Hace unos dias, comprobe que no me iba bien el ares despues de observar este mensaje:

"3ivx Evaluation Period"

The 3ivx Audio decorder evaluation period is only valid for 30 days. This period has now expired, sorry.

Es como si se me hubiera acabado el periodo de prueba del programa, pero claro, el programa lleva instalado en mi pc desde hace 2 años. Lo desintale y me lo baje de nuevo de otras paginas de internet. Pero el resultado es el mismo, a las 24 horas o 2 o tres dias tengo que volver a desinstalarlo.

En la ventana de descargas se puede observar que los archivos se encuentran en estado de: conectado o buscando.

Alguien sabe cual es el problema? hay alguna versión mas actualizada que la 2.0.9.3030?

Desinstala el programa que tengas,pasale despues el ccleaner y vuelve a instalarlo desde Aqui.Ya nos contaras.Es recomendable no bajarse programas (demos,periodo de prueba).

salu2 arag

¿Quieres ganar dinero escribiendo sobre tus aficiones? - www.Redactores.es

Si si, ya lo hice leyendo una contestación tuya a otra persona que tenía problemas con el ares. Lo hice lo desinstale, le pase el ccleaner y volvi a instalarlo de la pagina q dices, pero me sigue saliendo el mismo mensaje. De todas maneras la solucion como parche es esta, pero con el tiempo y despues de haber hecho varias desinstalaciones, me vuelve a salir los mismo.

espero no sea algo de este tema: http://www.forospyware.com/archive/t-54225.html, puedes probar a limpiar todo por si acaso o si quieres deja el log del hijackthis...ya veremos que pasa.

salu2 arag

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:01:04, on 25/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\Archivos de programa\Eset\nod32kui.exe
C:\Archivos de programa\Java\j2re1.4.2_15\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Archivos de programa\Java\j2re1.4.2_15\bin\jucheck.exe
C:\Archivos de programa\Spybot - Search & Destroy\TeaTimer.exe
C:\Archivos de programa\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\Archivos de programa\Eset\nod32krn.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Ares\Ares.exe
C:\Archivos de programa\eMule\emule.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\WinRAR\WinRAR.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.es/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [nod32kui] "C:\Archivos de programa\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\j2re1.4.2_15\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Archivos de programa\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\user1\CONFIG~1\Temp\IXP000.TMP\"
O4 - HKLM\..\RunOnce: [wextract_cleanup2] rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\user1\CONFIG~1\Temp\IXP000.TMP\"
O4 - HKCU\..\Run: [ares] "C:\Archivos de programa\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Archivos de programa\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Archivos de programa\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\j2re1.4.2_15\bin\npjpi142_15.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\j2re1.4.2_15\bin\npjpi142_15.dll
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Archivos de programa\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Archivos de programa\Eset\nod32krn.exe

--
End of file - 5919 bytes

Hola dukeberwick

Realiza lo siguiente:
Desactivar TeaTimer de SpyBot S&D:

• -Ejecuta Spybot S&D
• Haz clic en Modo y seleccionar Modo Avanzado
  
• Aparecerá un advertencia, presionar en Si
• En la parte izquierda del programa hay un pequeño menú
• Seleccionar la opción Herramientas
• Estando en Herramientas selecciona Residente
• Hay dos opciones en Residente que son:
  • Residente "SDHelper" (Bloquea descargas malignas en Internet Explorer) activa
  • Residente "TeaTimer" (Protección de la conflagración del sistema) activa
    • Si tiene marcada la opción #2 de TeaTimer desmarcarla para que no interfiera en el proceso de limpieza.
    • Reiniciar su maquina para que los cambios surtan efecto antes de ejecutar HijackThis.

Apagar restaurar sistema
Inicia en modo seguro

• Ejecutar HiJackThis , presionar el botón Do a system scan only
• Marcar los siguientes items:
  O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
  • Presionar el botón Fix checked

Reiniciar en Modo normal y luego descarga, instala, actualiza y ejecuta MalwareBytes Anti-Malware, pon atención en la opción "Uso de la herramienta", me pegas el log que te genere llamado "mbam-log-x-xx-xxxx (xx-xx-xx)"

Ve a Inicio->Panel de control->Agregar o quitar programas y busca este programa y desinstalalo: Ares

• -Descarga la herramienta RegSearch y guárdalo en el escritorio.
• Clic derecho en el escritorio, en las pestañas seleccionas Nuevo, luego seleccione Carpeta.
• Haga clic derecho sobre esa nueva carpeta y seleccione Cambiar nombre, cambia el nombre por el de RegSearch, descomprime el contenido de regsearch.zip a la carpeta que creastes llamada RegSearch.
• Abra la carpeta de RegSearch y haz doble clic en el icono RegSearch.exe para lanzar el programa.
• Copea y pega las siguientes cadenas para buscarla en el registro, pega el siguiente nombre en la parte superior del espacio, a continuación, haz clic en Aceptar.
  
  

• Después de terminar la búsqueda, el Bloc de notas se abrirá con todos las entradas encontrados de la cadena.
• El archivo resultante se guarda en el mismo lugar donde guardases el RegSearch.exe.
• Copea y pega toda la búsqueda de resultados en su próxima respuesta.

Pegar los reportes/logs de:

HJT
MBAM
RegSearch

Salu2!

Mensaje modificado por Felipex el Apr 26 2008, 02:15 AM

Vale hice lo que me dijiste hasta reiniciar en modo seguro. Pero tengo un problema:

al darle al enter en modo seguro, la pantalla se me queda totalmente en negro con una raya de cursor blanca parpadeando y no se inicia el ordenador (no me ha pasado nunca)

vale, vale ya me va, perdona el log es: mbam-log-4-26-2008 (19-55-00)

Malwarebytes' Anti-Malware 1.11
Versión de la Base de Datos: 685

Tipo de examen : Examen Completo (C:\|F:\|)
Objetos examinados: 82741
Tiempo transcurrido: 1 hour(s), 10 minute(s), 48 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 0
Ficheros Infectados: 0

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
(No se han detectado elementos maliciosos)

------------------------------------------------------

(parece que no sale nada no?)

Y aqui tienes el log de RegSearch

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.5.0

; Results at 26/04/2008 20:05:32 for strings:
; 'ares'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


[HKEY_LOCAL_MACHINE\SOFTWARE\Ares Tube]

[HKEY_LOCAL_MACHINE\SOFTWARE\Ares Tube]
"Path"="c:\\Ares Tube"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.arescol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.arescol]
@="Ares.CollectionList"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.arlnk]
@="Ares.Arlnk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx]
@="Ares.Playlist"
"MPlayer2.BAK"="Ares.Playlist"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u]
@="Ares.Playlist"
"MPlayer2.BAK"="Ares.Playlist"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pls]
@="Ares.Playlist"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.torrent]
@="Ares.Torrent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax]
@="Ares.Playlist"
"MPlayer2.BAK"="Ares.Playlist"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Ares.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Ares.exe\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Ares.exe\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Ares.exe\shell\open\command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Ares.exe\shell\open\command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Arlnk]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Arlnk]
@="URL:Ares protocol"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Arlnk\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Arlnk\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Arlnk\shell\open\command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Arlnk\shell\open\command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" \"%L\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\Content Type]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\Content Type]
@="application/x-ares"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\DefaultIcon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\DefaultIcon]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\",0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\shell\open\command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.CollectionList\shell\open\command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist]
@="Ares playlist file"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\DefaultIcon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\DefaultIcon]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\",0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Enqueue]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Enqueue]
@="&Enqueue in Ares"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Enqueue\Command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Enqueue\Command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" /ADD \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Open\Command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Open\Command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Play]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Play]
@="&Play in Ares"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Play\Command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Playlist\Shell\Play\Command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent\Content Type]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent\DefaultIcon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent\DefaultIcon]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\",0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent\shell\open\command]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ares.Torrent\shell\open\command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Arlnk]
@="URL:Ares protocol"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Arlnk\shell\open\command]
@="\"C:\\Archivos de programa\\Ares\\Ares.exe\" \"%L\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BDATuner.AuxiliaryInTuningSpace]
@="Espacio de sintonía de entradas auxiliares del modelo de sintonía BDA"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BDATuner.AuxiliaryInTuningSpace.1]
@="Espacio de sintonía de entradas auxiliares del modelo de sintonía BDA"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F9769A06-7ACA-4E39-9CFB-97BB35F0E77E}]
@="Espacio de sintonía de entradas auxiliares del modelo de sintonía BDA"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{172F71CD-A452-4005-8E3E-7BCEAE124D53}]
@="IFsaResource"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{27F72BA5-B1C5-4708-8700-D950B9EAE27B}]
@="IFsaResourcePriv"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{932666EB-2A46-4E1B-B01D-F42AF1B05F3C}]
@="IVssDifferentialSoftwareSnapshotMgmt"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9593A157-44E9-4344-BBEB-44FBF9B06B10}]
@="IVssHardwareSnapshotProvider"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BDEADE9A-C265-11D0-BCED-00A0C90AB50F}]
@="_IOWSPostDataResponse"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FBE2D3E8-4C8C-4464-9FE9-C3B6AE023357}]
@="IVssSoftwareSnapshotProvider"

[HKEY_LOCAL_MACHINE\SOFTWARE\Eset\Nod\CurrentVersion\Modules\Imon\Settings]
"UserAgentList"="Adobe Update Manager 5\\AdobeUpdater.exe|Client\\iexplore.exe|contype\\iexplore.exe|eMule\\emule.exe|Hattrick Control 2.12\\HattrickControl.exe|IS Download DLL\\sbsd152upd.tmp|IS Download DLL\\spybotsd152.tmp|Logitech Video\\msnmsgr.exe|Microsoft BITS/6.6\\svchost.exe|Microsoft Data Access Internet Publishing Provider Protocol Dis|Microsoft Internet Explorer\\iexplore.exe|Microsoft Office Protocol Discovery\\WINWORD.EXE|Microsoft-CryptoAPI/5.131.2600.2180\\iexplore.exe|Microsoft-CryptoAPI/5.131.2600.2180\\mscorsvw.exe|Microsoft-CryptoAPI/5.131.2600.2180\\printfilterpipelinesvc.exe|Microsoft-CryptoAPI/5.131.2600.2180\\setup.exe|Microsoft-CryptoAPI/5.131.2600.2180\\WLSetupSvc.exe|Mozilla/4.0\\Ares Tube.exe|Mozilla/4.0\\Ares.exe|Mozilla/4.0\\CCleaner.exe|Mozilla/4.0\\HattrickControl.exe|Mozilla/4.0\\HijackThis.exe|Mozilla/4.0\\iexplore.exe|Mozilla/4.0\\jucheck.exe|Mozilla/4.0\\mbam.exe|Mozilla/4.0\\msnmsgr.exe|Mozilla/4.0\\SUPERAntiSpyware.exe|Mozilla/4.0\\VegasMovieStudioPE80.exe|Mozilla/4.0\\WINWORD.EXE|Mozilla/4.0\\wmplayer.exe|Mozilla/5.0\\SDUpdate.exe|MSDW\\Dashboard.exe|MSDW\\dwwin.exe|MSDW\\wmplayer.exe|MSMSGS\\msmsgs.exe|MSMSGS\\msnmsgr.exe|MSN_SL/3.1 Microsoft-Windows/5.1\\msn_sl.exe|Nero StartSmart\\NeroStartSmart.exe|NOD32 Update\\nod32krn.exe|NSPlayer/11.0.5721.5145 WMFSDK/11.0\\IEXPLORE.EXE|NSPlayer/11.0.5721.5145 WMFSDK/11.0\\wmplayer.exe|NSPlayer/11.0.5721.5145\\IEXPLORE.EXE|SABUPDATE\\SSUPDATE.EXE|SfMarket\\vegas80.exe|SfMarket\\VegasMovieStudio80.exe|SfMarket\\VegasMovieStudioPE80.exe|SfRegister\\vegas80.exe|SfRegister\\VegasMovieStudio80.exe|SfRegister\\VegasMovieStudioPE80.exe|Shockwave Flash\\IEXPLORE.EXE|sonyprereqdownloader\\Setup.exe|SUPERADBLOCKER\\SUPERAntiSpyware.exe|Windows Live Setup 2.0\\msg5F0.exe|Windows Live Setup 2.0\\WLinstaller[1].exe|Windows-Media-DRM/11.0.5721.5145\\wmplayer.exe|Windows-Media-Player/11.0.5721.5230\\IEXPLORE.EXE|Windows-Media-Player/11.0.5721.5230\\wmplayer.exe|Windows-Update-Agent\\svchost.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication]
"Name"="Ares.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name"="Ares.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectMusic\SoftwareSynths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectMusic\SoftwareSynths\{58C2B4D0-46E7-11D1-89AC-00A0C9054129}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetDDE\DDE Shares]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetDDE\DDE Shares\Chat$]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetDDE\DDE Shares\CLPBK$]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetDDE\DDE Shares\Hearts$]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ares Tube_is1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Thickets]
"Text"="Administración de pares de páginas Web y carpetas"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\activexsoftwares.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\activexsoftwares.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adwaresafety.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adwaresafety.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\Antispywaresuite.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\Antispywaresuite.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ares-freebie.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ares-freebie.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ares-usa.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ares-usa.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\arespro2007.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\arespro2007.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aresultra.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aresultra.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cleansoftwares.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cleansoftwares.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\click-new-download.com\ares]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\click-new-download.com\www.ares]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\downloadaresnow.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\downloadaresnow.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\free-bearshares.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\free-bearshares.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hardwareseek.net]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\Lastsoftwares.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\Lastsoftwares.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\nospywaresoft.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\nospywaresoft.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\softwaresite.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\softwaresite.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\SpywareScraper.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\SpywareScraper.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywaresheriff.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywaresheriff.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\dl2]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\dl3]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\dl4]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\dl5]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\dl6]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\dl7]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\dl8]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spywarestrike.com\www]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares Tube_is1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares Tube_is1]
"Inno Setup: App Path"="c:\\Ares Tube"
"InstallLocation"="c:\\Ares Tube\\"
"Inno Setup: Icon Group"="Ares Tube"
"DisplayName"="Ares Tube 3.2"
"UninstallString"="\"c:\\Ares Tube\\unins000.exe\""
"QuietUninstallString"="\"c:\\Ares Tube\\unins000.exe\" /SILENT"
"Publisher"="Ares Tube"
"URLInfoAbout"="http://ares.mp3.es"
"HelpLink"="http://ares.mp3.es"
"URLUpdateInfo"="http://ares.mp3.es"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit\Reg Values\MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionShares]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones]
"Display_UnInstall_6"="(GMT+02:00) Bucarest"
"Display_UnInstall_46"="(GMT+02:00) Atenas, Bucarest, Estambul"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GTB Standard Time]
"Display"="(GMT+02:00) Atenas, Bucarest, Estambul"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaCategories\{DFF21CE2-F70F-11D0-B917-00A0C9223196}]
"Name"="Auriculares"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaCategories\{DFF21DE2-F70F-11D0-B917-00A0C9223196}]
"Name"="Auriculares con micro"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\acm]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\acm\msacm.l3acm]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\acm\msacm.msaudio1]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\ANDRETTI.EXE34492A63000BEA00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\CARN2.EXE37EB70B500014000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\CMMOVIE.EXE37D906F40000B000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\DD2.EXE3288834400092BF0]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\DD2H.EXE328882C500092DF8]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\FIFARTWC.EXE345FB52D00183C00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\FIFAWC.EXE35320039001AE400]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\FIFAWIN.EXE325FC5F4000F2200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\FIFAWIN.EXE32665883000F2200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\FROGGER2.EXE39AFD5020008F000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\FURBY.EXE37CEF14100108000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\GAMEMAIN.EXE35C90A8A00223C00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\HH2002.EXE3A9A1B9800506577]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\HOCKEY.EXE32348F190017A800]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\LEGACY.EXE347B57D00006D200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\LIBRARY.EXE371B6D8C00116800]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\MAGESLAY.EXE34146DD300112000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\MICKEYK.EXE37489012001F3292]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\MICKEYP.EXE37489012001F328A]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\MICKEYT.EXE37489012001C293C]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NBAWIN.EXE3299791300186200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NBAWIN.EXE343FC9AF001FF400]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NFS.EXE31C4F35C00105000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NFS.EXE325328050011CC00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NFS2SEA.EXE342709E1000EE200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NFS2SEN.EXE34270ABA000DBC00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NHL98.EXE340F99AF001CF800]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\NUKEPC.EXE3431F0600011515C]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\PARK.EXE36CB498E0010C000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\PIT DROIDS.EXE37B9DC1C000BA02D]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\SAW_GAME.EXE353D11FB0020CA00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\TIME32.EXE33EE7C1E000D8400]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\TP98_R.EXE3372E28300165C00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\TP99_R.EXE350265F8001AD000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\TPLAYW.EXE31F3EE2D0011D600]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Application Compatibility\UNREAL.EXE355F016600006000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Device Presence]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Mixer Defaults]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSoundCapture]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\Joystick]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\Joystick\Dinput.dll]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\msvideo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application]
; Contents of value:
; WSH
; WMIAdapter
; WmdmPmSN
; WinMgmt
; Winlogon
; Windows Product Activation
; Windows 3.1 Migration
; WebClient
; VSS
; VBRuntime
; Userinit
; Userenv
; Tlntsvr
; System.ServiceModel.Install 3.0.0.0
; System.ServiceModel 3.0.0.0
; System.Runtime.Serialization 3.0.0.0
; System.IO.Log 3.0.0.0
; System.IdentityModel 3.0.0.0
; SysmonLog
; Starter
; SQLCTR$SONY_MEDIAMGR
; SQLAgent$SONY_MEDIAMGR
; SpoolerCtrs
; SONY_MEDIAMGR
; Software Restriction Policies
; Software Installation
; ServiceModel Audit 3.0.0.0
; SecurityCenter
; SclgNtfy
; SceSrv
; SceCli
; safrslv
; SAFrdms
; RPC
; Remote Assistance
; PerfProc
; PerfOS
; PerfNet
; Perfmon
; Perflib
; PerfDisk
; Perfctrs
; Outlook
; Offline Files
; Oakley
; ntbackup
; NeroCheck
; MSSQLServerADHelper
; MSSQLSERVER/MSDE
; MSSOAP
; MsiInstaller
; MSDTC Client
; MSDTC
; MSDMine
; mnmsrvc
; Microsoft.Transactions.Bridge 3.0.0.0
; Microsoft Office 11
; Microsoft H.323 Telephony Service Provider
; Microsoft ® Visual C# 2005 Compiler
; LoadPerf
; HelpSvc
; Folder Redirection
; File Deployment
; EventSystem
; ESENT
; DrWatson
; DiskQuota
; DataTransformationServices
; crypt32
; COM+
; COM
; Ci
; Chkdsk
; CardSpace 3.0.0.0
; AutoEnrollment
; Autochk
; ATI Smart
; ASP.NET 2.0.50727.0
; AresChatServer
; Application Management
; Application Hang
; Application Error
; .NET Runtime Optimization Service
; .NET Runtime 2.0 Error Reporting
; .NET Runtime
; Application
;
"Sources"=hex(7):57,00,53,00,48,00,00,00,57,00,4d,00,49,00,41,00,64,00,61,00,\
70,00,74,00,65,00,72,00,00,00,57,00,6d,00,64,00,6d,00,50,00,6d,00,53,00,4e,\
00,00,00,57,00,69,00,6e,00,4d,00,67,00,6d,00,74,00,00,00,57,00,69,00,6e,00,\
6c,00,6f,00,67,00,6f,00,6e,00,00,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,\
00,20,00,50,00,72,00,6f,00,64,00,75,00,63,00,74,00,20,00,41,00,63,00,74,00,\
69,00,76,00,61,00,74,00,69,00,6f,00,6e,00,00,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,33,00,2e,00,31,00,20,00,4d,00,69,00,67,00,72,00,61,00,\
74,00,69,00,6f,00,6e,00,00,00,57,00,65,00,62,00,43,00,6c,00,69,00,65,00,6e,\
00,74,00,00,00,56,00,53,00,53,00,00,00,56,00,42,00,52,00,75,00,6e,00,74,00,\
69,00,6d,00,65,00,00,00,55,00,73,00,65,00,72,00,69,00,6e,00,69,00,74,00,00,\
00,55,00,73,00,65,00,72,00,65,00,6e,00,76,00,00,00,54,00,6c,00,6e,00,74,00,\
73,00,76,00,72,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,53,00,65,\
00,72,00,76,00,69,00,63,00,65,00,4d,00,6f,00,64,00,65,00,6c,00,2e,00,49,00,\
6e,00,73,00,74,00,61,00,6c,00,6c,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,\
00,30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,53,00,65,00,72,00,\
76,00,69,00,63,00,65,00,4d,00,6f,00,64,00,65,00,6c,00,20,00,33,00,2e,00,30,\
00,2e,00,30,00,2e,00,30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,\
52,00,75,00,6e,00,74,00,69,00,6d,00,65,00,2e,00,53,00,65,00,72,00,69,00,61,\
00,6c,00,69,00,7a,00,61,00,74,00,69,00,6f,00,6e,00,20,00,33,00,2e,00,30,00,\
2e,00,30,00,2e,00,30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,49,\
00,4f,00,2e,00,4c,00,6f,00,67,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,\
30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,49,00,64,00,65,00,6e,\
00,74,00,69,00,74,00,79,00,4d,00,6f,00,64,00,65,00,6c,00,20,00,33,00,2e,00,\
30,00,2e,00,30,00,2e,00,30,00,00,00,53,00,79,00,73,00,6d,00,6f,00,6e,00,4c,\
00,6f,00,67,00,00,00,53,00,74,00,61,00,72,00,74,00,65,00,72,00,00,00,53,00,\
51,00,4c,00,43,00,54,00,52,00,24,00,53,00,4f,00,4e,00,59,00,5f,00,4d,00,45,\
00,44,00,49,00,41,00,4d,00,47,00,52,00,00,00,53,00,51,00,4c,00,41,00,67,00,\
65,00,6e,00,74,00,24,00,53,00,4f,00,4e,00,59,00,5f,00,4d,00,45,00,44,00,49,\
00,41,00,4d,00,47,00,52,00,00,00,53,00,70,00,6f,00,6f,00,6c,00,65,00,72,00,\
43,00,74,00,72,00,73,00,00,00,53,00,4f,00,4e,00,59,00,5f,00,4d,00,45,00,44,\
00,49,00,41,00,4d,00,47,00,52,00,00,00,53,00,6f,00,66,00,74,00,77,00,61,00,\
72,00,65,00,20,00,52,00,65,00,73,00,74,00,72,00,69,00,63,00,74,00,69,00,6f,\
00,6e,00,20,00,50,00,6f,00,6c,00,69,00,63,00,69,00,65,00,73,00,00,00,53,00,\
6f,00,66,00,74,00,77,00,61,00,72,00,65,00,20,00,49,00,6e,00,73,00,74,00,61,\
00,6c,00,6c,00,61,00,74,00,69,00,6f,00,6e,00,00,00,53,00,65,00,72,00,76,00,\
69,00,63,00,65,00,4d,00,6f,00,64,00,65,00,6c,00,20,00,41,00,75,00,64,00,69,\
00,74,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,30,00,00,00,53,00,65,00,\
63,00,75,00,72,00,69,00,74,00,79,00,43,00,65,00,6e,00,74,00,65,00,72,00,00,\
00,53,00,63,00,6c,00,67,00,4e,00,74,00,66,00,79,00,00,00,53,00,63,00,65,00,\
53,00,72,00,76,00,00,00,53,00,63,00,65,00,43,00,6c,00,69,00,00,00,73,00,61,\
00,66,00,72,00,73,00,6c,00,76,00,00,00,53,00,41,00,46,00,72,00,64,00,6d,00,\
73,00,00,00,52,00,50,00,43,00,00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,20,\
00,41,00,73,00,73,00,69,00,73,00,74,00,61,00,6e,00,63,00,65,00,00,00,50,00,\
65,00,72,00,66,00,50,00,72,00,6f,00,63,00,00,00,50,00,65,00,72,00,66,00,4f,\
00,53,00,00,00,50,00,65,00,72,00,66,00,4e,00,65,00,74,00,00,00,50,00,65,00,\
72,00,66,00,6d,00,6f,00,6e,00,00,00,50,00,65,00,72,00,66,00,6c,00,69,00,62,\
00,00,00,50,00,65,00,72,00,66,00,44,00,69,00,73,00,6b,00,00,00,50,00,65,00,\
72,00,66,00,63,00,74,00,72,00,73,00,00,00,4f,00,75,00,74,00,6c,00,6f,00,6f,\
00,6b,00,00,00,4f,00,66,00,66,00,6c,00,69,00,6e,00,65,00,20,00,46,00,69,00,\
6c,00,65,00,73,00,00,00,4f,00,61,00,6b,00,6c,00,65,00,79,00,00,00,6e,00,74,\
00,62,00,61,00,63,00,6b,00,75,00,70,00,00,00,4e,00,65,00,72,00,6f,00,43,00,\
68,00,65,00,63,00,6b,00,00,00,4d,00,53,00,53,00,51,00,4c,00,53,00,65,00,72,\
00,76,00,65,00,72,00,41,00,44,00,48,00,65,00,6c,00,70,00,65,00,72,00,00,00,\
4d,00,53,00,53,00,51,00,4c,00,53,00,45,00,52,00,56,00,45,00,52,00,2f,00,4d,\
00,53,00,44,00,45,00,00,00,4d,00,53,00,53,00,4f,00,41,00,50,00,00,00,4d,00,\
73,00,69,00,49,00,6e,00,73,00,74,00,61,00,6c,00,6c,00,65,00,72,00,00,00,4d,\
00,53,00,44,00,54,00,43,00,20,00,43,00,6c,00,69,00,65,00,6e,00,74,00,00,00,\
4d,00,53,00,44,00,54,00,43,00,00,00,4d,00,53,00,44,00,4d,00,69,00,6e,00,65,\
00,00,00,6d,00,6e,00,6d,00,73,00,72,00,76,00,63,00,00,00,4d,00,69,00,63,00,\
72,00,6f,00,73,00,6f,00,66,00,74,00,2e,00,54,00,72,00,61,00,6e,00,73,00,61,\
00,63,00,74,00,69,00,6f,00,6e,00,73,00,2e,00,42,00,72,00,69,00,64,00,67,00,\
65,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,30,00,00,00,4d,00,69,00,63,\
00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,66,00,66,00,69,00,63,00,\
65,00,20,00,31,00,31,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,\
00,74,00,20,00,48,00,2e,00,33,00,32,00,33,00,20,00,54,00,65,00,6c,00,65,00,\
70,00,68,00,6f,00,6e,00,79,00,20,00,53,00,65,00,72,00,76,00,69,00,63,00,65,\
00,20,00,50,00,72,00,6f,00,76,00,69,00,64,00,65,00,72,00,00,00,4d,00,69,00,\
63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,28,00,52,00,29,00,20,00,56,\
00,69,00,73,00,75,00,61,00,6c,00,20,00,43,00,23,00,20,00,32,00,30,00,30,00,\
35,00,20,00,43,00,6f,00,6d,00,70,00,69,00,6c,00,65,00,72,00,00,00,4c,00,6f,\
00,61,00,64,00,50,00,65,00,72,00,66,00,00,00,48,00,65,00,6c,00,70,00,53,00,\
76,00,63,00,00,00,46,00,6f,00,6c,00,64,00,65,00,72,00,20,00,52,00,65,00,64,\
00,69,00,72,00,65,00,63,00,74,00,69,00,6f,00,6e,00,00,00,46,00,69,00,6c,00,\
65,00,20,00,44,00,65,00,70,00,6c,00,6f,00,79,00,6d,00,65,00,6e,00,74,00,00,\
00,45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,6d,00,00,00,\
45,00,53,00,45,00,4e,00,54,00,00,00,44,00,72,00,57,00,61,00,74,00,73,00,6f,\
00,6e,00,00,00,44,00,69,00,73,00,6b,00,51,00,75,00,6f,00,74,00,61,00,00,00,\
44,00,61,00,74,00,61,00,54,00,72,00,61,00,6e,00,73,00,66,00,6f,00,72,00,6d,\
00,61,00,74,00,69,00,6f,00,6e,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,\
73,00,00,00,63,00,72,00,79,00,70,00,74,00,33,00,32,00,00,00,43,00,4f,00,4d,\
00,2b,00,00,00,43,00,4f,00,4d,00,00,00,43,00,69,00,00,00,43,00,68,00,6b,00,\
64,00,73,00,6b,00,00,00,43,00,61,00,72,00,64,00,53,00,70,00,61,00,63,00,65,\
00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,30,00,00,00,41,00,75,00,74,00,\
6f,00,45,00,6e,00,72,00,6f,00,6c,00,6c,00,6d,00,65,00,6e,00,74,00,00,00,41,\
00,75,00,74,00,6f,00,63,00,68,00,6b,00,00,00,41,00,54,00,49,00,20,00,53,00,\
6d,00,61,00,72,00,74,00,00,00,41,00,53,00,50,00,2e,00,4e,00,45,00,54,00,20,\
00,32,00,2e,00,30,00,2e,00,35,00,30,00,37,00,32,00,37,00,2e,00,30,00,00,00,\
41,00,72,00,65,00,73,00,43,00,68,00,61,00,74,00,53,00,65,00,72,00,76,00,65,\
00,72,00,00,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,00,\
6e,00,20,00,4d,00,61,00,6e,00,61,00,67,00,65,00,6d,00,65,00,6e,00,74,00,00,\
00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,00,6e,00,20,00,\
48,00,61,00,6e,00,67,00,00,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,\
00,69,00,6f,00,6e,00,20,00,45,00,72,00,72,00,6f,00,72,00,00,00,2e,00,4e,00,\
45,00,54,00,20,00,52,00,75,00,6e,00,74,00,69,00,6d,00,65,00,20,00,4f,00,70,\
00,74,00,69,00,6d,00,69,00,7a,00,61,00,74,00,69,00,6f,00,6e,00,20,00,53,00,\
65,00,72,00,76,00,69,00,63,00,65,00,00,00,2e,00,4e,00,45,00,54,00,20,00,52,\
00,75,00,6e,00,74,00,69,00,6d,00,65,00,20,00,32,00,2e,00,30,00,20,00,45,00,\
72,00,72,00,6f,00,72,00,20,00,52,00,65,00,70,00,6f,00,72,00,74,00,69,00,6e,\
00,67,00,00,00,2e,00,4e,00,45,00,54,00,20,00,52,00,75,00,6e,00,74,00,69,00,\
6d,00,65,00,00,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,\
00,6e,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lanmanserver\parameters]
; Contents of value:
; COMCFG
; DFS$
;
"NullSessionShares"=hex(7):43,00,4f,00,4d,00,43,00,46,00,47,00,00,00,44,00,46,\
00,53,00,24,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lanmanserver\Shares]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lanmanserver\Shares\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Archivos de programa\\Ares\\Ares.exe"="C:\\Archivos de programa\\Ares\\Ares.exe:*:Enabled:Ares p2p for windows"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5000:TCP"="5000:TCP:*:Enabled:AresChatServer"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaCategories\{DFF21CE2-F70F-11D0-B917-00A0C9223196}]
"Name"="Auriculares"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaCategories\{DFF21DE2-F70F-11D0-B917-00A0C9223196}]
"Name"="Auriculares con micro"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\acm]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\acm\msacm.l3acm]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\acm\msacm.msaudio1]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\ANDRETTI.EXE34492A63000BEA00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\CARN2.EXE37EB70B500014000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\CMMOVIE.EXE37D906F40000B000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\DD2.EXE3288834400092BF0]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\DD2H.EXE328882C500092DF8]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\FIFARTWC.EXE345FB52D00183C00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\FIFAWC.EXE35320039001AE400]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\FIFAWIN.EXE325FC5F4000F2200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\FIFAWIN.EXE32665883000F2200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\FROGGER2.EXE39AFD5020008F000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\FURBY.EXE37CEF14100108000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\GAMEMAIN.EXE35C90A8A00223C00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\HH2002.EXE3A9A1B9800506577]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\HOCKEY.EXE32348F190017A800]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\LEGACY.EXE347B57D00006D200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\LIBRARY.EXE371B6D8C00116800]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\MAGESLAY.EXE34146DD300112000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\MICKEYK.EXE37489012001F3292]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\MICKEYP.EXE37489012001F328A]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\MICKEYT.EXE37489012001C293C]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NBAWIN.EXE3299791300186200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NBAWIN.EXE343FC9AF001FF400]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NFS.EXE31C4F35C00105000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NFS.EXE325328050011CC00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NFS2SEA.EXE342709E1000EE200]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NFS2SEN.EXE34270ABA000DBC00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NHL98.EXE340F99AF001CF800]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\NUKEPC.EXE3431F0600011515C]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\PARK.EXE36CB498E0010C000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\PIT DROIDS.EXE37B9DC1C000BA02D]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\SAW_GAME.EXE353D11FB0020CA00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\TIME32.EXE33EE7C1E000D8400]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\TP98_R.EXE3372E28300165C00]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\TP99_R.EXE350265F8001AD000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\TPLAYW.EXE31F3EE2D0011D600]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Application Compatibility\UNREAL.EXE355F016600006000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Device Presence]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Mixer Defaults]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSoundCapture]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\Joystick]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\Joystick\Dinput.dll]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\msvideo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AresChatServer]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AresChatServer]
; Contents of value:
; C:\Archivos de programa\Ares\chatServer.exe
"ImagePath"=hex(2):43,00,3a,00,5c,00,41,00,72,00,63,00,68,00,69,00,76,00,6f,00,\
73,00,20,00,64,00,65,00,20,00,70,00,72,00,6f,00,67,00,72,00,61,00,6d,00,61,\
00,5c,00,41,00,72,00,65,00,73,00,5c,00,63,00,68,00,61,00,74,00,53,00,65,00,\
72,00,76,00,65,00,72,00,2e,00,65,00,78,00,65,00,00,00
"DisplayName"="Ares Chatroom server"
"Description"="Hosts your chatroom on the Ares network."

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AresChatServer\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application]
; Contents of value:
; WSH
; WMIAdapter
; WmdmPmSN
; WinMgmt
; Winlogon
; Windows Product Activation
; Windows 3.1 Migration
; WebClient
; VSS
; VBRuntime
; Userinit
; Userenv
; Tlntsvr
; System.ServiceModel.Install 3.0.0.0
; System.ServiceModel 3.0.0.0
; System.Runtime.Serialization 3.0.0.0
; System.IO.Log 3.0.0.0
; System.IdentityModel 3.0.0.0
; SysmonLog
; Starter
; SQLCTR$SONY_MEDIAMGR
; SQLAgent$SONY_MEDIAMGR
; SpoolerCtrs
; SONY_MEDIAMGR
; Software Restriction Policies
; Software Installation
; ServiceModel Audit 3.0.0.0
; SecurityCenter
; SclgNtfy
; SceSrv
; SceCli
; safrslv
; SAFrdms
; RPC
; Remote Assistance
; PerfProc
; PerfOS
; PerfNet
; Perfmon
; Perflib
; PerfDisk
; Perfctrs
; Outlook
; Offline Files
; Oakley
; ntbackup
; NeroCheck
; MSSQLServerADHelper
; MSSQLSERVER/MSDE
; MSSOAP
; MsiInstaller
; MSDTC Client
; MSDTC
; MSDMine
; mnmsrvc
; Microsoft.Transactions.Bridge 3.0.0.0
; Microsoft Office 11
; Microsoft H.323 Telephony Service Provider
; Microsoft ® Visual C# 2005 Compiler
; LoadPerf
; HelpSvc
; Folder Redirection
; File Deployment
; EventSystem
; ESENT
; DrWatson
; DiskQuota
; DataTransformationServices
; crypt32
; COM+
; COM
; Ci
; Chkdsk
; CardSpace 3.0.0.0
; AutoEnrollment
; Autochk
; ATI Smart
; ASP.NET 2.0.50727.0
; AresChatServer
; Application Management
; Application Hang
; Application Error
; .NET Runtime Optimization Service
; .NET Runtime 2.0 Error Reporting
; .NET Runtime
; Application
;
"Sources"=hex(7):57,00,53,00,48,00,00,00,57,00,4d,00,49,00,41,00,64,00,61,00,\
70,00,74,00,65,00,72,00,00,00,57,00,6d,00,64,00,6d,00,50,00,6d,00,53,00,4e,\
00,00,00,57,00,69,00,6e,00,4d,00,67,00,6d,00,74,00,00,00,57,00,69,00,6e,00,\
6c,00,6f,00,67,00,6f,00,6e,00,00,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,\
00,20,00,50,00,72,00,6f,00,64,00,75,00,63,00,74,00,20,00,41,00,63,00,74,00,\
69,00,76,00,61,00,74,00,69,00,6f,00,6e,00,00,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,33,00,2e,00,31,00,20,00,4d,00,69,00,67,00,72,00,61,00,\
74,00,69,00,6f,00,6e,00,00,00,57,00,65,00,62,00,43,00,6c,00,69,00,65,00,6e,\
00,74,00,00,00,56,00,53,00,53,00,00,00,56,00,42,00,52,00,75,00,6e,00,74,00,\
69,00,6d,00,65,00,00,00,55,00,73,00,65,00,72,00,69,00,6e,00,69,00,74,00,00,\
00,55,00,73,00,65,00,72,00,65,00,6e,00,76,00,00,00,54,00,6c,00,6e,00,74,00,\
73,00,76,00,72,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,53,00,65,\
00,72,00,76,00,69,00,63,00,65,00,4d,00,6f,00,64,00,65,00,6c,00,2e,00,49,00,\
6e,00,73,00,74,00,61,00,6c,00,6c,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,\
00,30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,53,00,65,00,72,00,\
76,00,69,00,63,00,65,00,4d,00,6f,00,64,00,65,00,6c,00,20,00,33,00,2e,00,30,\
00,2e,00,30,00,2e,00,30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,\
52,00,75,00,6e,00,74,00,69,00,6d,00,65,00,2e,00,53,00,65,00,72,00,69,00,61,\
00,6c,00,69,00,7a,00,61,00,74,00,69,00,6f,00,6e,00,20,00,33,00,2e,00,30,00,\
2e,00,30,00,2e,00,30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,49,\
00,4f,00,2e,00,4c,00,6f,00,67,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,\
30,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,49,00,64,00,65,00,6e,\
00,74,00,69,00,74,00,79,00,4d,00,6f,00,64,00,65,00,6c,00,20,00,33,00,2e,00,\
30,00,2e,00,30,00,2e,00,30,00,00,00,53,00,79,00,73,00,6d,00,6f,00,6e,00,4c,\
00,6f,00,67,00,00,00,53,00,74,00,61,00,72,00,74,00,65,00,72,00,00,00,53,00,\
51,00,4c,00,43,00,54,00,52,00,24,00,53,00,4f,00,4e,00,59,00,5f,00,4d,00,45,\
00,44,00,49,00,41,00,4d,00,47,00,52,00,00,00,53,00,51,00,4c,00,41,00,67,00,\
65,00,6e,00,74,00,24,00,53,00,4f,00,4e,00,59,00,5f,00,4d,00,45,00,44,00,49,\
00,41,00,4d,00,47,00,52,00,00,00,53,00,70,00,6f,00,6f,00,6c,00,65,00,72,00,\
43,00,74,00,72,00,73,00,00,00,53,00,4f,00,4e,00,59,00,5f,00,4d,00,45,00,44,\
00,49,00,41,00,4d,00,47,00,52,00,00,00,53,00,6f,00,66,00,74,00,77,00,61,00,\
72,00,65,00,20,00,52,00,65,00,73,00,74,00,72,00,69,00,63,00,74,00,69,00,6f,\
00,6e,00,20,00,50,00,6f,00,6c,00,69,00,63,00,69,00,65,00,73,00,00,00,53,00,\
6f,00,66,00,74,00,77,00,61,00,72,00,65,00,20,00,49,00,6e,00,73,00,74,00,61,\
00,6c,00,6c,00,61,00,74,00,69,00,6f,00,6e,00,00,00,53,00,65,00,72,00,76,00,\
69,00,63,00,65,00,4d,00,6f,00,64,00,65,00,6c,00,20,00,41,00,75,00,64,00,69,\
00,74,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,30,00,00,00,53,00,65,00,\
63,00,75,00,72,00,69,00,74,00,79,00,43,00,65,00,6e,00,74,00,65,00,72,00,00,\
00,53,00,63,00,6c,00,67,00,4e,00,74,00,66,00,79,00,00,00,53,00,63,00,65,00,\
53,00,72,00,76,00,00,00,53,00,63,00,65,00,43,00,6c,00,69,00,00,00,73,00,61,\
00,66,00,72,00,73,00,6c,00,76,00,00,00,53,00,41,00,46,00,72,00,64,00,6d,00,\
73,00,00,00,52,00,50,00,43,00,00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,20,\
00,41,00,73,00,73,00,69,00,73,00,74,00,61,00,6e,00,63,00,65,00,00,00,50,00,\
65,00,72,00,66,00,50,00,72,00,6f,00,63,00,00,00,50,00,65,00,72,00,66,00,4f,\
00,53,00,00,00,50,00,65,00,72,00,66,00,4e,00,65,00,74,00,00,00,50,00,65,00,\
72,00,66,00,6d,00,6f,00,6e,00,00,00,50,00,65,00,72,00,66,00,6c,00,69,00,62,\
00,00,00,50,00,65,00,72,00,66,00,44,00,69,00,73,00,6b,00,00,00,50,00,65,00,\
72,00,66,00,63,00,74,00,72,00,73,00,00,00,4f,00,75,00,74,00,6c,00,6f,00,6f,\
00,6b,00,00,00,4f,00,66,00,66,00,6c,00,69,00,6e,00,65,00,20,00,46,00,69,00,\
6c,00,65,00,73,00,00,00,4f,00,61,00,6b,00,6c,00,65,00,79,00,00,00,6e,00,74,\
00,62,00,61,00,63,00,6b,00,75,00,70,00,00,00,4e,00,65,00,72,00,6f,00,43,00,\
68,00,65,00,63,00,6b,00,00,00,4d,00,53,00,53,00,51,00,4c,00,53,00,65,00,72,\
00,76,00,65,00,72,00,41,00,44,00,48,00,65,00,6c,00,70,00,65,00,72,00,00,00,\
4d,00,53,00,53,00,51,00,4c,00,53,00,45,00,52,00,56,00,45,00,52,00,2f,00,4d,\
00,53,00,44,00,45,00,00,00,4d,00,53,00,53,00,4f,00,41,00,50,00,00,00,4d,00,\
73,00,69,00,49,00,6e,00,73,00,74,00,61,00,6c,00,6c,00,65,00,72,00,00,00,4d,\
00,53,00,44,00,54,00,43,00,20,00,43,00,6c,00,69,00,65,00,6e,00,74,00,00,00,\
4d,00,53,00,44,00,54,00,43,00,00,00,4d,00,53,00,44,00,4d,00,69,00,6e,00,65,\
00,00,00,6d,00,6e,00,6d,00,73,00,72,00,76,00,63,00,00,00,4d,00,69,00,63,00,\
72,00,6f,00,73,00,6f,00,66,00,74,00,2e,00,54,00,72,00,61,00,6e,00,73,00,61,\
00,63,00,74,00,69,00,6f,00,6e,00,73,00,2e,00,42,00,72,00,69,00,64,00,67,00,\
65,00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,30,00,00,00,4d,00,69,00,63,\
00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,66,00,66,00,69,00,63,00,\
65,00,20,00,31,00,31,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,\
00,74,00,20,00,48,00,2e,00,33,00,32,00,33,00,20,00,54,00,65,00,6c,00,65,00,\
70,00,68,00,6f,00,6e,00,79,00,20,00,53,00,65,00,72,00,76,00,69,00,63,00,65,\
00,20,00,50,00,72,00,6f,00,76,00,69,00,64,00,65,00,72,00,00,00,4d,00,69,00,\
63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,28,00,52,00,29,00,20,00,56,\
00,69,00,73,00,75,00,61,00,6c,00,20,00,43,00,23,00,20,00,32,00,30,00,30,00,\
35,00,20,00,43,00,6f,00,6d,00,70,00,69,00,6c,00,65,00,72,00,00,00,4c,00,6f,\
00,61,00,64,00,50,00,65,00,72,00,66,00,00,00,48,00,65,00,6c,00,70,00,53,00,\
76,00,63,00,00,00,46,00,6f,00,6c,00,64,00,65,00,72,00,20,00,52,00,65,00,64,\
00,69,00,72,00,65,00,63,00,74,00,69,00,6f,00,6e,00,00,00,46,00,69,00,6c,00,\
65,00,20,00,44,00,65,00,70,00,6c,00,6f,00,79,00,6d,00,65,00,6e,00,74,00,00,\
00,45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,6d,00,00,00,\
45,00,53,00,45,00,4e,00,54,00,00,00,44,00,72,00,57,00,61,00,74,00,73,00,6f,\
00,6e,00,00,00,44,00,69,00,73,00,6b,00,51,00,75,00,6f,00,74,00,61,00,00,00,\
44,00,61,00,74,00,61,00,54,00,72,00,61,00,6e,00,73,00,66,00,6f,00,72,00,6d,\
00,61,00,74,00,69,00,6f,00,6e,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,\
73,00,00,00,63,00,72,00,79,00,70,00,74,00,33,00,32,00,00,00,43,00,4f,00,4d,\
00,2b,00,00,00,43,00,4f,00,4d,00,00,00,43,00,69,00,00,00,43,00,68,00,6b,00,\
64,00,73,00,6b,00,00,00,43,00,61,00,72,00,64,00,53,00,70,00,61,00,63,00,65,\
00,20,00,33,00,2e,00,30,00,2e,00,30,00,2e,00,30,00,00,00,41,00,75,00,74,00,\
6f,00,45,00,6e,00,72,00,6f,00,6c,00,6c,00,6d,00,65,00,6e,00,74,00,00,00,41,\
00,75,00,74,00,6f,00,63,00,68,00,6b,00,00,00,41,00,54,00,49,00,20,00,53,00,\
6d,00,61,00,72,00,74,00,00,00,41,00,53,00,50,00,2e,00,4e,00,45,00,54,00,20,\
00,32,00,2e,00,30,00,2e,00,35,00,30,00,37,00,32,00,37,00,2e,00,30,00,00,00,\
41,00,72,00,65,00,73,00,43,00,68,00,61,00,74,00,53,00,65,00,72,00,76,00,65,\
00,72,00,00,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,00,\
6e,00,20,00,4d,00,61,00,6e,00,61,00,67,00,65,00,6d,00,65,00,6e,00,74,00,00,\
00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,00,6e,00,20,00,\
48,00,61,00,6e,00,67,00,00,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,\
00,69,00,6f,00,6e,00,20,00,45,00,72,00,72,00,6f,00,72,00,00,00,2e,00,4e,00,\
45,00,54,00,20,00,52,00,75,00,6e,00,74,00,69,00,6d,00,65,00,20,00,4f,00,70,\
00,74,00,69,00,6d,00,69,00,7a,00,61,00,74,00,69,00,6f,00,6e,00,20,00,53,00,\
65,00,72,00,76,00,69,00,63,00,65,00,00,00,2e,00,4e,00,45,00,54,00,20,00,52,\
00,75,00,6e,00,74,00,69,00,6d,00,65,00,20,00,32,00,2e,00,30,00,20,00,45,00,\
72,00,72,00,6f,00,72,00,20,00,52,00,65,00,70,00,6f,00,72,00,74,00,69,00,6e,\
00,67,00,00,00,2e,00,4e,00,45,00,54,00,20,00,52,00,75,00,6e,00,74,00,69,00,\
6d,00,65,00,00,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,\
00,6e,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\AresChatServer]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application