HKU\S-1-5-21-1205358742-1771774525-369522282-1001\...\Policies\Explorer\DisallowRun: [1] ipmgui.exe HKU\S-1-5-21-1205358742-1771774525-369522282-1001\...\Policies\Explorer\DisallowRun: [2] avnotify.exe HKU\S-1-5-21-1205358742-1771774525-369522282-1001\...\Policies\Explorer: [DisallowRun] 1 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://123.taobao.com/?wangwang/ FF NetworkProxy: "socks", "localhost" FF NetworkProxy: "socks_port", 1080 FF NetworkProxy: "socks_version", 4 FF NetworkProxy: "type", 0 FF Plugin HKCU: @alibaba.com/npAliSSOLogin;version=1.0 -> C:\Program Files (x86)\AliWangWang\8.00.34C\npAliSSOLogin.dll No File FF Plugin HKCU: @alibaba.com/npwangwang;version=1.0 -> C:\Program Files (x86)\AliWangWang\8.00.34C\npwangwang.dll No File C:\Users\Woei Shyang\AppData\Local\Temp\1Password-4.0.0.499.exe C:\Users\Woei Shyang\AppData\Local\Temp\1Password-4.0.1.503.exe C:\Users\Woei Shyang\AppData\Local\Temp\avgnt.exe C:\Users\Woei Shyang\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp7tx364.dll C:\Users\Woei Shyang\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Woei Shyang\AppData\Local\Temp\LMkRstPt.exe C:\Users\Woei Shyang\AppData\Local\Temp\op_install32.dll C:\Users\Woei Shyang\AppData\Local\Temp\Procmon64.exe C:\Users\Woei Shyang\AppData\Local\Temp\xmlUpdater.exe EmptyTemp: