ShellIconOverlayIdentifiers: FunOverlay -> {A5662DF9-0C2E-4A56-9FE1-BACFF6966D88} => C:\Users\Public\Fundata\FunAir.dll No File Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File DPF: HKLM-x32 {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/Insaniquarium%20Deluxe/Images/stg_drm.ocx DPF: HKLM-x32 {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/Plants%20vs.%20Zombies/Images/armhelper.ocx S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] 2014-07-27 14:53 - 2014-07-27 14:53 - 00000000 ____H () C:\Users\Tng family\AppData\Local\BITC37D.tmp 2014-07-27 14:53 - 2014-07-27 14:53 - 00000000 _____ () C:\Users\Tng family\AppData\Local\{EE959DC4-D677-4722-ACFA-EE3ED68CF202} 2014-07-26 21:43 - 2014-07-26 21:43 - 02938144 _____ (LionSea Software co., ltd ) C:\Users\Tng family\Downloads\setup.exe C:\ProgramData\flashax10.exe