemas
      [2006/11/02 12:18:34 | 000,000,000 | --SD | C] -- C:\Windows\Downloaded Program Files
      [2006/11/02 12:18:34 | 000,000,000 | R-SD | C] -- C:\Windows\Fonts
      [2006/11/02 12:18:34 | 000,000,000 | R-SD | C] -- C:\Windows\assembly
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\inf
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\IME
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\Help
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\Globalization
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\Cursors
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\Branding
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\Boot
      [2006/11/02 12:18:34 | 000,000,000 | ---D | C] -- C:\Windows\AppPatch
      [2006/11/02 12:18:33 | 000,000,000 | R--D | C] -- C:\Users
      [2006/11/02 12:18:33 | 000,000,000 | R--D | C] -- C:\Program Files
      [2006/11/02 12:18:33 | 000,000,000 | -H-D | C] -- C:\ProgramData
      [2006/11/02 12:17:19 | 000,000,000 | -HSD | C] -- C:\$Recycle.Bin
      [2006/11/02 11:32:57 | 000,101,888 | ---- | C] (Infineon Technologies AG) -- C:\Windows\System32\ifxcardm.dll
      [2006/11/02 11:32:57 | 000,082,432 | ---- | C] (Gemalto, Inc.) -- C:\Windows\System32\axaltocm.dll
      [2006/11/02 10:38:56 | 000,013,568 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltLo.sys
      [2006/11/02 10:38:00 | 000,011,904 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbSer.sys
      [2006/11/02 10:37:31 | 000,012,160 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbMdm.sys
      [2006/11/02 10:37:24 | 000,005,248 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltUp.sys
      [2006/11/02 10:36:51 | 000,062,336 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerWdm.sys
      [2006/11/02 10:36:34 | 000,017,408 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\brcoinst.dll
      [2006/11/02 10:22:06 | 000,071,808 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerId.sys
      [2006/11/02 08:36:50 | 000,020,608 | ---- | C] (N-trig Innovative Technologies) -- C:\Windows\System32\drivers\ntrigdigi.sys
      [2006/11/02 08:36:49 | 000,071,272 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\djsvs.sys
      [2006/11/02 08:36:48 | 000,238,648 | ---- | C] (ULi Electronics Inc.) -- C:\Windows\System32\drivers\uliahci.sys
      [2006/11/02 08:36:48 | 000,074,808 | ---- | C] (Silicon Integrated Systems) -- C:\Windows\System32\drivers\sisraid4.sys
      [2006/11/02 08:36:45 | 000,035,944 | ---- | C] (Integrated Technology Express, Inc.) -- C:\Windows\System32\drivers\iteatapi.sys
      [2006/11/02 08:36:45 | 000,031,288 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\megasas.sys
      [2006/11/02 08:36:44 | 000,342,584 | ---- | C] (Emulex) -- C:\Windows\System32\drivers\elxstor.sys
      [2006/11/02 08:36:44 | 000,079,928 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arcsas.sys
      [2006/11/02 08:36:44 | 000,079,416 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arc.sys
      [2006/11/02 08:36:44 | 000,035,944 | ---- | C] (Integrated Technology Express, Inc.) -- C:\Windows\System32\drivers\iteraid.sys
      [2006/11/02 08:36:43 | 000,422,968 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adp94xx.sys
      [2006/11/02 08:36:43 | 000,300,600 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpahci.sys
      [2006/11/02 08:36:43 | 000,149,560 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu320.sys
      [2006/11/02 08:36:43 | 000,101,432 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu160m.sys

      ========== Files - Modified Within (All) ==========

      [2013/03/01 21:23:36 | 003,932,160 | -HS- | M] () -- C:\Users\AyR\ntuser.dat
      [2013/03/01 21:15:44 | 012,293,292 | ---- | M] () -- C:\Windows\System32\perfh009.dat
      [2013/03/01 21:15:44 | 011,350,078 | ---- | M] () -- C:\Windows\System32\perfc009.dat
      [2013/03/01 21:15:44 | 000,005,758 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
      [2013/03/01 2137 | 000,027,649 | ---- | M] () -- C:\ProgramData\nvModes.001
      [2013/03/01 21:09:33 | 000,000,433 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.ics
      [2013/03/01 21:09:20 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
      [2013/03/01 21:09:11 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
      [2013/03/01 21:09:11 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
      [2013/03/01 21:09:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
      [2013/03/01 21:09:02 | 3186,683,904 | -HS- | M] () -- C:\hiberfil.sys
      [2013/03/01 19:42:04 | 000,524,288 | -HS- | M] () -- C:\Users\AyR\ntuser.dat{023aab7d-9da1-11e1-9c1a-00214fb4f8b8}.TMContainer00000000000000000001.regtrans-ms
      [2013/03/01 19:42:04 | 000,065,536 | -HS- | M] () -- C:\Users\AyR\ntuser.dat{023aab7d-9da1-11e1-9c1a-00214fb4f8b8}.TM.blf
      [2013/03/01 19:41:44 | 000,002,140 | ---- | M] () -- C:\Windows\bthservsdp.dat
      [2013/03/01 19:41:41 | 004,293,734 | -H-- | M] () -- C:\Users\AyR\AppData\Local\IconCache.db
      [2013/03/01 19:33:15 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
      [2013/03/01 15:54:00 | 000,002,708 | ---- | M] () -- C:\Users\AyR\AppData\Local\d3d9caps.dat
      [2013/03/01 13:22:22 | 000,003,794 | ---- | M] () -- C:\Users\AyR\Desktop\Copia Seguridad CClenaer.reg
      [2013/03/01 13:08:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\AyR\Desktop\OTL.exe
      [2013/03/01 13:07:27 | 001,199,088 | ---- | M] () -- C:\Users\AyR\Desktop\AT-Destroyer.exe
      [2013/03/01 13:04:45 | 000,594,019 | ---- | M] () -- C:\Users\AyR\Desktop\AdwCleaner.exe
      [2013/03/01 13:01:25 | 000,002,591 | ---- | M] () -- C:\Users\AyR\Desktop\Word.lnk
      [2013/02/27 06:00:50 | 000,002,155 | ---- | M] () -- C:\Windows\epplauncher.mif
      [2013/02/22 21:13:28 | 000,020,092 | ---- | M] () -- C:\Users\AyR\Desktop\vestido corte imperio patron.jpg
      [2013/02/22 19:50:10 | 000,002,723 | ---- | M] () -- C:\Users\AyR\Desktop\Outlook.lnk
      [2013/02/22 19:28:48 | 000,000,938 | ---- | M] () -- C:\Users\AyR\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
      [2013/02/20 2133 | 000,000,906 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
      [2013/02/19 21:02:28 | 000,001,878 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
      [2013/02/19 20:49:46 | 000,000,830 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog
      [2013/02/17 09:47:24 | 000,002,595 | ---- | M] () -- C:\Users\AyR\Desktop\Excel.lnk
      [2013/02/16 11:16:05 | 000,338,815 | ---- | M] () -- C:\Users\AyR\AppData\Local\speeddial.crx
      [2013/02/16 11:15:42 | 001,051,984 | ---- | M] (BitTorrent Inc.) -- C:\Users\AyR\Desktop\utorrent.exe
      [2013/02/14 05:47:10 | 003,968,416 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
      [2013/02/07 00:55:15 | 000,193,536 | ---- | M] () -- C:\Users\AyR\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      [2013/01/17 14:43:28 | 000,000,938 | ---- | M] () -- C:\Users\AyR\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
      [2012/12/14 16:49:28 | 000,021,104 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
      [2012/11/23 11:18:17 | 100,053,120 | ---- | M] () -- C:\Users\AyR\Desktop\843ww622.exe
      [2012/11/22 09:28:41 | 004,033,930 | ---- | M] () -- C:\Users\AyR\Desktop\Manual singer.pdf
      [2012/11/15 06:37:04 | 000,000,219 | ---- | M] () -- C:\Windows\win.ini

    2. #12
      Usuario Avatar de Roxo
      Registrado
      may 2008
      Ubicación
      Irlanda
      Mensajes
      75
      4.2 Reporte OTL Extras


      OTL Extras logfile created on: 01/03/2013 21:23:01 - Run 1
      OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\AyR\Desktop
      Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
      Internet Explorer (Version = 7.0.6002.18005)
      Locale: 00001809 | Country: Ireland | Language: ENI | Date Format: dd/MM/yyyy

      2.97 Gb Total Physical Memory | 1.69 Gb Available Physical Memory | 56.91% Memory free
      6.13 Gb Paging File | 4.82 Gb Available in Paging File | 78.63% Paging File free
      Paging file location(s): ?:\pagefile.sys [binary data]

      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
      Drive C: | 286.82 Gb Total Space | 69.12 Gb Free Space | 24.10% Space Free | Partition Type: NTFS

      Computer Name: AYR-LAPTOP | User Name: AyR | Logged in as Administrator.
      Boot Mode: Normal | Scan Mode: All users
      Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 30 Days

      ========== Extra Registry (All) ==========


      ========== File Associations ==========

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
      .bat [@ = batfile] -- "%1" %*
      .chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
      .cmd [@ = cmdfile] -- "%1" %*
      .com [@ = comfile] -- "%1" %*
      .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
      .exe [@ = exefile] -- "%1" %*
      .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
      .hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation)
      .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
      .inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
      .ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
      .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
      .js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
      .jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
      .pif [@ = piffile] -- "%1" %*
      .reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
      .scr [@ = scrfile] -- "%1" /S
      .txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
      .vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
      .vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
      .wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
      .wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)

      [HKEY_USERS\S-1-5-21-2916581329-1141900253-794385938-1000\SOFTWARE\Classes\<extension>]
      .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

      ========== Shell Spawning ==========

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
      batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
      batfile [open] -- "%1" %*
      batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
      chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
      cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
      cmdfile [open] -- "%1" %*
      cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
      comfile [open] -- "%1" %*
      cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
      exefile [open] -- "%1" %*
      helpfile [open] -- Reg Error: Key error.
      hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
      htafile [open] -- C:\Windows\system32\mshta.exe "%1" %* (Microsoft Corporation)
      htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
      htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
      htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
      htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
      http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
      https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
      inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
      inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
      inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
      inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
      inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
      InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
      InternetShortcut [print] -- rundll32.exe C:\Windows\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
      jsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
      jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
      jsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
      jsefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
      jsefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
      jsefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
      piffile [open] -- "%1" %*
      regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
      regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
      regfile [merge] -- Reg Error: Key error.
      regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
      scrfile [config] -- "%1"
      scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
      scrfile [open] -- "%1" /S
      txtfile [edit] -- Reg Error: Key error.
      txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
      txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
      txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
      vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
      vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
      vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
      vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
      vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
      vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
      wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
      wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
      wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
      wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
      Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
      Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
      Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
      Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
      Directory [Digital Photo Professional] -- C:\Program Files\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
      Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
      Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
      Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
      Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
      Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
      Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
      Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
      CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

      ========== Security Center Settings ==========

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
      "cval" = 1

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
      "DisableMonitoring" = 1

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
      "AntiVirusOverride" = 0
      "AntiSpywareOverride" = 0
      "FirewallOverride" = 0
      "VistaSp1" = Reg Error: Unknown registry data type -- File not found
      "VistaSp2" = Reg Error: Unknown registry data type -- File not found

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

      ========== Firewall Settings ==========

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
      "EnableFirewall" = 1
      "DisableNotifications" = 0

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
      "EnableFirewall" = 1
      "DisableNotifications" = 0

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
      "EnableFirewall" = 1
      "DisableNotifications" = 0

      ========== Authorized Applications List ==========


      ========== Vista Active Open Ports Exception List ==========

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
      "{00748400-087D-4D4E-B0A1-8A044EB74CA6}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
      "{0F21A8A5-013E-4A48-841E-4ECD1E109CE7}" = lport=2869 | protocol=6 | dir=in | app=system |
      "{166D6243-2311-4662-9C69-0B5437F4BFA9}" = lport=445 | protocol=6 | dir=in | app=system |
      "{24D4B61C-6604-4357-94DC-A799B8BE4A7A}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
      "{3F07DC04-735F-45BA-B04D-71AC8DD02B06}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
      "{4294149F-1AED-4FDA-B2A6-29914014FF6C}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
      "{44471CDD-3362-499D-9F5C-54539362931E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
      "{559C9E45-A22C-4DAD-8A27-839D2750BDA3}" = rport=137 | protocol=17 | dir=out | app=system |
      "{5E13CAF7-5F18-4B57-BB7F-018BCB36EC9B}" = lport=138 | protocol=17 | dir=in | app=system |
      "{5EDF10A7-7A42-46B8-A97F-1D72C5425EB2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
      "{60723E30-134A-4C53-A1D4-087536FCE9E7}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
      "{6BF97A6B-5973-4C3F-97EE-605A6EE07892}" = rport=139 | protocol=6 | dir=out | app=system |
      "{6DB772A0-6141-4FD3-B1C5-AC6AB21B5735}" = rport=445 | protocol=6 | dir=out | app=system |
      "{742E4B56-0757-4642-A576-468F79FD033F}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
      "{7FDC889F-F922-46EF-9986-6F793EFCB03B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
      "{8EC5ECFA-394D-40FC-AA0F-E337549C4BF1}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
      "{9CE5DE03-1449-4261-B14C-A46F45E14370}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
      "{A0FC6BEB-089E-4966-ABF2-AD89F72BA2F7}" = rport=2869 | protocol=6 | dir=out | app=system |
      "{A1AF98D6-90C1-477A-9BA3-0EAA29ED76C8}" = lport=139 | protocol=6 | dir=in | app=system |
      "{B6E7018B-E7BD-4419-8B2C-2F4D65842DC3}" = rport=138 | protocol=17 | dir=out | app=system |
      "{C331F987-5E46-4EE2-92AA-755526BE4B2B}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
      "{CC37CA2D-E833-4D81-932A-D71671553DCD}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
      "{D15F73DB-6967-46BA-B49C-CB5B69FADCBB}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
      "{D7032C7F-AF33-4319-A7D3-FE8CC92DF9F5}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
      "{D8D3A699-9E09-4871-AAB6-FD37A9335EEC}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
      "{E7C5F28D-7AEB-415F-9F58-7186802C496A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
      "{EA2E00E8-2035-44EA-9422-6A56183969E3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
      "{F40984FD-F7E2-4A75-BCF5-BB75A0FC315F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
      "{FB4475E1-4214-4F87-BE52-F4A9904AC0F7}" = lport=137 | protocol=17 | dir=in | app=system |

      ========== Vista Active Application Exception List ==========

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
      "{009EE26B-E1EC-4BD7-A341-488C6A15499F}" = protocol=17 | dir=in | app=c:\users\ayr\appdata\roaming\dropbox\bin\dropbox.exe |
      "{011629E2-F1FC-48EF-B26E-7E898E96420F}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
      "{1C77BA81-9BE5-4BF3-9960-3EE5FBF2BF9D}" = protocol=58 | dir=in | [email protected],-148 |
      "{1F0908C9-141B-46C4-B658-C67056AE8D4F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
      "{2204FCBC-63D5-4625-B91B-A2A6310FBC69}" = dir=in | app=c:\program files\skype\phone\skype.exe |
      "{23780C7E-5B98-47AE-A296-390777D82F36}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
      "{24CBEC12-23B3-4B5E-9C0F-265822FA611B}" = protocol=58 | dir=out | [email protected],-28546 |
      "{2D7296E7-B866-4DDB-8E01-55C562735AC5}" = protocol=17 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
      "{31BB3688-F97A-4014-A8FF-FED58DFFD271}" = protocol=6 | dir=in | app=c:\program files\google\google talk\googletalk.exe |
      "{42D76409-A463-4518-96AE-2DF0919ECFA2}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
      "{4568E404-C005-4C79-8766-89A304464E6F}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
      "{4A711529-B177-48AA-B2BF-39C0848FF536}" = protocol=1 | dir=in | [email protected],-28543 |
      "{4C06940B-8D4A-49AA-9DB2-88DDFA8F5FFE}" = protocol=6 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe |
      "{502A7D1E-38E5-41D4-B08B-E075E3347584}" = protocol=6 | dir=in | app=c:\users\ayr\appdata\roaming\dropbox\bin\dropbox.exe |
      "{622C596A-0DD6-44CE-A2A4-D3DF69A45A7F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
      "{64C17519-83E5-4E90-BC4C-CA56419D4032}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
      "{6F3D6139-FCAF-4FB0-8A56-1DC71ED9F1F6}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
      "{73128D1C-C9C4-4050-85C2-27F8512358CD}" = protocol=17 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe |
      "{7749599E-51D2-4693-A9B9-D0A11680B491}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
      "{7A63B34F-F404-4968-8E35-62BA64BF9E25}" = protocol=58 | dir=in | [email protected],-28545 |
      "{7BBACE5A-640D-49D2-B97F-778403D4122B}" = protocol=6 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
      "{83C611A5-1B1E-4986-A8A2-BAFAD10463EC}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
      "{84E39FD2-6EA8-4B9D-98E8-D836718536BE}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
      "{85D18836-CC1B-4802-91F9-B8801467B02A}" = protocol=6 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
      "{90775640-736D-437D-821B-9EE7B4E42E5D}" = protocol=1 | dir=out | [email protected],-28544 |
      "{91937B9E-5422-4067-8838-5713C234DD4A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
      "{939B7E06-64B0-4759-9BE5-BB1F05FE408C}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe |
      "{94D29AAF-44E6-4AB2-A779-8A12A613E1AA}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
      "{9609837D-529B-4BF5-ADDA-0F7ADD91BCE5}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
      "{99DF12A7-8543-46EF-A9D3-7E5F308FF3B2}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
      "{A7841862-53AD-4BDA-8133-7B20326F3FC8}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
      "{B05BD668-6871-41E6-81A4-8F88D72FE525}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe |
      "{B23A330B-F330-4BB4-9B95-D191FB65F38A}" = protocol=17 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
      "{C4ADEC35-BBC1-4B0C-ABBB-64FE27FBF667}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
      "{C5E4FF56-952C-44D8-BCF8-BC839A3A188B}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
      "{F1C3A4B2-FF8C-460A-B36D-E4B42021D78F}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
      "{F87F9326-9F8E-4BF2-94DE-990119F97AA2}" = protocol=17 | dir=in | app=c:\program files\google\google talk\googletalk.exe |
      "TCP Query User{11A8318B-3191-4A2A-B2B2-B5B91B3FED54}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
      "TCP Query User{1DEF6F43-226A-405A-B923-26D518A98356}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
      "TCP Query User{258E7205-C5A9-4FFF-8C64-021EBD3E523F}C:\program files\martview\ieembed.exe" = protocol=6 | dir=in | app=c:\program files\martview\ieembed.exe |
      "TCP Query User{4E50FFDF-F45A-4424-BEB4-67C8B6EDC814}C:\users\ayr\desktop\bittorrent_7.6.27028.exe" = protocol=6 | dir=in | app=c:\users\ayr\desktop\bittorrent_7.6.27028.exe |
      "TCP Query User{584A2CB8-D991-48DF-8CF4-33130D1712D2}C:\program files\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\program files\bittorrent\bittorrent.exe |
      "TCP Query User{6AF1472B-2A5A-4F3B-88EA-79E6DB47046E}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe |
      "TCP Query User{73C6B12E-589B-48DC-8470-C43ED9718E26}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe |
      "TCP Query User{7DB4C039-6426-4B9C-9D7A-03AA608153C6}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
      "TCP Query User{7ED8B315-6194-4B3B-9C72-FE87EEAE3A02}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
      "TCP Query User{C14176AC-7EDA-4A31-953B-89A1759D09AA}C:\program files\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
      "TCP Query User{D5D6CCB9-0454-4292-89BB-81333278D518}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
      "TCP Query User{D61C5BED-4533-4414-A6A6-9C5674C4C39A}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe |
      "TCP Query User{EB12E24B-E0E8-4C39-9947-1B79BAB32298}C:\program files\microsoft office\office12\groove.exe" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
      "TCP Query User{EBE918CC-C075-4115-B697-D35D275CFB84}C:\users\ayr\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\ayr\appdata\roaming\dropbox\bin\dropbox.exe |
      "TCP Query User{FC43EA62-A07C-420F-B9A8-250BB8CDED66}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
      "TCP Query User{FE75087A-6A5A-47AB-A75E-188344BD2469}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |
      "UDP Query User{00FEA245-2D7E-4373-B178-B58A02D213C2}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe |
      "UDP Query User{0380ABB8-6911-43A0-8BCE-97AB02ADAFFA}C:\program files\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\program files\bittorrent\bittorrent.exe |
      "UDP Query User{101E4B1D-7031-4FA7-8578-9166B993D9BE}C:\program files\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
      "UDP Query User{2672C620-C241-4123-893F-614B3E3C7B1D}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe |
      "UDP Query User{289703B1-EBD6-45F5-9B8A-3DCDF0B8C136}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
      "UDP Query User{2F096A26-AB38-422A-89EA-1B45A0B5CAAB}C:\program files\martview\ieembed.exe" = protocol=17 | dir=in | app=c:\program files\martview\ieembed.exe |
      "UDP Query User{3CF7F04C-2A76-419E-88DE-A73B5249A889}C:\users\ayr\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\ayr\appdata\roaming\dropbox\bin\dropbox.exe |
      "UDP Query User{5DD94037-872B-4B67-AF33-2707D13D1A62}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |
      "UDP Query User{6C7018D7-413F-43E5-B4AC-260AEF847EC5}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
      "UDP Query User{771B09E9-6B1C-4CB9-89E5-37D8928992E6}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
      "UDP Query User{B2EEF0D6-2268-4E92-BED8-014122C800C4}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
      "UDP Query User{BA0333DE-AC65-4285-976A-04A992477112}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
      "UDP Query User{D1648CB4-FD30-46CD-BE83-F4869EAC61E4}C:\program files\microsoft office\office12\groove.exe" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
      "UDP Query User{D7964F51-75B0-44A1-9EEF-C3B4B5C1C1DC}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe |
      "UDP Query User{DC37904C-FEF8-4891-9DC0-E7335FD376BA}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
      "UDP Query User{E1EBF027-B93B-4DC9-AF9C-5C1C2E275269}C:\users\ayr\desktop\bittorrent_7.6.27028.exe" = protocol=17 | dir=in | app=c:\users\ayr\desktop\bittorrent_7.6.27028.exe |

      ========== HKEY_LOCAL_MACHINE Uninstall List ==========

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
      "{009E7FB7-1775-4D89-8956-F5C9A1C019FC}" = DSD Playback Plug-in
      "{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}" = Sony Video Shared Library
      "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
      "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
      "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
      "{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data
      "{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
      "{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
      "{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
      "{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
      "{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
      "{12D0BE8D-538C-4AB1-86DE-C540308F50DA}" = VAIO Content Metadata Manager Settings
      "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
      "{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
      "{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
      "{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
      "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
      "{18510937-0146-417B-95D8-14706649C384}" = VAIO Content Metadata Manager Settings
      "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
      "{1B47F7BA-7CF9-4F00-9340-099E3A004059}" = VAIO Update Merge Module x86
      "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
      "{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools
      "{2018C019-30D9-4240-8C01-0865C10DCF5A}" = VAIO Presentation Support
      "{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD BD for VAIO
      "{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
      "{23825B69-36DF-4DAD-9CFD-118D11D80F16}" = VAIO Content Folder Setting
      "{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 33
      "{26A24AE4-039D-4CA4-87B4-2F83217013FF}" = Java 7 Update 13
      "{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}" = VAIO Content Metadata XML Interface Library
      "{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
      "{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide 
      "{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
      "{36C31591-9483-45A5-990D-C9E5D4DC5998}" = Style Flocker for InDesign CS3
      "{390DD8BB-BB57-4942-A029-2D913E4E9D74}" = Microsoft Security Client
      "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
      "{3B659FAD-E772-44A3-B7E7-560FF084669F}" = VAIO Smart Network
      "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
      "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
      "{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
      "{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
      "{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
      "{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}" = VAIO Content Metadata Intelligent Analyzing Manager
      "{497A1721-088F-41EF-8876-B43C9DA5528B}" = ArcSoft Software Suite
      "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
      "{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
      "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
      "{4EA55D20-27FB-45D7-8726-147E8A5F6C62}" = VAIO MusicBox
      "{533D0A8A-D7E7-4F15-BC9E-FF2916A6BAA7}" = DSD Direct Player
      "{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Easy Media Creator 10 LJ
      "{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
      "{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}" = VAIO DVD Menu Data Basic
      "{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
      "{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}" =
      "{5F5867F0-2D23-4338-A206-01A76C823924}" = VAIO Power Management
      "{6332AFF1-9D9A-429C-AA03-F82749FA4F49}" = SonicStage Mastering Studio
      "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
      "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
      "{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = Click to Disc
      "{69995C7A-062A-4A90-A4DF-8C22895DF522}" = iTunes
      "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
      "{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}" = Apple Application Support
      "{6B1F20F2-6321-4669-A58C-33DF8E7517FF}" = VAIO Entertainment Platform
      "{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}" = VAIO Movie Story Template Data
      "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
      "{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
      "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
      "{72EEB695-388B-4835-8EA6-0C04545B06B9}" = Intel(R) PROSet/Wireless WiFi Software
      "{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio
      "{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
      "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
      "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
      "{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = Configuración de funciones originales del VAIO
      "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
      "{82D5BACA-3619-4D34-99DB-3A65CFB4DA33}" = DSD Direct
      "{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
      "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
      "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
      "{8BD60AEF-3F9D-47AE-B80A-FB7FFCE335A0}" = VAIO Movie Story
      "{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}" = VAIO Media plus
      "{8EDBA74D-0686-4C99-BFDD-F894678E5102}" = Adobe Common File Installer
      "{90120000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2007
      "{90120000-0015-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007
      "{90120000-0016-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007
      "{90120000-0018-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2007
      "{90120000-0019-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2007
      "{90120000-001A-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007
      "{90120000-001B-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007
      "{90120000-001F-0403-0000-0000000FF1CE}_ENTERPRISE_{BEADB115-DB47-4BD0-A9EC-AE585AFAB2D8}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
      "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
      "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      "{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007
      "{90120000-001F-0416-0000-0000000FF1CE}_ENTERPRISE_{8A524694-0CA4-476A-9301-B1E9D70FC952}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      "{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007
      "{90120000-001F-042D-0000-0000000FF1CE}_ENTERPRISE_{017A6981-5E03-4A97-830A-35FE0927BB7F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      "{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007
      "{90120000-001F-0456-0000-0000000FF1CE}_ENTERPRISE_{A3A03B41-14EA-4E50-97D8-FCF429AE0CCB}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
      "{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
      "{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007
      "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
      "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-0044-0C0A-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Spanish) 2007
      "{90120000-0044-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007
      "{90120000-006E-0C0A-0000-0000000FF1CE}_ENTERPRISE_{430AE3E6-E982-4958-90FC-1C062BC74E22}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-00A1-0C0A-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Spanish) 2007
      "{90120000-00A1-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90120000-00BA-0C0A-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Spanish) 2007
      "{90120000-00BA-0C0A-0000-0000000FF1CE}_ENTERPRISE_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
      "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
      "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
      "{9158FF30-78D7-40EF-B83E-451AC5334640}" = Adobe Photoshop CS5.1
      "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
      "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
      "{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
      "{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}" =
      "{97DF4674-AB43-11D5-91C9-005004F84FA1}" = Dialang V1 Beta
      "{989ED050-E296-4FDC-9E4E-C48B4AF76E32}" = VAIO Content Metadata Intelligent Analyzing Manager
      "{98FC7A64-774B-49B5-B046-4B4EBC053FA9}" = VAIO MusicBox Sample Music
      "{9973498D-EA29-4A68-BE0B-C88D6E03E928}" = ArcSoft WebCam Companion 2
      "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
      "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
      "{9C1C8A04-F8CA-4472-A92D-4288CE32DE86}" = SonicStage Mastering Studio Plugins
      "{A3563827-B0DB-44DC-B037-15CC4E5E692F}" = VAIO Content Metadata XML Interface Library
      "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
      "{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
      "{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
      "{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
      "{AC76BA86-1033-F400-BA7E-000000000003}" = Adobe Acrobat 8 Standard - English, Français, Deutsch
      "{AC76BA86-7AD7-1034-7B44-AA1000000001}" = Adobe Reader X (10.1.6) - Español
      "{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
      "{AEF8B78C-4F3E-41F1-9C2D-88150D4BB3AD}" = Sony Home Network Library
      "{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
      "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
      "{B1991F22-4F93-4D11-9866-A7DFE551DF9E}" = VAIO Content Metadata Intelligent Analyzing Manager
      "{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
      "{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}" = VAIO Movie Story
      "{B3668C08-EBB1-40F4-B4F9-4F8E13501A7D}" = VAIO Entertainment Platform
      "{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
      "{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy
      "{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
      "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
      "{B7C03E84-AF46-42F4-809D-D4127D9086D0}" = VAIO Edit Components 6.4
      "{BACD22AE-5B6B-4F23-B506-3FCFF13AC137}" = VAIO Media plus
      "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
      "{C042D7B5-DC07-4727-8630-89E690D2BAAE}" = MartView
      "{C0482AA0-9CDF-49B4-9B39-551FD1A7A7E6}" = VAIO Movie Story 1.5 Upgrade
      "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
      "{C7477742-DDB4-43E5-AC8D-0259E1E661B1}" = VAIO Event Service
      "{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
      "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
      "{CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}" = WinZip 16.0
      "{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Music Transfer
      "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
      "{CF0F8D1B-5FB9-468D-BD88-E6239906D2B7}" = Click to Disc
      "{D03482C5-9AD8-496D-B388-692AE04C93AF}" = Bonjour
      "{D035FBF6-FDEF-487D-89CA-6F9DD07B783F}" = Dolby Control Center
      "{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}" = Sony Home Network Library
      "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
      "{D2D23D08-D10E-43D6-883C-78E0B2AC9CC6}" = VU5x86
      "{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
      "{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}" = VAIO Wallpaper Contents
      "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
      "{DF0415CC-0563-407F-B560-9B7F277122C5}" = VAIO BD Menu Data
      "{DF7DB916-90E5-40F2-9010-B8125EB5FD6F}" = SonicStage Mastering Studio Audio Filter
      "{E464702F-5433-46EC-8F65-159276C0A54F}" = WIDCOMM Bluetooth Software 6.2.0.4100
      "{E4715C25-7114-4F40-A915-C1951D4D7520}" = VAIO Update Merge Module x86
      "{E6A3770D-C87A-4505-B8C6-A4CF96AC395C}" = SonicStage Mastering Studio
      "{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
      "{E9CBC8FA-BF1F-4956-8B75-0D314682FE5F}" = ArcSoft Panorama Maker 6
      "{EC37A846-53AC-4DA7-98FA-76A4E74AA900}" = SonicStage Mastering Studio Audio Filter Custom Preset
      "{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core
      "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
      "{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" =
      "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
      "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
      "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
      "{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
      "{FE51662F-D8F6-43B5-99D9-D4894AF00F83}" = Roxio Easy Media Creator Home
      "{FFA98080-B0C6-11D5-91CB-005004F84FA1}" = Sun Java Runtime Environment and JMF
      "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
      "Adobe Acrobat 8 Standard - English, Français, Deutsch" = Adobe Acrobat 8.1.5 Standard
      "Adobe Acrobat 8 Standard - English, Français, Deutsch_815" = Adobe Acrobat 8.1.5 - CPSID_49013
      "Adobe AIR" = Adobe AIR
      "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
      "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
      "Adobe_b2d6abde968e6f277ddbfd501383e02" = Adobe Creative Suite 4 Master Collection
      "Autopano Giga" = Autopano Giga
      "AutopanoGiga2.5" = Kolor Autopano Giga 2.5
      "CameraWindowDVC6" = Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
      "CameraWindowLauncher" = Canon Utilities CameraWindow
      "CANON iMAGE GATEWAY Task" = CANON iMAGE GATEWAY Task for ZoomBrowser EX
      "Canon Internet Library for ZoomBrowser EX" = Canon Internet Library for ZoomBrowser EX
      "CanonMyPrinter" = Canon Utilities My Printer
      "CCleaner" = CCleaner
      "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
      "CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
      "dhdiejf" = Favorit
      "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
      "DPP" = Canon Utilities Digital Photo Professional 3.3
      "dt icon module" =
      "Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
      "ENTERPRISE" = Microsoft Office Enterprise 2007
      "EOS Utility" = Canon Utilities EOS Utility
      "Flickr Uploadr" = Flickr Uploadr 3.2.1
      "gtfirstboot Setting Request" =
      "InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD BD for VAIO
      "InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
      "InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
      "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware versión 1.70.0.1100
      "MarketingTools" = VAIO Marketing Tools
      "MFU Module" =
      "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
      "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
      "Microsoft Security Client" = Microsoft Security Essentials
      "Mozilla Firefox 19.0 (x86 es-ES)" = Mozilla Firefox 19.0 (x86 es-ES)
      "MyCamera" = Canon Utilities MyCamera
      "NVIDIA Drivers" = NVIDIA Drivers
      "Original Data Security Tools" = Canon Utilities Original Data Security Tools
      "PhotoStitch" = Canon Utilities PhotoStitch
      "Picture Style Editor" = Canon Utilities Picture Style Editor
      "ProInst" = Intel PROSet Wireless
      "RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
      "Recuva" = Recuva
      "RemoteCaptureTask" = Canon Utilities RemoteCapture Task for ZoomBrowser EX
      "Revo Uninstaller" = Revo Uninstaller 1.94
      "Speccy" = Speccy
      "SynTPDeinstKey" = Synaptics Pointing Device Driver
      "uTorrent" = µTorrent
      "VAIO Help and Support" =
      "VLC media player" = VLC media player 0.9.8a
      "WinRAR archiver" = Compresor WinRAR
      "ZoomBrowser EX" = Canon Utilities ZoomBrowser EX
      "ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility

      ========== HKEY_USERS Uninstall List ==========

      [HKEY_USERS\S-1-5-21-2916581329-1141900253-794385938-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
      "CopyTrans Suite" = Desinstalación de CopyTrans Suite solamente

      ========== Last 20 Event Log Errors ==========

      [ Application Events ]
      Error - 01/03/2013 14:55:25 | Computer Name = AyR-Laptop | Source = WinMgmt | ID = 10
      Description =

      Error - 01/03/2013 15:49:53 | Computer Name = AyR-Laptop | Source = WinMgmt | ID = 10
      Description =

      Error - 01/03/2013 15:50:00 | Computer Name = AyR-Laptop | Source = VzCdbSvc | ID = 7
      Description = Failed to load the plug-in module. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5})(Error
      code = 0x80042019)

      Error - 01/03/2013 15:56:12 | Computer Name = AyR-Laptop | Source = LoadPerf | ID = 3012
      Description =

      Error - 01/03/2013 15:56:12 | Computer Name = AyR-Laptop | Source = LoadPerf | ID = 3011
      Description =

      Error - 01/03/2013 15:57:39 | Computer Name = AyR-Laptop | Source = WinMgmt | ID = 10
      Description =

      Error - 01/03/2013 16:09:24 | Computer Name = AyR-Laptop | Source = WinMgmt | ID = 10
      Description =

      Error - 01/03/2013 16:09:33 | Computer Name = AyR-Laptop | Source = VzCdbSvc | ID = 7
      Description = Failed to load the plug-in module. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5})(Error
      code = 0x80042019)

      Error - 01/03/2013 16:15:40 | Computer Name = AyR-Laptop | Source = LoadPerf | ID = 3012
      Description =

      Error - 01/03/2013 16:15:40 | Computer Name = AyR-Laptop | Source = LoadPerf | ID = 3011
      Description =

      [ OSession Events ]
      Error - 16/03/2012 14:52:44 | Computer Name = AyR-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
      Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
      12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 944
      seconds with 660 seconds of active time. This session ended with a crash.

      Error - 30/08/2012 08:11:27 | Computer Name = AyR-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
      Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
      12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1157
      seconds with 60 seconds of active time. This session ended with a crash.

      [ System Events ]
      Error - 01/03/2013 14:55:25 | Computer Name = AyR-Laptop | Source = Service Control Manager | ID = 7034
      Description =

      Error - 01/03/2013 14:55:25 | Computer Name = AyR-Laptop | Source = Service Control Manager | ID = 7034
      Description =

      Error - 01/03/2013 14:55:25 | Computer Name = AyR-Laptop | Source = Service Control Manager | ID = 7034
      Description =

      Error - 01/03/2013 14:55:25 | Computer Name = AyR-Laptop | Source = Service Control Manager | ID = 7031
      Description =

      Error - 01/03/2013 14:55:25 | Computer Name = AyR-Laptop | Source = Service Control Manager | ID = 7034
      Description =

      Error - 01/03/2013 15:49:36 | Computer Name = AyR-Laptop | Source = EventLog | ID = 6008
      Description = The previous system shutdown at 2050 on 01/03/2013 was unexpected.

      Error - 01/03/2013 15:49:53 | Computer Name = AyR-Laptop | Source = Service Control Manager | ID = 7000
      Description =

      Error - 01/03/2013 15:50:20 | Computer Name = AyR-Laptop | Source = ipnathlp | ID = 31004
      Description = The DNS proxy agent was unable to allocate 0 bytes of memory. This
      may indicate that the system is low on virtual memory, or that the memory manager
      has encountered an internal error.

      Error - 01/03/2013 16:09:07 | Computer Name = AyR-Laptop | Source = EventLog | ID = 6008
      Description = The previous system shutdown at 21:04:15 on 01/03/2013 was unexpected.

      Error - 01/03/2013 16:09:24 | Computer Name = AyR-Laptop | Source = Service Control Manager | ID = 7000
      Description =


      < End of report >

      ***********************************

      Bueno creo que aqui ya esta todo.

      Comentarte que con Malwarebytes Antu Malware solo pude realizar un scaneo rapido, ya que despues de dos horas de escaneo completo y sin haber finalizado se me congelo el equipo...tuve que reiniciarlo desenchufandolo.
      Última edición por @Javier_HF fecha: 04/03/13 a las 15:10:33 Razón: Unir mensajes.

    3. #13
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Spain.
      Mensajes
      21.714

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      Veamos, con Malwarebytes, en los dos análisis que has puesto, tanto el primero como después el segundo, dan este mensaje :
      -> No se tomaron medidas.
      Como te puse en mis indicaciones, tienes que marcar TODO lo que salga y luego "Eliminar lo seleccionado".

      Ademas de hacer esto, intenta pasar el proceso de Malwarebytes desde el >> Modo Seguro – con funciones de Red, de Windows.

      Y ya nos pones el nuevo informe.

      Saludos.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    4. #14
      Usuario Avatar de Roxo
      Registrado
      may 2008
      Ubicación
      Irlanda
      Mensajes
      75

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      hola Javierhf,

      Con el Malwarebytes, me es imposible hacer un analisis completo, ya que como te habia comentado el portatil se bloquea. Cuando intento hacer un analisis completo (ya sea en modo normal o en modo a prueba de fallos) transcurridas casi dos horas y sin haber acabado el analisis, el portatil se congela, es decir se bloquea y no me da opcion ni de apagarlo ni acceder al administracion de taresas (control+alt+supr) y la unica opcion que tengo para apagar el portatil es desenchufandolo.


      Acabo de hacer un analisis rapido con malwarebytes en modo a seguro o a prueba de fallos y no se encontro nada. No tengo ninguna alerta en cuarentena. Te pego el reporte del analisis rapido:


      Malwarebytes Anti-Malware 1.70.0.1100
      Malwarebytes : Free anti-malware download

      Versión de la Base de Datos: v2013.03.05.10

      Windows Vista Service Pack 2 x86 NTFS (Modo Seguro/Red)
      Internet Explorer 7.0.6002.18005
      AyR :: AYR-LAPTOP [administrador]

      06/03/2013 16:25:15
      mbam-log-2013-03-06 (16-25-15).txt

      Tipos de Análisis: Análisis Rápido
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 246378
      Tiempo transcurrido: 5 minuto(s), 4 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Valores del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 0
      (No se han detectado elementos maliciosos)

      Archivos Detectados: 0
      (No se han detectado elementos maliciosos)

      fin)



      Parece que el problema de ventanas emergentes ha mejorado pero como te comento el portatil se bloquea transcurrido cierto tiempo desde que lo inicio ( a veces en 2 o 3 o incluso antes)

      saludos

    5. #15
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Spain.
      Mensajes
      21.714

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      Realiza estos pasos :

      1. - Vas a Mi PC o Equipo, haces click derecho en la unidad C: y luego en Propiedades.
      2. - En la pestaña Herramientas click en el botón Comprobar Ahora.
      3. - Habilita las 2 casillas disponibles, presiona Iniciar, si el proceso no empieza desde windows, saldrá una ventana de advertencia y pulsamos el botón en el cuadro de dialogo.
      4. - Después Reinicia el equipo. Si el disco no se ha comprobado desde windows, se examinara en el próximo reinicio.
      5. - Cuando tu equipo este Reiniciando NO toques ninguna tecla ni tampoco el ratón.

      Fíjate si el proceso indica que se ha producido alguna corrección/error.

      Para verificar errores, si no lograste verlos haz esto >> Inicio > Ejecutar y escribes "eventvwr.msc" sin las comillas, en el apartado Registro de Windows >> Aplicación, buscas un evento con el ID. de tipo 1001 y que corresponda con el "origen/usuario" de nombre "Wininit" y con la fecha y hora aproximada en que se realizo/inicio la comprobación, das doble click en esa línea y ahí veras la información de los pasos realizados en la comprobación.

      Usa la tecla de copia y los pones en tu siguiente respuesta.

      Saludos, Javier.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    6. #16
      Usuario Avatar de Roxo
      Registrado
      may 2008
      Ubicación
      Irlanda
      Mensajes
      75

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      hola javierhf,

      Leyendo en otro foro donde tu dabas indicaciones a un problema similar, vi que tambien recomendabas hacer este paso. Yo lo hice ayer (como tarda).

      Por cierto, no se si te lo habia comentado pero me es imposible pasar el AT-Destroyer en mi equipo...siempre se queda al 98% y no acaba.. tengo que desenchufar para poder reiniciar.

      Bueno al tema... mira este el informe y los detalles que me pides:


      Checking file system on C:
      The type of the file system is NTFS.

      A disk check has been scheduled.
      Windows will now check the disk.
      324992 file records processed. 851 large file records processed. 0 bad file records processed. 0 EA records processed. 76 reparse records processed. 406074 index entries processed. 0 unindexed files processed. 324992 security descriptors processed. Cleaning up 296 unused index entries from index $SII of file 0x9.
      Cleaning up 296 unused index entries from index $SDH of file 0x9.
      Cleaning up 296 unused security descriptors.
      CHKDSK is compacting the security descriptor stream...
      40542 data files processed. CHKDSK is verifying Usn Journal...
      35224704 USN bytes processed. Usn Journal verification completed.
      CHKDSK is verifying file data (stage 4 of 5)...
      Read failure with status 0xc0000185 at offset 0x4df9a3000 for 0x10000 bytes.
      Read failure with status 0xc0000185 at offset 0x4df9b2000 for 0x1000 bytes.
      Windows replaced bad clusters in file 28950
      of name \Windows\winsxs\x86_microsoft-windows-m..components-jetexcel_31bf3856ad364e35_6.0.6001.18000_none_1e0eaa8e423d1548\msexcl40.dll.
      324976 files processed. File data verification completed.
      CHKDSK is verifying free space (stage 5 of 5)...
      18275615 free clusters processed. Free space verification is complete.
      The MFT mirror is different from the MFT.
      Correcting errors in the Master File Table (MFT) mirror.
      Adding 1 bad clusters to the Bad Clusters File.
      Correcting errors in the master file table's (MFT) BITMAP attribute.
      Correcting errors in the Volume Bitmap.
      Windows has made corrections to the file system.

      300755287 KB total disk space.
      227061152 KB in 267584 files.
      149068 KB in 40545 indexes.
      4 KB in bad sectors.
      442603 KB in use by the system.
      65536 KB occupied by the log file.
      73102460 KB available on disk.

      4096 bytes in each allocation unit.
      75188821 total allocation units on disk.
      18275615 allocation units available on disk.

      Internal Info:
      80 f5 04 00 aa b3 04 00 5a 73 08 00 00 00 00 00 ........Zs......
      7e 21 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 ~!..L...........
      42 00 00 00 a2 73 d4 77 b0 8d 1b 00 b0 85 1b 00 B....s.w........

      Windows has finished checking your disk.
      Please wait while your computer restarts.
      Última edición por @Javier_HF fecha: 07/03/13 a las 12:36:56 Razón: Eliminar informacion innecesaria.

    7. #17
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Spain.
      Mensajes
      21.714

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      Perfecto, veo que has estado ágil.

      AT-Destroyer, no lo sigas pasando, en algunos equipos da problemas y se queda parado en algún punto, como te pasa a ti.

      Como has visto, se han realizado correcciones en el disco duro del equipo, ahora vuelve a pasar el Malwarebytes desde el modo seguro de windows y haciendo un análisis completo del equipo.

      Y nos pones el informe del Malwarebytes.

      Saludos.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    8. #18
      Usuario Avatar de Roxo
      Registrado
      may 2008
      Ubicación
      Irlanda
      Mensajes
      75

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      Bueno por fin me deja completar un analisis completo con Malwarebytes...
      A ver lo he pasado en modo seguro y este es el informe:

      Malwarebytes Anti-Malware 1.70.0.1100
      Malwarebytes : Free anti-malware download

      Versión de la Base de Datos: v2013.03.07.03

      Windows Vista Service Pack 2 x86 NTFS (Modo Seguro/Red)
      Internet Explorer 7.0.6002.18005
      AyR :: AYR-LAPTOP [administrador]

      07/03/2013 18:53:52
      mbam-log-2013-03-07 (18-53-52).txt

      Tipos de Análisis: Análisis Completo (C:\|)
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 520436
      Tiempo transcurrido: 1 hora(s), 24 minuto(s), 13 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Valores del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 0
      (No se han detectado elementos maliciosos)

      Archivos Detectados: 0
      (No se han detectado elementos maliciosos)

      fin)





      Saludos

      roxo

    9. #19
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Spain.
      Mensajes
      21.714

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      Perfecto, ahora para revisar y limpiar tu equipo, realiza estos pasos :

      1.- Descarga, instala y/o actualiza pero, no ejecutes aun, las siguientes herramientas :


      2.-
      Ejecuta una por una y en el siguiente orden :

      a) CCleaner.

      • Lo instalas y ejecutas como indica su Manual.
      • Ejecuta CCleaner en sus 2 opciones (Limpiador y Registro) así realizas limpieza de cookies, ficheros temporales e inservibles y también del registro de Windows.


      b)
      Argente-Registry Cleaner.
      • Lo instalas como indica el Manual
      • Lo ejecutas y presionas Iniciar Análisis
      • Cuando termine el análisis presionas Reparar errores seleccionados.


      c)
      Glary Utilities.
      • Instalas y actualizas (Pestaña Estado)
      • En su pestaña Mantenimiento 1-Clic presionas Ver Resultados
      • Cuando termine el escaneo presionas Reparar Problemas
      • En la pestaña Módulos utilizas Limpiador de Disco


      Ejecutas estas tres herramientas varias veces, una por una y en el mismo orden, hasta que veas que no te encuentran prácticamente ningún error.

      3) Descarga el >> Desfragmentador de Disco Duro.

      Con el desfragmentador haces lo mismo pásalo varias veces hasta que veas que te indica que prácticamente no queda espacio fragmentado.

      Coméntanos los Resultados y el Funcionamiento de tu equipo en relación al problema planteado.

      Saludos, Javier.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    10. #20
      Usuario Avatar de Roxo
      Registrado
      may 2008
      Ubicación
      Irlanda
      Mensajes
      75

      Re: Problema con ventanas emergentes (eoRezo) y portatil congelado.

      hola Javierhf,

      He realizado el proceso que me has aconsejado y el rendimiento del del sistema ha mejorado notablemente y ya no se bloquea. Solamente me queda una pequeña duda porque a raiz de este proceso cuando enciendo el portatil me aparece este mensaje:

      "AML has stopped working: A problem caused the program to stop working correctly. Windows will close the the program and notify you if a solution is available."

      Y una única opcion en la ventana que pone "Close Program". La verdad no se muy bien que es esto ya tambien parace que el sistema al iniciar esta bloqueando programas de inicio.

      En el menu de la barra de inicio tambien aparece un icono de Blocked Startup Programs, si accedo me da opciones para ver y quitar o reactivar programas bloqueados.


      Gracias!!!!!
      Saludos