Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Hacktool:win32/keygen how to remove


  • Please log in to reply

#1
JimmyProMo

JimmyProMo

    New Member

  • Member
  • Pip
  • 1 posts
I had this come up in a full scan with microsoft security essentialsalong with adaware:win32/opencandy but the one at top says is more risk what is best way to get rid of these i ran malwarebytes it did not detect it i will try and quarentine for now and delete here is some info that may be useful please help if u have an answer.

OTL logfile created on: 7/12/2012 9:24:23 AM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\alan\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16443)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.98 Gb Total Physical Memory | 3.13 Gb Available Physical Memory | 78.66% Memory free
7.97 Gb Paging File | 5.78 Gb Available in Paging File | 72.60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 704.35 Gb Free Space | 75.62% Space Free | Partition Type: NTFS

Computer Name: ALAN-PC | User Name: alan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/07/12 08:52:23 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\alan\Downloads\OTL.exe
PRC - [2012/07/02 07:32:00 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012/06/23 02:01:25 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2012/06/21 17:40:34 | 000,035,256 | ---- | M] (Overwolf) -- C:\Program Files (x86)\Overwolf\Overwolf.exe
PRC - [2012/06/21 17:40:34 | 000,026,552 | ---- | M] (Microsoft) -- C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe
PRC - [2012/06/14 18:20:13 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/05/15 06:48:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/04/04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011/12/07 16:11:56 | 000,659,224 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
PRC - [2011/04/14 12:48:32 | 001,758,208 | ---- | M] () -- C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
PRC - [2011/04/12 15:29:02 | 000,953,232 | ---- | M] (Razer USA Ltd) -- C:\Program Files (x86)\Razer\Naga\RazerNagaSysTray.exe
PRC - [2011/03/21 12:06:08 | 000,248,320 | ---- | M] () -- C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe
PRC - [2011/02/15 07:20:22 | 000,364,544 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
PRC - [2011/02/07 00:14:24 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe
PRC - [2010/10/05 21:04:12 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2010/10/05 21:04:08 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2007/12/19 12:58:24 | 000,163,840 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe


========== Modules (No Company Name) ==========

MOD - [2012/06/21 17:40:46 | 000,476,600 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OWServer.dll
MOD - [2012/06/21 17:40:46 | 000,117,688 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OWService.dll
MOD - [2012/06/21 17:40:46 | 000,076,216 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OverWolf.BL.Interfaces.dll
MOD - [2012/06/21 17:40:46 | 000,056,320 | ---- | M] () -- C:\Program Files (x86)\Overwolf\BrowserWindow.dll
MOD - [2012/06/21 17:40:46 | 000,023,480 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OWInjector.dll
MOD - [2012/06/21 17:40:44 | 011,382,200 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OverWolf.Client.Core.dll
MOD - [2012/06/21 17:40:40 | 000,275,896 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OWAgent.dll
MOD - [2012/06/21 17:40:40 | 000,074,680 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OWExplorer-1066.dll
MOD - [2012/06/21 17:40:40 | 000,025,600 | ---- | M] () -- C:\Program Files (x86)\Overwolf\CoreAudioApi.dll
MOD - [2012/06/21 17:40:34 | 000,028,088 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OWLog.dll
MOD - [2012/06/21 17:40:34 | 000,008,704 | ---- | M] () -- C:\Program Files (x86)\Overwolf\ODK.AddIns.V1.HostView.dll
MOD - [2012/06/21 17:40:32 | 000,027,064 | ---- | M] () -- C:\Program Files (x86)\Overwolf\OWExplorerLauncher.dll
MOD - [2012/06/21 07:31:49 | 000,240,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\f2f8201dd3453250dfd9ed1afce630a0\WindowsFormsIntegration.ni.dll
MOD - [2012/06/21 07:24:16 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll
MOD - [2012/06/21 07:24:03 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012/06/21 07:04:21 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll
MOD - [2012/06/21 07:04:08 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012/06/21 07:04:06 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll
MOD - [2012/06/14 18:20:15 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012/05/15 02:21:26 | 000,368,448 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2012/05/14 15:50:05 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
MOD - [2012/05/14 15:41:01 | 000,634,368 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\a90ec436f1d2c5cb0133a53c2e47d61a\System.AddIn.ni.dll
MOD - [2012/05/14 15:38:14 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
MOD - [2012/05/14 15:36:56 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012/05/14 15:36:53 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012/05/14 15:36:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012/05/14 15:36:50 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012/05/14 15:36:45 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2011/04/14 12:48:32 | 001,758,208 | ---- | M] () -- C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
MOD - [2011/03/21 12:06:08 | 000,248,320 | ---- | M] () -- C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe
MOD - [2011/02/15 07:20:22 | 000,364,544 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
MOD - [2011/02/15 07:20:08 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
MOD - [2011/02/15 07:20:02 | 000,278,528 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
MOD - [2011/02/15 07:19:44 | 000,229,376 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTCore.dll
MOD - [2011/02/15 07:19:30 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTUI.dll
MOD - [2011/02/15 07:19:20 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTFC.dll
MOD - [2011/02/07 00:14:24 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe
MOD - [2011/02/07 00:14:22 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTMUI.dll
MOD - [2011/02/07 00:14:18 | 000,081,920 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSSHooks.dll
MOD - [2011/02/07 00:14:16 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTUI.dll
MOD - [2011/02/07 00:14:14 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTFC.dll
MOD - [2010/07/27 00:37:16 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTTSH.dll
MOD - [2010/07/27 00:37:16 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTTSH.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012/03/26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012/03/26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2011/05/24 23:03:38 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/04/06 19:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012/07/12 03:56:13 | 000,654,944 | ---- | M] (Wellbia.com Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\xsherlock.xem -- (xsherlock)
SRV - [2012/07/02 07:32:00 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012/06/21 17:40:28 | 000,018,360 | ---- | M] (Overwolf Ltd) [On_Demand | Stopped] -- C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe -- (OverwolfUpdaterService)
SRV - [2012/06/14 18:20:14 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/05/15 06:48:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012/05/07 10:58:53 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/05/03 08:31:10 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011/08/07 17:40:00 | 003,804,120 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2011/03/16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010/11/20 23:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2010/11/20 23:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2010/11/20 23:24:51 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2010/10/05 21:04:12 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel®
SRV - [2010/10/05 21:04:08 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel®
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/04/18 13:08:03 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012/03/20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2012/03/07 23:05:19 | 000,015,672 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
DRV:64bit: - [2012/03/06 19:02:45 | 000,028,504 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd)
DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/09 02:06:36 | 000,125,376 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2011/06/07 08:44:16 | 000,040,128 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:64bit: - [2011/05/25 00:26:56 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/05/24 22:25:42 | 000,309,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/03/31 15:01:50 | 000,126,464 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzSynapse.sys -- (RzSynapse)
DRV:64bit: - [2011/03/30 14:46:44 | 000,114,704 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/03/07 05:22:00 | 000,065,280 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2011/03/07 05:22:00 | 000,040,832 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2011/01/10 21:16:08 | 000,021,104 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2010/11/20 23:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 23:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/09 15:35:24 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:64bit: - [2010/10/19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel®
DRV:64bit: - [2010/10/01 01:16:34 | 000,013,312 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VKbms.sys -- (VKbms)
DRV:64bit: - [2010/03/23 17:37:34 | 000,012,032 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\danew.sys -- (danewFltr)
DRV:64bit: - [2010/03/08 13:08:36 | 000,121,800 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HtcVComV64.sys -- (HtcVCom32)
DRV:64bit: - [2010/03/08 13:03:54 | 000,121,800 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HtcUsbMdmV64.sys -- (HtcUsbMdmV64)
DRV:64bit: - [2009/11/23 17:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009/11/23 17:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009/11/02 18:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009/08/13 22:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 16:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [1999/12/31 20:00:00 | 000,535,656 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV - [2012/05/03 20:00:29 | 000,025,640 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2012/04/20 12:51:33 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2012/02/02 18:50:43 | 000,004,774 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
DRV - [2010/05/26 20:43:00 | 000,014,648 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\MSI Afterburner\RTCore64.sys -- (RTCore64)
DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {21A51130-7285-49FE-B3F6-2385CC71CDEA}
IE:64bit: - HKLM\..\SearchScopes\{21A51130-7285-49FE-B3F6-2385CC71CDEA}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{21A51130-7285-49FE-B3F6-2385CC71CDEA}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2786678


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=OIE9HP
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapp...//www.yahoo.com
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystart.c...ecuritytb&v=3_0
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com/
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\URLSearchHook: {b2ed7faf-72a0-46d1-9d9d-602226f5cb9f} - No CLSID value found
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes,DefaultScope = {E9B83AC9-1E2E-4df3-BB3C-7C462A42E3EA}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylo...earch&AF=100576
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{1EE283CE-91D8-4852-9586-4CCD7E0A8DF8}: "URL" = http://search.yahoo....p={searchTerms}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{25D8ABA0-5F45-D212-4914-794A69246E1D}: "URL" = http://stp.startnow....eferrer:source}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{6709859D-C362-4834-B21A-D0E0021817F2}: "URL" = http://search.yahoo....evm&type=IEBDSV
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...sa&d=2012-04-21 00:00:49&v=11.0.0.9&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}: "URL" = http://toolbar.inbox...id=80291&lng=en
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{CE3A3FD1-0A27-07DC-3FED-9D0FBEBC1CD0}: "URL" = http://www.bing.com/...eferrer:source}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{D56B1D36-7909-4AE7-9C3E-CDA673534DB7}: "URL" = http://start.funmood...q={searchTerms}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{D82390DB-B70D-4b23-9EBE-21769985688E}: "URL" = http://www.bing.com/...=SPLBR1&pc=SPLH
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{E8CF84A1-820D-4B5E-AF6D-02B7B2AAFA42}: "URL" = http://search.yahoo....p={searchTerms}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{E9B83AC9-1E2E-4df3-BB3C-7C462A42E3EA}: "URL" = http://www.google.co...q={searchTerms}
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\SearchScopes\{EC892B08-EC34-41A2-938E-7616131C9270}: "URL" = http://mp3tubetoolba...c1a2ad294ea0464
IE - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Yahoo-Mp3Tube"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=685749&ilc=12"
FF - prefs.js..browser.search.selectedEngine: "Panda Safe Search"
FF - prefs.js..browser.search.selectedEngineURL: "http://mp3tubetoolba...={searchTerms}"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..keyword.URL: "http://mp3tubetoolba...removelink2&q="

FF - user.js..keyword.enabled: 1
FF - user.js..keyword.URL: "http://mp3tubetoolba...removelink2&q="

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.110.0: C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin: File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@Webzen.com/NPBrowserExt: C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected] [2012/03/31 02:52:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected] [2012/04/11 12:40:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected] [2012/04/12 20:19:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected] [2012/04/17 21:22:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/06/30 10:40:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/06/21 20:18:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\alan\AppData\Roaming\Mozilla\Extensions
[2012/07/10 13:49:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions
[2012/06/21 20:27:18 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012/07/09 17:21:49 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
[2012/06/21 20:27:16 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2012/04/11 12:40:31 | 000,000,000 | ---D | M] (Codecv) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected]
[2012/04/12 20:19:00 | 000,000,000 | ---D | M] (Codecv) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected]
[2012/04/17 21:22:23 | 000,000,000 | ---D | M] (Codecv) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected]
[2012/06/27 08:16:38 | 000,000,000 | ---D | M] ("I Want This") -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected]
[2011/07/07 13:12:16 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected]
[2012/03/31 02:52:12 | 000,000,000 | ---D | M] (CodecC) -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\extensions\[email protected]
[2011/05/30 08:50:08 | 000,002,569 | ---- | M] () -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\searchplugins\askcom.xml
[2011/07/14 19:23:03 | 000,002,293 | ---- | M] () -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\searchplugins\bing-zugo.xml
[2012/04/24 21:05:05 | 000,001,800 | ---- | M] () -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\searchplugins\funmoods.xml
[2011/06/05 13:35:34 | 000,001,211 | ---- | M] () -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\searchplugins\Mp3Tube.xml
[2012/02/26 11:33:18 | 000,002,270 | ---- | M] () -- C:\Users\alan\AppData\Roaming\Mozilla\Firefox\Profiles\7e16amat.default\searchplugins\SearchTheWeb.xml
[2012/06/21 20:18:51 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/05/16 20:04:52 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/06/30 22:28:00 | 000,146,198 | ---- | M] () (No name found) -- C:\USERS\ALAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7E16AMAT.DEFAULT\EXTENSIONS\[email protected]
[2012/07/10 13:49:15 | 000,159,604 | ---- | M] () (No name found) -- C:\USERS\ALAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7E16AMAT.DEFAULT\EXTENSIONS\[email protected]
[2012/06/14 18:20:49 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/06/23 12:32:48 | 000,000,616 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\adawaretb.xml
[2012/06/14 18:19:40 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/06/14 18:19:40 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm\2_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bccldkoinakjmmgebambiaggjobhikfg\1.0_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjagnifjocnddgeknajocbkkhlgibem\3.4.0_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg\1.3_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpilclpacieflhmobalmaccogiioldoo\1.0_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm\6.2.2_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.7.1_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: No name found = C:\Users\alan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppjemjejnnojomfekgbpbbnecicblllf\1.0_0\

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - !{1d09c093-f71e-43c3-b948-19316cbd695e} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - !{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{1d09c093-f71e-43c3-b948-19316cbd695e} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
O3 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [DeathAdder] c:\Program Files (x86)\Razer\DeathAdder\razerhid.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Razer Naga Driver] C:\Program Files (x86)\Razer\Naga\RazerNagaSysTray.exe (Razer USA Ltd)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe (Overwolf)
O4 - HKU\S-1-5-21-598752345-1450675593-3424785095-1006..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [InnoSetupRegFile.0000000001] C:\Windows\is-89ECA.exe ()
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-598752345-1450675593-3424785095-1006..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThumbnailCache = 1
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: link = [binary data]
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMovingBands = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCloseDragDropBands = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-598752345-1450675593-3424785095-1006\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus....k_sys_ctrl3.cab (Reg Error: Value error.)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/Bejeweled%203/Images/stg_drm.ocx (Reg Error: Value error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/Bejeweled%203/Images/armhelper.ocx (ArmHelper Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.55.24.10 209.55.27.13 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8951D150-9FAB-49DB-8807-8A6A62326BD4}: DhcpNameServer = 209.55.24.10 209.55.27.13 8.8.8.8
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Overwolf\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{2db25576-8745-11e1-b17e-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{2db25576-8745-11e1-b17e-50e54934e5c5}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{5c761ebc-c8bf-11e0-ba0a-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{5c761ebc-c8bf-11e0-ba0a-50e54934e5c5}\Shell\AutoRun\command - "" = E:\TL-Bootstrap.exe
O33 - MountPoints2\{5c761ee1-c8bf-11e0-ba0a-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{5c761ee1-c8bf-11e0-ba0a-50e54934e5c5}\Shell\AutoRun\command - "" = G:\TL-Bootstrap.exe
O33 - MountPoints2\{6164d8fe-9ea3-11e1-94e0-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{6164d8fe-9ea3-11e1-94e0-50e54934e5c5}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{849c6f9c-8a78-11e0-9361-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{95fe3ff0-edc8-11e0-a253-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{95fe3ff0-edc8-11e0-a253-50e54934e5c5}\Shell\AutoRun\command - "" = E:\TL-Bootstrap.exe
O33 - MountPoints2\{af3e6ba8-8be6-11e1-8f2a-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{af3e6ba8-8be6-11e1-8f2a-806e6f6e6963}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{af3e6c11-8be6-11e1-8f2a-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{af3e6c11-8be6-11e1-8f2a-50e54934e5c5}\Shell\AutoRun\command - "" = E:\TL-Bootstrap.exe
O33 - MountPoints2\{c022b9cc-8bb5-11e1-a8db-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{c022b9cc-8bb5-11e1-a8db-50e54934e5c5}\Shell\AutoRun\command - "" = G:\TL-Bootstrap.exe
O33 - MountPoints2\{d3d5e442-e9de-11e0-8010-50e54934e5c5}\Shell - "" = AutoRun
O33 - MountPoints2\{d3d5e442-e9de-11e0-8010-50e54934e5c5}\Shell\AutoRun\command - "" = E:\TL-Bootstrap.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\OriginInstaller.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)


MsConfig:64bit - StartUpReg: Anti-phishing Domain Advisor - hkey= - key= - Reg Error: Value error. File not found
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.
MsConfig:64bit - State: "bootini" - Reg Error: Key error.

SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: MsMpSvc - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: MsMpSvc - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} -
ActiveX:64bit: >{aafa5c78-3f99-4996-b6c5-2521f0ad7120} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} -

Drivers32:64bit: aux - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux6 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux7 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux8 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi6 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi7 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi8 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi9 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer6 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer7 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer8 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer9 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.iyuv - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.uyvy - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.XFR1 - xfcodec64.dll ()
Drivers32:64bit: vidc.yuy2 - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yvyu - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave6 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave7 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave8 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave9 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: aux - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux2 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux3 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux4 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux5 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux6 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux7 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux8 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi2 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi3 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi4 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi5 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi6 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi7 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi8 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi9 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\Windows\SysWow64\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer2 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer3 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer4 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer5 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer6 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer7 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer8 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer9 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.imaadpcm - C:\Windows\SysWow64\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - C:\Windows\SysWow64\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\Windows\SysWow64\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\Windows\SysWow64\msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.siren - C:\Windows\SysWow64\sirenacm.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.i420 - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iyuv - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - C:\Windows\SysWow64\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\Windows\SysWow64\msvidc32.dll (Microsoft Corporation)
Drivers32: VIDC.RTV1 - rtvcvfw32.dll File not found
Drivers32: vidc.uyvy - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - C:\Windows\SysWow64\tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave2 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave3 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave4 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave5 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave6 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave7 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave8 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave9 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\Windows\SysWow64\msacm32.drv (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/07/12 06:52:51 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{B3D80A0F-20D7-4377-8EBE-36E3B5B2F30E}
[2012/07/11 18:52:27 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{5038AFAE-55CA-47B0-B643-1BD87DF4D9AA}
[2012/07/11 18:52:15 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{19773622-4880-44A5-959A-BEE3357FE5E9}
[2012/07/11 07:00:46 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012/07/11 07:00:46 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012/07/11 07:00:46 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012/07/11 07:00:46 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012/07/11 07:00:45 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012/07/11 07:00:45 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012/07/11 07:00:44 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012/07/11 07:00:44 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012/07/11 07:00:43 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012/07/11 07:00:43 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012/07/11 07:00:43 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012/07/11 07:00:43 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012/07/11 07:00:42 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012/07/11 06:59:50 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2012/07/11 06:59:50 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2012/07/11 06:59:44 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2012/07/11 06:59:42 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2012/07/11 06:59:41 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2012/07/11 06:51:50 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{40BDBFFC-A305-4A60-AEBF-7CAFC06AF1CF}
[2012/07/10 16:16:31 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{2A88AB4A-1028-44F2-8DF5-35283D29853F}
[2012/07/10 04:16:06 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{2231473F-E753-4237-B75F-BAF70C0F6260}
[2012/07/10 04:15:55 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{66EC91C6-D4C5-4F31-B053-FB58D47B4813}
[2012/07/09 13:42:49 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{E23F50AA-2906-41C2-B9A5-7FD9BB276DBB}
[2012/07/08 21:01:34 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{9A556BCE-E63E-408D-AB4E-E703D00F95D9}
[2012/07/08 12:12:38 | 000,654,944 | ---- | C] (Wellbia.com Co., Ltd.) -- C:\Windows\SysWow64\xsherlock.xem
[2012/07/08 12:12:06 | 000,000,000 | ---D | C] -- C:\Users\alan\Documents\C9
[2012/07/08 12:05:36 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webzen Hub
[2012/07/08 12:05:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Overwolf
[2012/07/08 12:05:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Overwolf
[2012/07/08 12:02:00 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\Overwolf
[2012/07/08 12:01:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\C9
[2012/07/08 10:12:06 | 000,230,920 | ---- | C] (WEBZEN, INC.) -- C:\Windows\SysWow64\EPWZCmnCtrl.dll
[2012/07/08 10:12:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WEBZEN
[2012/07/08 10:12:01 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBZEN
[2012/07/08 09:01:09 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{3338F39E-D61A-4143-A3C1-8923F3F40CB8}
[2012/07/07 19:52:02 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{1F9B3AD0-1098-4401-8F25-A45E50A3CF6E}
[2012/07/07 19:51:51 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{F9F4FC0A-3ECD-4E8C-8C43-FB87A7F362B5}
[2012/07/07 12:15:42 | 000,000,000 | ---D | C] -- C:\Users\alan\riotsGamesLogs
[2012/07/07 08:36:23 | 000,000,000 | ---D | C] -- C:\Riot Games
[2012/07/07 08:36:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
[2012/07/07 07:48:35 | 000,000,000 | ---D | C] -- C:\Users\alan\Desktop\League of legends
[2012/07/07 07:48:15 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\PMB Files
[2012/07/07 07:48:14 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2012/07/07 07:13:19 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{772BB844-E8A9-4D18-BDE5-D6DAA60F8465}
[2012/07/07 07:13:08 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{7D60CA56-81ED-4A97-AF4A-3DE06443F83C}
[2012/07/07 07:07:15 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{9F608898-8C34-4869-8A39-C85B71B7318F}
[2012/07/07 07:07:04 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{E105887A-C4D0-4001-A4CD-E2784DDA6026}
[2012/07/07 04:56:05 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{4042C51C-8A62-4D1D-865E-B1E37462BA8B}
[2012/07/07 04:55:54 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{494DD4D0-F8F5-4CE9-B556-A08D293C224C}
[2012/07/06 16:55:27 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{FC3FED07-2017-4E9B-B442-DC9E5043BF5E}
[2012/07/06 16:55:15 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{20E651EA-B00E-44A2-8818-3889D9261548}
[2012/07/06 06:46:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2012/07/06 04:54:44 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{7B14E529-7D08-4579-9D51-5E63EB5DC462}
[2012/07/06 04:54:33 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{036C7B07-0205-4017-822C-7224150AF953}
[2012/07/06 01:16:51 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{A9178509-4B38-4D70-9296-D095E3A4CC81}
[2012/07/06 01:16:40 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{479180B7-2FFB-46B7-8EB4-8202049F45DF}
[2012/07/05 13:16:13 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{99EE223C-6F41-4908-8512-E57D1E891DFB}
[2012/07/05 13:16:02 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{EF04AF6C-1DA8-45CC-AE4C-0E4811F044B1}
[2012/07/04 23:29:40 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{4D527B16-3EB4-4104-B727-8EA23B4A2696}
[2012/07/04 11:29:15 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{F88C850D-F496-4BB3-88A8-B66DD28E6254}
[2012/07/03 23:28:51 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{F4531E77-B897-4B3A-90BF-FFEE2C8EF76F}
[2012/07/03 11:28:24 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{F77DA40A-2942-43C9-AF40-C2BA64696BC5}
[2012/07/03 11:28:10 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{CBD8A561-F4F5-4911-9690-DE5A63B00267}
[2012/07/02 23:27:40 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{86E34473-51AA-4C26-B35F-6178ECC86A88}
[2012/07/02 10:42:19 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{DC75D411-0AC1-41A8-B61B-543859C0C4DE}
[2012/07/02 10:42:07 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{8F64CF92-F8B4-4033-8BCD-8FD62077D7A7}
[2012/07/02 01:37:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
[2012/07/01 22:41:42 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{0CB58C45-F283-4FF5-876E-27A777BAB5A0}
[2012/07/01 10:41:17 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{9F4337E1-27CE-4BF1-8475-B47ED046F935}
[2012/07/01 10:41:06 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{615006A2-42B7-458D-BEE9-8BB9B0EC9F08}
[2012/06/30 22:40:39 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{8320B22E-D5B1-4A2A-950B-315BA86D4C72}
[2012/06/30 22:40:28 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{F59A3F89-B4A3-4DA5-8433-3E49FD97AC1C}
[2012/06/30 14:24:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2012/06/30 14:24:39 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2012/06/30 10:40:02 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{BB40124D-F468-4E19-BE6A-76F6ABC78752}
[2012/06/30 10:39:47 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{C4CA425D-6ACC-4F5E-9005-8AB2F7972EB9}
[2012/06/28 04:21:19 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{C03FD0A9-ACAF-4C61-B687-AE7483972329}
[2012/06/28 04:21:08 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{8817D1EA-E5D2-4E15-97F5-1E475C291274}
[2012/06/27 16:20:39 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{65E87AE6-A530-4B04-BC6B-6DA8526E0D5B}
[2012/06/27 07:13:44 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
[2012/06/27 04:20:13 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{6708D9F3-DE32-4D90-BF1D-608CE033455A}
[2012/06/26 08:11:23 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{56429693-0CC4-4DAB-BD5A-F154193289FE}
[2012/06/25 16:52:19 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{80C40D10-851C-4611-8D37-D824BEB208B7}
[2012/06/25 16:52:08 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{2A551518-DB4F-4DA0-A70F-A2C40C3C593D}
[2012/06/25 16:04:24 | 001,394,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml4.dll
[2012/06/25 04:51:33 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{60CBAE78-DA94-40E6-927B-F243D729E2D7}
[2012/06/25 04:51:22 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{E8500A40-2287-44E9-A8CD-C48F9FEA2AD3}
[2012/06/24 10:02:04 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{28C608B5-B2D7-4CA9-89B9-ECD5643FB164}
[2012/06/23 22:01:37 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{274EC4A9-3AD8-4502-B15F-958C2A482975}
[2012/06/23 22:01:26 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{085707E4-32B1-494C-BC5C-E272F276D2E2}
[2012/06/23 12:32:50 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\adawarebp
[2012/06/23 10:55:56 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Roaming\Panda Security
[2012/06/23 10:54:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Panda Security
[2012/06/23 10:41:04 | 000,000,000 | ---D | C] -- C:\ProgramData\GFI Software
[2012/06/23 10:37:14 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012/06/23 09:01:57 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{2F0EF7A8-83D5-438E-9720-ADC2D4DF8AA9}
[2012/06/23 09:01:46 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{178AB281-305C-4209-98E6-DAC1495049C2}
[2012/06/23 02:08:54 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Roaming\DivX
[2012/06/23 02:01:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2012/06/23 02:01:35 | 000,198,832 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll
[2012/06/23 02:01:27 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll
[2012/06/23 02:01:27 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll
[2012/06/23 02:01:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2012/06/23 02:01:26 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2012/06/22 17:37:49 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{97E8704D-40F1-46E3-B08F-002C158249C5}
[2012/06/22 17:37:38 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{CCEAB45F-56F2-4C30-A812-00F69267E746}
[2012/06/22 05:37:12 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{14DBF66C-9CD5-4FE7-82C5-92A58CB7C731}
[2012/06/22 05:37:00 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{FB974ACB-8F62-4E46-81F4-8CBC2DD8E804}
[2012/06/21 20:18:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012/06/21 20:18:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012/06/21 17:36:34 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{670D96F7-BAFC-4B38-82CD-7F742CD122C1}
[2012/06/21 17:36:23 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{BB4E8C85-C2AF-4806-8A57-0AA34AC4787E}
[2012/06/21 04:54:27 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012/06/21 04:54:26 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012/06/21 04:54:26 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012/06/21 04:54:17 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012/06/21 04:54:17 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012/06/21 04:54:17 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012/06/21 04:53:25 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2012/06/21 04:46:19 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012/06/21 04:46:18 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2012/06/21 04:41:29 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{C1AC43CB-9E4F-4569-9671-9851464BF77A}
[2012/06/21 04:41:16 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{6D10E563-94FB-4D54-9F90-F2AE067FF6BF}
[2012/06/21 03:55:33 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{D6876340-3666-4DEC-B281-611D8DE268F8}
[2012/06/21 03:55:22 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{874FB754-1508-4887-8484-7A44B2DAD5FE}
[2012/06/21 01:49:22 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Roaming\InstallShield
[2012/06/20 14:48:34 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{52D06D45-8C5E-4CE2-9DA1-A7C918DC56C9}
[2012/06/19 23:16:23 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{DBD88BB1-54C2-405D-BF0B-A20148E38AD6}
[2012/06/19 11:15:53 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{AF850740-2710-4157-87CC-EF62670B8F50}
[2012/06/18 22:40:35 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{7DFCF402-B0BB-4961-8BE4-35E815705825}
[2012/06/18 10:40:00 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{64296D5B-72F0-489F-A8D7-BE127515281D}
[2012/06/15 22:21:05 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{BE690781-E4AA-415A-8FCF-0A1AC3DA3D6D}
[2012/06/15 09:53:27 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{D61AB29B-FCAD-4BA8-AE11-6D7E41FFEFF0}
[2012/06/14 09:52:49 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{00FA17AE-DD2C-4258-9D0C-B849B7DFC83E}
[2012/06/14 09:52:38 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{1C4552E8-EA04-446F-8BDD-E6B6DBD7FA5E}
[2012/06/13 21:52:11 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{FAC097E2-CE3C-4381-993C-582D4B46F810}
[2012/06/13 21:52:00 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{56778FDB-DB7E-4877-869C-8892A17CF88F}
[2012/06/13 21:16:57 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\BestPractices
[2012/06/13 21:16:56 | 000,000,000 | ---D | C] -- C:\inetpub
[2012/06/13 21:16:56 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\BestPractices
[2012/06/13 09:51:34 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{E5357156-3FCA-4248-9AFD-9F50C0EDEA53}
[2012/06/13 09:51:23 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\{8F05AC4A-8AF2-459C-84A9-669042733FF7}
[2012/06/12 23:14:48 | 000,000,000 | ---D | C] -- C:\Users\alan\AppData\Local\CrashDumps
[2012/04/09 00:32:21 | 000,214,016 | R--- | C] (RAD Game Tools, Inc.) -- C:\Program Files (x86)\binkw32.dll
[2012/04/09 00:32:20 | 019,123,536 | R--- | C] (Bethesda Softworks) -- C:\Program Files (x86)\TESV.exe
[2012/04/09 00:32:20 | 001,880,400 | R--- | C] (Bethesda Softworks) -- C:\Program Files (x86)\SkyrimLauncher.exe
[2011/07/23 17:14:06 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\alan\AppData\Roaming\pcouffin.sys
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/07/12 09:11:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/12 08:27:39 | 000,711,240 | ---- | M] () -- C:\Windows\is-89ECA.exe
[2012/07/12 08:27:39 | 000,010,550 | ---- | M] () -- C:\Windows\is-89ECA.msg
[2012/07/12 08:27:39 | 000,000,459 | ---- | M] () -- C:\Windows\is-89ECA.lst
[2012/07/12 03:56:13 | 000,654,944 | ---- | M] (Wellbia.com Co., Ltd.) -- C:\Windows\SysWow64\xsherlock.xem
[2012/07/11 07:28:24 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/11 07:28:24 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/11 07:21:11 | 000,274,312 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/11 07:20:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/11 07:20:37 | 3207,946,240 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/08 12:05:36 | 000,001,975 | ---- | M] () -- C:\Users\Public\Desktop\Webzen Hub.lnk
[2012/07/08 12:01:28 | 000,001,952 | ---- | M] () -- C:\Users\alan\Desktop\C9.lnk
[2012/07/07 08:42:06 | 000,001,547 | ---- | M] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2012/07/05 09:05:25 | 000,000,136 | ---- | M] () -- C:\League of legends - Shortcut.lnk
[2012/07/05 08:37:44 | 000,013,290 | ---- | M] () -- C:\Users\alan\Documents\cc_20120705_083732.reg
[2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/03 10:59:38 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012/07/03 10:59:38 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012/07/02 07:32:00 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012/07/02 07:31:51 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012/07/01 21:42:49 | 000,001,170 | ---- | M] () -- C:\Users\alan\Desktop\Battlefield 3.lnk
[2012/06/30 15:14:13 | 000,007,617 | ---- | M] () -- C:\Users\alan\AppData\Local\resmon.resmoncfg
[2012/06/30 14:24:53 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/06/30 14:24:44 | 000,903,580 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012/06/30 14:24:44 | 000,739,826 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/06/30 14:24:44 | 000,149,734 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/06/27 06:21:07 | 000,007,820 | ---- | M] () -- C:\Users\alan\Documents\cc_20120627_062103.reg
[2012/06/27 06:13:11 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/06/25 16:04:24 | 001,394,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml4.dll
[2012/06/23 13:15:17 | 000,049,558 | ---- | M] () -- C:\Users\alan\Documents\cc_20120623_131507.reg
[2012/06/23 02:05:20 | 000,001,190 | ---- | M] () -- C:\Windows\SysWow64\ServiceConfig.xml
[2012/06/23 02:05:20 | 000,000,334 | ---- | M] () -- C:\Windows\SysWow64\CountScans.XML
[2012/06/23 02:01:35 | 000,198,832 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll
[2012/06/23 02:01:27 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll
[2012/06/23 02:01:27 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll
[2012/06/23 02:01:26 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2012/06/22 01:52:54 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012/06/21 19:44:54 | 000,001,254 | ---- | M] () -- C:\Users\alan\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/06/21 07:06:18 | 000,900,364 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/06/21 02:36:19 | 000,000,567 | ---- | M] () -- C:\Users\alan\AppData\Roaming\mbam.context.scan
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/07/12 08:27:39 | 000,711,240 | ---- | C] () -- C:\Windows\is-89ECA.exe
[2012/07/12 08:27:39 | 000,010,550 | ---- | C] () -- C:\Windows\is-89ECA.msg
[2012/07/12 08:27:39 | 000,000,459 | ---- | C] () -- C:\Windows\is-89ECA.lst
[2012/07/08 12:05:36 | 000,001,975 | ---- | C] () -- C:\Users\Public\Desktop\Webzen Hub.lnk
[2012/07/08 12:01:28 | 000,001,952 | ---- | C] () -- C:\Users\alan\Desktop\C9.lnk
[2012/07/07 08:42:06 | 000,001,547 | ---- | C] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2012/07/05 09:05:25 | 000,000,136 | ---- | C] () -- C:\League of legends - Shortcut.lnk
[2012/07/05 08:37:42 | 000,013,290 | ---- | C] () -- C:\Users\alan\Documents\cc_20120705_083732.reg
[2012/07/01 21:42:49 | 000,001,170 | ---- | C] () -- C:\Users\alan\Desktop\Battlefield 3.lnk
[2012/07/01 21:37:40 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012/06/30 14:24:48 | 000,001,915 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012/06/27 06:21:05 | 000,007,820 | ---- | C] () -- C:\Users\alan\Documents\cc_20120627_062103.reg
[2012/06/23 13:15:11 | 000,049,558 | ---- | C] () -- C:\Users\alan\Documents\cc_20120623_131507.reg
[2012/06/23 02:05:20 | 000,001,190 | ---- | C] () -- C:\Windows\SysWow64\ServiceConfig.xml
[2012/06/23 02:05:20 | 000,000,334 | ---- | C] () -- C:\Windows\SysWow64\CountScans.XML
[2012/06/22 02:26:25 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012/06/21 20:18:54 | 000,001,142 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012/06/21 02:36:19 | 000,000,567 | ---- | C] () -- C:\Users\alan\AppData\Roaming\mbam.context.scan
[2012/05/15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012/03/07 22:37:04 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2011/09/14 00:11:43 | 000,110,104 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011/08/17 19:42:36 | 000,000,286 | ---- | C] () -- C:\Windows\reimage.ini
[2011/08/06 02:33:07 | 002,772,992 | ---- | C] () -- C:\Users\alan\s-1-5-21-598752345-1450675593-3424785095-1000.rrr
[2011/07/31 09:47:37 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2011/07/23 17:14:06 | 000,099,384 | ---- | C] () -- C:\Users\alan\AppData\Roaming\inst.exe
[2011/07/23 17:14:06 | 000,007,859 | ---- | C] () -- C:\Users\alan\AppData\Roaming\pcouffin.cat
[2011/07/23 17:14:06 | 000,001,167 | ---- | C] () -- C:\Users\alan\AppData\Roaming\pcouffin.inf
[2011/07/23 15:18:41 | 000,001,057 | ---- | C] () -- C:\Users\alan\AppData\Roaming\vso_ts_preview.xml
[2011/06/04 23:05:06 | 000,000,092 | ---- | C] () -- C:\Users\alan\AppData\Local\fusioncache.dat
[2011/06/04 23:03:05 | 000,903,580 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/06/04 22:57:01 | 000,669,184 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2011/06/04 22:57:01 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011/05/28 06:04:36 | 000,007,617 | ---- | C] () -- C:\Users\alan\AppData\Local\resmon.resmoncfg
[2011/05/27 03:01:24 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2011/05/24 23:44:26 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011/05/20 18:33:48 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011/05/20 18:28:27 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
[2011/05/20 18:22:07 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
[2011/05/20 18:18:22 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2011/03/17 13:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

========== LOP Check ==========

[2012/03/04 19:08:53 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\ATViewer
[2011/09/01 10:07:23 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Auslogics
[2012/02/16 01:30:04 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\AVG
[2012/02/14 11:50:29 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\AVG2012
[2011/08/06 15:15:40 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\BitZipper
[2012/06/03 10:13:17 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\DriverCure
[2011/09/26 15:40:38 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Dropbox
[2011/11/17 17:52:19 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Fighters
[2011/08/31 21:03:37 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\GlarySoft
[2012/04/06 16:13:28 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\IObit
[2012/03/30 17:45:50 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Leadertech
[2011/06/13 20:31:42 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\LolClient
[2012/05/29 09:53:33 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\LolClient2
[2012/06/12 03:05:26 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\OpenCandy
[2011/11/25 14:58:39 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Origin
[2012/06/23 10:55:56 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Panda Security
[2012/07/07 07:11:39 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Razer
[2011/08/05 18:33:20 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Registry Mechanic
[2012/05/20 23:17:06 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\runic games
[2012/03/06 12:19:25 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\SlimCleaner
[2012/06/12 03:05:43 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\Sony
[2011/11/15 19:48:09 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\SpinTop
[2011/06/04 07:58:57 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\The Creative Assembly
[2011/08/17 19:30:49 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\TS3Client
[2011/08/17 19:21:32 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\ts3overlay
[2012/06/12 03:05:47 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\uTorrent
[2012/06/12 03:05:55 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\wargaming.net
[2011/07/23 11:18:53 | 000,000,000 | ---D | M] -- C:\Users\alan\AppData\Roaming\WinZip
[2012/05/24 13:45:42 | 000,032,618 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1028.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1031.txt
[2007/11/07 08:00:40 | 000,010,134 | ---- | M] () -- C:\eula.1033.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1036.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1040.txt
[2007/11/07 08:00:40 | 000,000,118 | ---- | M] () -- C:\eula.1041.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1042.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.2052.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.3082.txt
[2007/11/07 08:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini
[2012/07/11 07:20:37 | 3207,946,240 | -HS- | M] () -- C:\hiberfil.sys
[2007/11/07 08:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini
[2007/11/07 08:03:18 | 000,076,304 | ---- | M] (Microsoft Corporation) -- C:\install.res.1028.dll
[2007/11/07 08:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.1031.dll
[2007/11/07 08:03:18 | 000,091,152 | ---- | M] (Microsoft Corporation) -- C:\install.res.1033.dll
[2007/11/07 08:03:18 | 000,097,296 | ---- | M] (Microsoft Corporation) -- C:\install.res.1036.dll
[2007/11/07 08:03:18 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll
[2007/11/07 08:03:18 | 000,081,424 | ---- | M] (Microsoft Corporation) -- C:\install.res.1041.dll
[2007/11/07 08:03:18 | 000,079,888 | ---- | M] (Microsoft Corporation) -- C:\install.res.1042.dll
[2007/11/07 08:03:18 | 000,075,792 | ---- | M] (Microsoft Corporation) -- C:\install.res.2052.dll
[2007/11/07 08:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.3082.dll
[2012/07/05 09:05:25 | 000,000,136 | ---- | M] () -- C:\League of legends - Shortcut.lnk
[2011/09/03 11:24:33 | 002,307,072 | ---- | M] () -- C:\LeagueofLegends (1).exe
[2006/12/01 23:37:14 | 000,904,704 | ---- | M] (Microsoft Corporation) -- C:\msdia80.dll
[2012/07/11 07:20:40 | 4277,264,384 | -HS- | M] () -- C:\pagefile.sys
[2012/03/15 11:12:44 | 000,000,510 | ---- | M] () -- C:\settings.ini
[2009/11/07 01:23:32 | 001,670,656 | ---- | M] (Runic Games, Inc.) -- C:\Torchlight.exe
[2012/04/24 21:05:08 | 000,000,150 | ---- | M] () -- C:\user.js
[2007/11/07 08:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp
[2007/11/07 08:09:22 | 001,442,522 | ---- | M] () -- C:\VC_RED.cab
[2007/11/07 08:12:28 | 000,232,960 | ---- | M] () -- C:\VC_RED.MSI

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\drivers\*.sys /90 >

< %appdata%\*.* >
[2011/07/23 17:14:06 | 000,099,384 | ---- | M] () -- C:\Users\alan\AppData\Roaming\inst.exe
[2012/06/21 02:36:19 | 000,000,567 | ---- | M] () -- C:\Users\alan\AppData\Roaming\mbam.context.scan
[2011/07/23 17:14:06 | 000,007,859 | ---- | M] () -- C:\Users\alan\AppData\Roaming\pcouffin.cat
[2011/07/23 17:14:06 | 000,001,167 | ---- | M] () -- C:\Users\alan\AppData\Roaming\pcouffin.inf
[2011/07/23 17:14:06 | 000,000,055 | ---- | M] () -- C:\Users\alan\AppData\Roaming\pcouffin.log
[2011/07/23 17:14:06 | 000,082,816 | ---- | M] (VSO Software) -- C:\Users\alan\AppData\Roaming\pcouffin.sys
[2011/07/23 16:39:39 | 000,001,057 | ---- | M] () -- C:\Users\alan\AppData\Roaming\vso_ts_preview.xml

< %PROGRAMFILES%\*. >
[2011/08/30 23:18:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ADLSoft UnCompressor
[2012/03/08 15:16:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2011/05/30 20:46:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ask.com
[2011/05/20 18:29:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies
[2012/02/15 03:18:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AVG
[2012/07/02 07:20:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Battlelog Web Plugins
[2012/06/05 15:35:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CCP
[2011/07/31 00:05:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Chrome
[2012/07/08 12:05:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2012/05/31 14:46:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Conduit
[2012/06/26 09:40:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Diablo III
[2012/06/23 02:10:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
[2012/02/23 05:51:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Downloaded Installers
[2012/04/11 17:03:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVD Flick
[2011/06/17 01:07:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EA Games
[2012/07/06 06:44:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Electronic Arts
[2011/06/26 11:28:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\eMule
[2011/05/20 18:21:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Etron Technology
[2011/08/06 15:13:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\File Type Assistant
[2011/09/25 14:16:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FoxTabFLVPlayer
[2012/05/04 08:57:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Futuremark
[2011/08/08 21:30:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Geeks3D
[2012/04/20 12:48:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GIGABYTE
[2012/06/27 06:19:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2012/05/06 11:48:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HTC
[2012/06/23 01:07:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\I Want This
[2012/07/08 10:12:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2011/05/29 22:55:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2012/07/11 07:19:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2012/06/01 11:20:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\IObit
[2012/03/05 09:45:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2012/07/12 08:27:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/04/15 23:20:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2011/02/11 17:10:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2012/06/30 14:24:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Security Client
[2012/05/14 15:35:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2011/02/11 17:13:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2011/08/25 19:31:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft XNA
[2011/05/27 12:27:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2011/09/16 03:19:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mIRC
[2012/06/21 20:18:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2012/06/21 20:18:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2012/07/09 17:24:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSI Afterburner
[2011/10/08 18:35:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2012/07/07 08:35:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2011/08/02 16:46:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenAL
[2012/06/27 06:25:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Origin
[2012/07/01 21:47:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Origin Games
[2012/07/08 12:05:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Overwolf
[2012/07/06 06:46:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Pando Networks
[2012/04/08 23:52:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PowerISO
[2012/06/21 04:39:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Razer
[2012/04/25 15:20:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\REACTOR
[2012/06/23 02:01:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Real
[2012/02/19 16:37:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2012/06/12 02:50:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\RIFT Game
[2012/05/16 18:08:05 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2012/05/13 12:20:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Smart PC Utilities
[2012/05/24 02:37:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Sony
[2012/02/28 12:18:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\StarCraft II
[2012/06/23 14:20:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Steam
[2011/08/25 19:32:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Stunlock Studios
[2012/03/04 19:49:35 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
[2012/04/11 20:03:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\The Elder Scrolls V Skyrim
[2012/06/05 17:39:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\The Witcher 2
[2009/07/14 00:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2012/03/05 09:54:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Universal Viewer
[2012/05/16 16:56:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\vegas 11 pro
[2011/06/05 13:27:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
[2012/07/08 11:53:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WEBZEN
[2012/04/28 03:30:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2012/05/06 11:57:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2010/11/21 03:06:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2010/11/21 03:06:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2012/04/22 14:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2012/04/28 03:30:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2010/11/21 03:06:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2012/05/04 20:43:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR
[2012/06/21 11:48:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Wise
[2012/07/04 08:40:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\World of Warcraft
[2011/11/22 11:40:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Xvid
[2011/07/14 22:48:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Yahoo!

< >

< End of report >
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP