Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Antivirus and Internet Explorer will not open [Solved]


  • This topic is locked This topic is locked

#1
NatiePotatie

NatiePotatie

    Member

  • Member
  • PipPip
  • 20 posts
Hi guys, I'm not sure if I am allowed to do this but I have
another post open in this forum, but this post is of more importance.

My brother's computer got infected the other day. I'm not sure how he got infected
but the symptoms include:

  • Microsoft Security Essentials and
    Malwarebytes Anti-Malware to not open
  • internet explorer to not open. a certificate error comes up that asks to prevent attack.

random errors pop up that include:

  • an attempt to modify registry failed
  • torrent alerts that tell me torrent links have been detected
  • warning! virus detected
    threat detected: multipacked
    C:\Windows\system32\en-US\ddraw.dll.mui

That's about as specific as I can get. Here is the OTL scan. Thank you for any help!


OTL

OTL logfile created on: 7/13/2012 6:21:11 PM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Nathan\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.95 Gb Total Physical Memory | 3.73 Gb Available Physical Memory | 62.65% Memory free
11.90 Gb Paging File | 9.63 Gb Available in Paging File | 80.92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 571.05 Gb Total Space | 510.89 Gb Free Space | 89.46% Space Free | Partition Type: NTFS
Drive D: | 20.96 Gb Total Space | 2.26 Gb Free Space | 10.78% Space Free | Partition Type: NTFS
Drive E: | 3.96 Gb Total Space | 1.08 Gb Free Space | 27.23% Space Free | Partition Type: FAT32
Drive G: | 3.76 Gb Total Space | 3.75 Gb Free Space | 99.98% Space Free | Partition Type: FAT32

Computer Name: NATHAN-HP | User Name: Nathan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/07/13 18:17:52 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
PRC - [2012/07/10 16:20:12 | 001,107,552 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
PRC - [2012/07/09 00:31:56 | 002,232,320 | ---- | M] (IDE Area) -- C:\Users\Nathan\AppData\Roaming\Protector-umai.exe
PRC - [2012/06/18 20:03:19 | 000,935,480 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe
PRC - [2012/05/03 13:07:40 | 000,217,256 | ---- | M] (Visicom Media Inc. (Powered by Panda Security)) -- C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe
PRC - [2012/05/02 14:51:02 | 002,219,008 | ---- | M] (Jackpot Rewards) -- C:\Program Files (x86)\Shop To Win\ShopToWin.exe
PRC - [2012/03/30 10:27:03 | 002,089,984 | ---- | M] (MediaFire LLC) -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_systray.exe
PRC - [2012/03/30 10:27:03 | 001,934,336 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_status.exe
PRC - [2012/03/30 10:27:02 | 002,978,816 | ---- | M] (MediaFire) -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_services.exe
PRC - [2012/03/30 10:27:02 | 001,953,280 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_daemon.exe
PRC - [2012/03/27 18:14:06 | 000,138,232 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\ccsvchst.exe
PRC - [2011/08/26 14:37:18 | 001,342,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
PRC - [2011/08/19 15:48:44 | 000,379,960 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
PRC - [2011/07/11 15:04:44 | 000,574,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2011/07/11 15:04:44 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2011/06/28 04:41:08 | 000,168,504 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
PRC - [2011/06/15 19:58:28 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
PRC - [2011/05/21 18:52:16 | 000,103,992 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2011/05/06 01:06:46 | 000,263,496 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
PRC - [2011/05/06 01:06:28 | 000,653,128 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
PRC - [2011/05/06 01:06:02 | 000,142,664 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
PRC - [2011/04/30 03:32:54 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2011/02/25 12:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
PRC - [2011/02/22 15:19:12 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2011/02/22 15:19:08 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2010/09/30 05:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2012/07/10 16:20:12 | 001,107,552 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
MOD - [2012/07/10 16:20:12 | 000,132,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\SiteSafety.dll
MOD - [2012/05/13 13:55:45 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012/05/13 13:55:40 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012/04/25 18:37:18 | 000,632,832 | ---- | M] () -- C:\Program Files (x86)\Shop To Win\sqlite3.dll
MOD - [2012/03/30 10:27:06 | 001,351,711 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mediafire_api_connect.dll
MOD - [2012/03/30 10:27:05 | 018,678,784 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtGui4.dll
MOD - [2012/03/30 10:27:05 | 000,978,958 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libstdc++-6.dll
MOD - [2012/03/30 10:27:05 | 000,338,432 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtXml4.dll
MOD - [2012/03/30 10:27:05 | 000,151,054 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libexpat-1.dll
MOD - [2012/03/30 10:27:05 | 000,118,784 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libgcc_s_dw2-1.dll
MOD - [2012/03/30 10:27:04 | 004,533,248 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtCore4.dll
MOD - [2012/03/30 10:27:03 | 001,934,336 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_status.exe
MOD - [2012/03/30 10:27:02 | 001,953,280 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_daemon.exe
MOD - [2012/03/30 10:19:13 | 000,231,424 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\imageformats\qjpeg4.dll
MOD - [2012/03/30 10:19:13 | 000,028,160 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\imageformats\qgif4.dll
MOD - [2012/03/26 12:49:18 | 000,877,952 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\HP.SupportFramework\1.0.0.0__2a4860322af7ba08\HP.SupportFramework.dll
MOD - [2012/02/20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/02/20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012/03/26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012/03/26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2011/05/27 14:06:16 | 000,301,568 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:64bit: - [2011/05/27 13:20:12 | 000,030,520 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV:64bit: - [2011/05/02 16:27:50 | 001,517,328 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel®
SRV:64bit: - [2011/05/02 16:13:54 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2011/05/02 16:10:26 | 000,844,560 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel®
SRV:64bit: - [2011/04/21 10:34:16 | 001,136,640 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011/04/21 09:42:50 | 000,134,928 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) Intel® Centrino® Wireless Bluetooth®
SRV:64bit: - [2010/10/11 04:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
SRV:64bit: - [2010/09/22 20:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/03/03 05:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
SRV - [2012/06/23 00:51:31 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/06/18 20:03:19 | 000,935,480 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe -- (vToolbarUpdater11.1.0)
SRV - [2012/04/20 20:19:00 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/03/27 18:14:06 | 000,138,232 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\ccSvcHst.exe -- (NIS)
SRV - [2011/09/09 18:10:28 | 000,086,072 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
SRV - [2011/07/11 15:04:44 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
SRV - [2011/05/21 18:52:16 | 000,103,992 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2011/05/06 01:06:46 | 000,263,496 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe -- (FPLService)
SRV - [2011/04/30 03:32:54 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel®
SRV - [2011/03/07 19:43:30 | 002,375,168 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
SRV - [2011/03/01 23:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 12:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe -- (jhi_service) Intel®
SRV - [2011/02/22 15:19:12 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel®
SRV - [2011/02/22 15:19:08 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel®
SRV - [2010/10/12 12:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/09/30 05:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/03/29 01:28:38 | 000,405,624 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\symnets.sys -- (SymNetS)
DRV:64bit: - [2012/03/29 01:28:30 | 001,092,728 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\symefa64.sys -- (SymEFA)
DRV:64bit: - [2012/03/29 01:06:25 | 000,190,072 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\ironx64.sys -- (SymIRON)
DRV:64bit: - [2012/03/29 01:03:27 | 000,737,912 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2012/03/29 01:03:27 | 000,037,496 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2012/03/27 15:09:30 | 000,175,736 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2012/03/20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/11/29 17:44:29 | 000,167,048 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\ccsetx64.sys -- (ccSet_NIS)
DRV:64bit: - [2011/11/28 14:51:44 | 000,033,872 | ---- | M] (AnvSoft Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv)
DRV:64bit: - [2011/08/05 13:34:02 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011/08/05 13:34:00 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011/07/08 19:08:26 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/07/08 19:08:26 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/05/27 14:06:16 | 000,528,384 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2011/05/27 13:20:12 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2011/05/27 13:20:12 | 000,030,008 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2011/05/16 15:03:26 | 000,451,192 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\symds64.sys -- (SymDS)
DRV:64bit: - [2011/05/01 16:33:06 | 008,593,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel®
DRV:64bit: - [2011/04/26 14:07:36 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011/04/21 10:09:26 | 000,294,912 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) Intel® Centrino®
DRV:64bit: - [2011/04/21 10:09:26 | 000,294,912 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) Intel® Centrino®
DRV:64bit: - [2011/04/15 14:08:26 | 012,228,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/24 19:20:36 | 000,337,512 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2011/03/23 13:20:58 | 000,077,936 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2011/02/22 06:54:22 | 000,351,864 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2010/11/20 22:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 22:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 22:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/10/19 19:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel®
DRV:64bit: - [2010/10/15 04:28:16 | 000,317,440 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel®
DRV:64bit: - [2010/07/28 11:13:50 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 19:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/06/10 16:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009/06/10 16:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009/06/10 16:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009/06/10 15:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009/06/10 15:34:38 | 001,311,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2012/02/23 16:10:53 | 002,048,632 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20120223.001\ex64.sys -- (NAVEX15)
DRV - [2012/02/23 16:10:53 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20120223.001\eng64.sys -- (NAVENG)
DRV - [2012/02/05 22:38:11 | 000,138,360 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012/02/04 14:20:35 | 000,482,936 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2011/11/30 21:25:03 | 001,157,240 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20120215.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2011/11/30 18:49:05 | 000,488,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20120222.002\IDSviA64.sys -- (IDSVia64)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKLM\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.c...sa&d=2012-05-08 21:17:33&v=11.0.0.9&sap=hp
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE - HKCU\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://blekkosearch....q={searchTerms}
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...sa&d=2012-05-08 21:17:33&v=11.0.0.9&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKCU\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local;*.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Blekko"
FF - prefs.js..browser.search.order.1: "Blekko"
FF - prefs.js..browser.search.selectedEngine: "Blekko"
FF - prefs.js..browser.startup.homepage: "http://isearch.avg.c...05-08 21:17:33"
FF - prefs.js..keyword.URL: "http://blekko.com/ws...={searchTerms}"


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\IPSFFPlgn\ [2012/02/07 16:00:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\coFFPlgn\ [2012/07/13 18:13:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012/07/10 16:20:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/05/09 19:33:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/05/03 15:18:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Extensions
[2012/05/09 19:34:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions
[2012/05/09 19:34:14 | 000,000,000 | ---D | M] (Qwiklinx for Firefox) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\{6921B3CC-9935-4D28-9A83-B3D824210580}
[2012/05/09 19:33:18 | 000,000,000 | ---D | M] (Blekko search bar) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\{7d9e1adc-7db1-4eaf-b6c7-7e062074e6be}
[2012/05/09 19:34:10 | 000,000,000 | ---D | M] (ShopToWin20) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\{a018b213-6b46-4791-9298-519020db5737}
[2012/05/09 19:33:48 | 000,000,000 | ---D | M] (Yontoo) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\[email protected]
[2012/05/08 15:15:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/05/08 15:15:48 | 000,000,000 | ---D | M] (TrueSuite Website Logon) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
[2012/05/08 21:17:39 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\PROGRAMDATA\AVG SECURE SEARCH\11.0.0.9
[2012/04/20 20:19:34 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/07/10 16:20:11 | 000,003,769 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/04/20 20:18:25 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/05/09 19:33:17 | 000,002,158 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\search.xml
[2012/04/20 20:18:25 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - homepage: http://blekkosearch....1E&tbp=homepage
CHR - default_search_provider: Blekko (Enabled)
CHR - default_search_provider: search_url = http://blekko.com/ws...q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: http://blekkosearch....1E&tbp=homepage
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: nphelper scriptable example plugin (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo\1.2_0\nphelper.dll
CHR - plugin: Simple Pass 2011 (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhihajbmafmgilcciomnamcjfkdhikl\1.0_0\npwebsitelogon.dll
CHR - plugin: Norton Confidential (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.3.7_0\npcoplgn.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.0.2\\npsitesafety.dll
CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: WildTangent Games App Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Nathan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: Make this page red = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo\1.2_0\
CHR - Extension: Website Logon = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhihajbmafmgilcciomnamcjfkdhikl\1.0_0\
CHR - Extension: Norton Identity Protection = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.4.6_0\
CHR - Extension: Yontoo = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.2_0\

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
O2 - BHO: (Qwiklinx) - {3E7C8B5A-96AB-438F-BF9B-782400655440} - C:\Users\Nathan\AppData\Roaming\Qwiklinx\Qwiklinx.dll (Qwiklinx, Inc.)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Blekko search bar) - {7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} - C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll ()
O2 - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Shop to Win) - {F9E44926-2497-46F3-8A25-928136AC079E} - C:\Program Files (x86)\Shop to Win 20\Shop to Win 20.dll (Shop To Win, LLC)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (Blekko search bar) - {7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} - C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe (Hewlett-Packard Development Company, L.P.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Anti-phishing Domain Advisor] C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe (Visicom Media Inc. (Powered by Panda Security))
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPQuickWebProxy] C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKCU..\Run: [Inspector] C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
O4 - HKCU..\Run: [MediaFire Tray] C:\Users\Nathan\AppData\Local\MediaFire Express\mf_systray.exe (MediaFire LLC)
O4 - HKCU..\Run: [PC Speed Maximizer] "C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe" File not found
O4 - HKCU..\Run: [Shop To Win] C:\Program Files (x86)\Shop To Win\ShopToWin.exe (Jackpot Rewards)
O4 - HKCU..\Run: [SPMTray] "C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe" File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{675A01D0-05AF-446C-A3F2-969ADAE6D4C0}: DhcpNameServer = 10.0.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\_avp32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\_avpcc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\_avpm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\~1.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\~2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\a.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\aAvgApi.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AAWTray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\About.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ackwin32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\adaware.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\Ad-Aware.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\advxdwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AdwarePrj.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\agent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\agentsvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\agentw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\alertsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\alevir.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\alogserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AlphaAV: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AlphaAV.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AluSchedulerSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\amon9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AntispywarXP2009.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\anti-trojan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\Anti-Virus Professional.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\antivirus.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AntiVirus_Pro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AntivirusPlus: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AntivirusPlus.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AntivirusPro_2010.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AntivirusXP: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AntivirusXP.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\antivirusxppro2009.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ants.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\apimonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\aplica32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\apvxdwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\arr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashAvast.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashBug.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashChest.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashCnsnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashDisp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashLogV.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashMaiSv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashPopWz.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashQuick.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashServ.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashSimp2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashSimpl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashSkPcc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashSkPck.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashUpd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ashWebSv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\aswChLic.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\aswRegSvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\aswRunDll.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\aswUpdSv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\atcon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\atguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\atro55en.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\atupdater.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\atwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\au.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\aupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\autodown.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\auto-protect.nav80try.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\autotrace.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\autoupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\av360.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avadmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avastSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avastUI.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AVCare.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avcenter.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avciman.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avconfig.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avconsol.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ave32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AVENGINE.EXE: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgcc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgchk.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgcmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgcsrvx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgdumpx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgemc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgiproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgnsx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgrsx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgscanx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgserv9.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgsrmax.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgtray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avgwdsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avkpop.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avkserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avkservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avkwctl9.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avltmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avmailc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avmcdlg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avnotify.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avp32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avpcc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avpdos32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avpm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avptc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avpupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avsched32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avshadow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avsynmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avupgsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\AVWEBGRD.EXE: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avwin95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avwinnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avwsc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avwupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avwupd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avwupsrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avxmonitor9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avxmonitornt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\avxquar.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\b.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\backweb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bargains.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bd_professional.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bdfvcl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bdfvwiz.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\BDInProcPatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bdmcon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\BDMsnScan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\BDSurvey.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\beagle.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\belt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bidef.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bidserver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bipcp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bipcpevalsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bisp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\blackd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\blackice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\blink.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\blss.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bootconf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bootwarn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\borg2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bpc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\brasil.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\brastk.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\brw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bs120.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bspatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bundle.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bvt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\c.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cavscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ccapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ccevtmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ccpxysvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cdp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfgwiz.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfiadmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfiaudit.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfinet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfinet32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfpconfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfplogvw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cfpupdat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\claw95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\claw95cf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\clean.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cleaner.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cleaner3.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cleanIELow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cleanpc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\click.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cmd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cmdagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cmesys.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cmgrdian.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cmon016.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\connectionmonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\control: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cpd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cpf9x206.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cpfnt206.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\crashrep.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\csc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cssconfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cssupdat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cssurf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cwnb181.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\cwntdwmo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\d.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\datemanager.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dcomx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\defalert.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\defscangui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\defwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\deloeminfs.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\deputy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\divx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dllcache.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dllreg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\doors.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dop.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dpf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dpfsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dpps2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\driverctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\drwatson.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\drweb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\drwebupw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dssagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dvp95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dvp95_0.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ecengine.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\efpeadm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\emsw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\esafe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\escanhnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\escanv95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\espwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ethereal.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\etrustcipe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\evpn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\exantivirus-cnet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\exe.avxw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\expert.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\explore.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fact.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\f-agnt95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fameh32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fast.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fch32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fih32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\findviru.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\firewall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fixcfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fixfp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fnrb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fprot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\f-prot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\f-prot95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fp-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fp-win_trial.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\frmwrk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\frw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsaa.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsav32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsav530stbyb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsav530wtbyb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsav95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsgk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsm32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsma32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\fsmb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\f-stopw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\gator.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\gav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\gbmenu.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\gbn976rl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\gbpoll.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\generics.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\gmt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\guard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\guarddog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\guardgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\guardxkickoff.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hacktracersetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hbinst.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hbsrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\History.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\homeav2010.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hotactio.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hotpatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\htlog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\htpatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hwpe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hxdl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\hxiul.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\iamapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\iamserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\iamstats.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ibmasn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ibmavsp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\icload95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\icloadnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\icmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\icsupp95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\icsuppnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\Identity.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\idle.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\iedll.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\iedriver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\IEShow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\iface.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ifw2000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\inetlnfo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\infus.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\infwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\init.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\init32.exe : Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\install[1].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\install[2].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\install[3].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\install[4].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\install[5].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\intdel.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\intren.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\iomon98.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\istsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\jammer.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\jdbgmrg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\jedi.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\JsRcGen.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\kavlite40eng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\kavpers40eng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\kavpf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\kazza.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\keenvalue.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\kerio-pf-213-en-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\kerio-wrl-421-en-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\kerio-wrp-421-en-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\killprocesssetup161.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ldnetmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ldpro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ldpromenu.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\ldscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\licmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\lnetinfo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\loader.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\localnet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\lockdown.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\lockdown2000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\lookout.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\lordpe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\lsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\luall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\luau.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\lucomserver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\luinit.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\luspt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\MalwareRemoval.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mapisvc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mbam.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mbamgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mbamservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcmnhdlr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcmpeng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcmscsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcnasvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\McSACore.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcshell.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcshield.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcsysmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mctool.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcvsrte.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mcvsshld.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\md.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mfin32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mfw2en.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mfweng3.02d30.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mgavrtcl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mgavrte.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mghtml.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\minilog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mmod.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\monitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\moolive.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mostat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mpfagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mpfservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\MPFSrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mpftray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mrflux.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mrt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\msa.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\msapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\MSASCui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\msbb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\msblast.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\mscache.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\msccn32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\mscman.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msconfig: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msdm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msdos.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msiexec16.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\mslaugh.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msmgt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msmsgri32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msseces.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\mssmmc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\mssys.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\msvxd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\mu0311ad.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\mwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\n32scanw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\navap.navapsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\navapsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\navapw32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\navdx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\navlu32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\navnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\navstub.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nc2000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ncinst4.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ndd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\neomonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\neowatchlog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\netarmor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\netd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\netinfo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\netmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\netscanpro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\netspyhunter-1.2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\netutils.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nisserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nisum.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nod32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\normist.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\norton_internet_secu_3.0_407.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\notstart.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\npf40_tw_98_nt_me_2k.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\npfmessenger.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nprotect.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\npscheck.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\npssvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nsched32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nssys32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nstask32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nsupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ntrtscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ntvdm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ntxconfig.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nupgrade.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nvarch16.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nvc95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nvsvc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nwinst4.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nwservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\nwtool16.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\OAcat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\OAhlp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\OAReg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\oasrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\oaui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\oaview.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ODSW.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ollydbg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\onsrvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\optimize.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ostronet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\otfix.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\outpost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\outpostinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\outpostproinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ozn695m5.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\padmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\panixk.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\patch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pavcl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PavFnSvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pavproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pavprsrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pavsched.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pavsrv51.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pavw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PC_Antispyware2010.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pccwin98.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pcfwallicon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pcip10117_0.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pcscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pctsAuxs.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pctsGui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pctsSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pctsTray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pdfndr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pdsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PerAvir.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\periscope.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\persfw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\personalguard: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\personalguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\perswf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pf2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pfwadmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pgmonitr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pingscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\platin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pop3trap.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\poproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\popscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\portdetective.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\portmonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\powerscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ppinupdt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pptbc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ppvstop.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\prizesurfer.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\prmt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\prmvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\procdump.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\processmonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\procexplorerv1.0.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\programauditor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\proport.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\protector.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\protectx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PSANCU.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PSANHost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PSANToManager.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PsCtrls.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PsImSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PskSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\pspf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\PSUNMain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\purge.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\qconsole.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\qh.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\qserver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\Quick Heal.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\QuickHealCleaner.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rapapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rav7.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rav7win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rav8win32eng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rcsync.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\realmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\reged.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\regedit.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
O27:[b]64bit:[/b] - HKLM IFEO\regedt32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rescue.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rescue32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rrguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rscdwld.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rshell.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rtvscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rtvscn95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rulaunch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rwg: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rwg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\SafetyKeeper.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\safeweb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sahagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\Save.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\SaveArmor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\SaveDefense.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\SaveKeep.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\savenow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sbserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\scam32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\scan32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\scan95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\scanpm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\scrscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\Secure Veteran.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\secureveteran.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\Security Center.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\SecurityFighter.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\securitysoldier.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\serv95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\setloadorder.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\setup_flowprotector_us.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\setupvameeval.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sgssfw32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sh.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\shellspyinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\shield.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\shn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\showbehind.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\signcheck.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\smart.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\smartprotector.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\smc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\smrtdefp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sms.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\smss32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\snetcfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\soap.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sofi.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\SoftSafeness.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sperm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\spf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sphinx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\spoler.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\spoolcv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\spoolsv32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\spywarexpguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\spyxx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\srexe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\srng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ss3edit.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ssg_4104.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\ssgrate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\st2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\start.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\stcloader.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\supftrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\support.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\supporter5.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\svc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\svchostc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\svchosts.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\svshost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sweep95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sweepnet.sweepsrv.sys.swnetsup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\symlcsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\symproxysvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\symtray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\system.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\system32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sysupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tapinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\taskmgr.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
O27:[b]64bit:[/b] - HKLM IFEO\taumon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tbscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tca.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tcm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tds2-98.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tds2-nt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tds-3.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\teekids.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tfak.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tfak5.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tgbob.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\titanin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\titaninxp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\TPSrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\trickler.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\trjscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\trjsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\trojantrap3.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\TrustWarrior.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tsadbot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tsc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tvmd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tvtmd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\undoboot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\updat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\upgrad.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\utpost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vbcmserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vbcons.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vbust.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vbwin9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vbwinntw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vcsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vet32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vet95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vettray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vfsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vir-help.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\virusmdpersonalfirewall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\virusutilities.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\VisthAux.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\VisthLic.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\VisthUpd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vnlan300.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vnpc3000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vpc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vpc42.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vpfw30s.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vptray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vscan40.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vscenu6.02d30.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vsched.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vsecomr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vshwin32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vsisetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vsmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vsmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vsstat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vswin9xe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vswinntse.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\vswinperse.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\w32dsm89.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\W3asbas.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\w9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\watchdog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\webdav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\WebProxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\webscanx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\webtrap.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wfindv32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\whoswatchingme.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wimmun32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\win32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\win32us.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winactive.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\win-bugsfix.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\windll32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\window.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\windows Police Pro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\windows.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wininetd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wininitx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winlogin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winppr32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winrecon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winservn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winssk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winstart.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winstart001.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wintsk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\winupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wkufind.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wnad.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wradmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wrctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wsbgate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wscfxas.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wscfxav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wscfxfw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wsctool.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wupdater.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wupdt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\wyvernworksfirewall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\xp_antispyware.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\xpdeluxe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\xpf202en.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\zapro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\zapsetup3001.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\zatutor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\zonalm2601.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\zonealarm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\_avp32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\_avpcc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\_avpm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\~1.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\~2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\a.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\aAvgApi.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AAWTray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\About.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ackwin32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\adaware.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\Ad-Aware.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\advxdwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AdwarePrj.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\agent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\agentsvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\agentw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\alertsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\alevir.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\alogserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AlphaAV: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AlphaAV.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AluSchedulerSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\amon9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AntispywarXP2009.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\anti-trojan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\Anti-Virus Professional.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\antivirus.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AntiVirus_Pro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AntivirusPlus: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AntivirusPlus.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AntivirusPro_2010.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AntivirusXP: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AntivirusXP.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\antivirusxppro2009.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ants.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\apimonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\aplica32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\apvxdwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\arr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashAvast.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashBug.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashChest.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashCnsnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashDisp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashLogV.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashMaiSv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashPopWz.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashQuick.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashServ.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashSimp2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashSimpl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashSkPcc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashSkPck.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashUpd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ashWebSv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\aswChLic.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\aswRegSvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\aswRunDll.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\aswUpdSv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\atcon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\atguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\atro55en.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\atupdater.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\atwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\au.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\aupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\autodown.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\auto-protect.nav80try.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\autotrace.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\autoupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\av360.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avadmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avastSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avastUI.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AVCare.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avcenter.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avciman.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avconfig.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avconsol.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ave32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AVENGINE.EXE: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgcc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgchk.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgcmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgcsrvx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgdumpx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgemc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgiproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgnsx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgrsx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgscanx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgserv9.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgsrmax.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgtray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avgwdsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avkpop.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avkserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avkservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avkwctl9.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avltmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avmailc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avmcdlg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avnotify.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avp32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avpcc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avpdos32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avpm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avptc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avpupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avsched32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avshadow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avsynmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avupgsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\AVWEBGRD.EXE: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avwin95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avwinnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avwsc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avwupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avwupd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avwupsrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avxmonitor9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avxmonitornt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\avxquar.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\b.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\backweb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bargains.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bd_professional.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bdfvcl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bdfvwiz.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\BDInProcPatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bdmcon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\BDMsnScan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\BDSurvey.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\beagle.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\belt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bidef.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bidserver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bipcp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bipcpevalsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bisp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\blackd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\blackice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\blink.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\blss.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bootconf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bootwarn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\borg2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\brasil.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\brastk.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\brw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bs120.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bspatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bundle.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\bvt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\c.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cavscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ccapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ccevtmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ccpxysvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cdp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfgwiz.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfiadmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfiaudit.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfinet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfinet32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfpconfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfplogvw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cfpupdat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\claw95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\claw95cf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\clean.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cleaner.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cleaner3.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cleanIELow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cleanpc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\click.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cmd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cmdagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cmesys.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cmgrdian.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cmon016.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\connectionmonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\control: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cpd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cpf9x206.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cpfnt206.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\crashrep.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\csc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cssconfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cssupdat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cssurf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cwnb181.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\cwntdwmo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\d.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\datemanager.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dcomx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\defalert.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\defscangui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\defwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\deloeminfs.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\deputy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\divx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dllcache.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dllreg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\doors.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dop.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dpf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dpfsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dpps2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\driverctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\drwatson.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\drweb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\drwebupw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dssagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dvp95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\dvp95_0.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ecengine.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\efpeadm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\emsw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\esafe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\escanhnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\escanv95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\espwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ethereal.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\etrustcipe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\evpn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\exantivirus-cnet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\exe.avxw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\expert.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\explore.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fact.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\f-agnt95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fameh32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fast.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fch32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fih32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\findviru.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\firewall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fixcfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fixfp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fnrb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fprot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\f-prot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\f-prot95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fp-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fp-win_trial.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\frmwrk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\frw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsaa.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsav32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsav530stbyb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsav530wtbyb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsav95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsgk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsm32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsma32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\fsmb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\f-stopw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\gator.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\gav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\gbmenu.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\gbn976rl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\gbpoll.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\generics.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\gmt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\guard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\guarddog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\guardgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\guardxkickoff.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hacktracersetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hbinst.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hbsrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\History.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\homeav2010.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hotactio.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hotpatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\htlog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\htpatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hwpe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hxdl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\hxiul.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\iamapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\iamserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\iamstats.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ibmasn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ibmavsp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\icload95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\icloadnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\icmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\icsupp95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\icsuppnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\Identity.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\idle.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\iedll.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\iedriver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\IEShow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\iface.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ifw2000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\inetlnfo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\infus.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\infwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\init.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\init32.exe : Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\install[1].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\install[2].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\install[3].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\install[4].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\install[5].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\intdel.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\intren.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\iomon98.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\istsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\jammer.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\jdbgmrg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\jedi.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\JsRcGen.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\kavlite40eng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\kavpers40eng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\kavpf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\kazza.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\keenvalue.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\kerio-pf-213-en-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\kerio-wrl-421-en-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\kerio-wrp-421-en-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\killprocesssetup161.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ldnetmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ldpro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ldpromenu.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ldscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\licmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\lnetinfo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\loader.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\localnet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\lockdown.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\lockdown2000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\lookout.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\lordpe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\lsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\luall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\luau.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\lucomserver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\luinit.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\luspt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\MalwareRemoval.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mapisvc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mbam.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mbamgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mbamservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcmnhdlr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcmpeng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcmscsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcnasvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\McSACore.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcshell.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcshield.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcsysmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mctool.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcvsrte.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mcvsshld.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\md.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mfin32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mfw2en.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mfweng3.02d30.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mgavrtcl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mgavrte.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mghtml.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\minilog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mmod.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\monitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\moolive.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mostat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mpfagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mpfservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\MPFSrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mpftray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mrflux.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mrt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msa.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\MSASCui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msbb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msblast.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mscache.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msccn32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mscman.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msconfig: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msdm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msdos.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msiexec16.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mslaugh.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msmgt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msmsgri32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msseces.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mssmmc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mssys.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\msvxd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mu0311ad.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\mwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\n32scanw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\navap.navapsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\navapsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\navapw32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\navdx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\navlu32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\navnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\navstub.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nc2000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ncinst4.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ndd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\neomonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\neowatchlog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\netarmor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\netd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\netinfo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\netmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\netscanpro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\netspyhunter-1.2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\netutils.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nisserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nisum.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nod32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\normist.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\norton_internet_secu_3.0_407.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\notstart.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\npf40_tw_98_nt_me_2k.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\npfmessenger.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nprotect.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\npscheck.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\npssvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nsched32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nssys32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nstask32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nsupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ntrtscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ntvdm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ntxconfig.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nupgrade.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nvarch16.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nvc95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nvsvc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nwinst4.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nwservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\nwtool16.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\OAcat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\OAhlp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\OAReg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\oasrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\oaui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\oaview.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ODSW.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ollydbg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\onsrvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\optimize.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ostronet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\otfix.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\outpost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\outpostinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\outpostproinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ozn695m5.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\padmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\panixk.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\patch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pavcl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PavFnSvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pavproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pavprsrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pavsched.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pavsrv51.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pavw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PC_Antispyware2010.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pccwin98.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pcfwallicon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pcip10117_0.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pcscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pctsAuxs.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pctsGui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pctsSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pctsTray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pdfndr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pdsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PerAvir.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\periscope.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\persfw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\personalguard: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\personalguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\perswf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pf2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pfwadmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pgmonitr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pingscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\platin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pop3trap.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\poproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\popscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\portdetective.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\portmonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\powerscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ppinupdt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pptbc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ppvstop.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\prizesurfer.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\prmt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\prmvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\procdump.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\processmonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\procexplorerv1.0.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\programauditor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\proport.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\protector.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PSANCU.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PSANHost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PSANToManager.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PsCtrls.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PsImSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PskSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\pspf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\PSUNMain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\purge.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\qconsole.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\qh.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\qserver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\Quick Heal.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\QuickHealCleaner.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rapapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rav7.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rav7win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rav8win32eng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rcsync.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\realmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\reged.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\regedit.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
O27 - HKLM IFEO\regedt32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rescue.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rescue32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rrguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rscdwld.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rshell.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rtvscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rtvscn95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rulaunch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rwg: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\rwg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\SafetyKeeper.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\safeweb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sahagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\Save.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\SaveArmor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\SaveDefense.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\SaveKeep.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\savenow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sbserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\scam32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\scan32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\scan95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\scanpm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\scrscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\Secure Veteran.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\secureveteran.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\Security Center.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\SecurityFighter.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\securitysoldier.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\serv95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\setloadorder.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\setup_flowprotector_us.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\setupvameeval.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sgssfw32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sh.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\shellspyinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\shield.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\shn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\showbehind.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\signcheck.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\smart.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\smartprotector.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\smc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\smrtdefp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sms.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\smss32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\snetcfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\soap.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sofi.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\SoftSafeness.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sperm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\spf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sphinx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\spoler.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\spoolcv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\spoolsv32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\spywarexpguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\spyxx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\srexe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\srng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ss3edit.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ssg_4104.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\ssgrate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\st2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\start.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\stcloader.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\supftrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\support.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\supporter5.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\svc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\svchostc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\svchosts.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\svshost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sweep95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sweepnet.sweepsrv.sys.swnetsup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\symlcsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\symproxysvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\symtray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\system.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\system32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\sysupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tapinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\taskmgr.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
O27 - HKLM IFEO\taumon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tbscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tca.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tcm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tds2-98.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tds2-nt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tds-3.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\teekids.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tfak.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tfak5.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tgbob.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\titanin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\titaninxp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\TPSrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\trickler.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\trjscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\trjsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\trojantrap3.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\TrustWarrior.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tsadbot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tsc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tvmd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\tvtmd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\undoboot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\updat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\upgrad.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\utpost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vbcmserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vbcons.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vbust.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vbwin9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vbwinntw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vcsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vet32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vet95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vettray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vfsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vir-help.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\virusmdpersonalfirewall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\virusutilities.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\VisthAux.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\VisthLic.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\VisthUpd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vnlan300.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vnpc3000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vpc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vpc42.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vpfw30s.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vptray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vscan40.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vscenu6.02d30.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vsched.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vsecomr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vshwin32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vsisetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vsmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vsmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vsstat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vswin9xe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vswinntse.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\vswinperse.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\w32dsm89.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\W3asbas.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\w9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\watchdog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\webdav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\WebProxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\webscanx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\webtrap.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wfindv32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\whoswatchingme.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wimmun32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\win32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\win32us.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winactive.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\win-bugsfix.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\windll32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\window.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\windows Police Pro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\windows.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wininetd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wininitx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winlogin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winppr32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winrecon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winservn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winssk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winstart.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winstart001.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wintsk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\winupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wkufind.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wnad.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wradmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wrctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wsbgate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wscfxas.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wscfxav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wscfxfw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wsctool.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wupdater.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wupdt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\wyvernworksfirewall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\xp_antispyware.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\xpdeluxe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\xpf202en.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\zapro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\zapsetup3001.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\zatutor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\zonalm2601.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O27 - HKLM IFEO\zonealarm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/07/13 18:20:51 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
[2012/07/13 18:13:08 | 000,000,000 | ---D | C] -- C:\c3af3c1134f245b958979060
[2012/07/13 18:07:36 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/07/09 00:34:56 | 002,232,320 | ---- | C] (IDE Area) -- C:\Users\Nathan\AppData\Roaming\Protector-rtpp.exe
[2012/07/09 00:31:56 | 002,232,320 | ---- | C] (IDE Area) -- C:\Users\Nathan\AppData\Roaming\Protector-umai.exe
[2012/06/19 09:54:00 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012/06/19 09:54:00 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012/06/19 09:53:59 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012/06/19 09:53:59 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012/06/19 09:53:57 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012/06/19 09:53:57 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012/06/19 09:53:56 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012/06/19 09:53:56 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012/06/19 09:53:54 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012/06/19 09:53:54 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012/06/19 09:53:53 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012/06/19 09:53:52 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012/06/19 09:53:52 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012/06/18 20:19:51 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012/06/18 20:19:51 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012/06/18 20:19:51 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012/06/18 20:19:41 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012/06/18 20:19:41 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012/06/18 20:19:40 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012/06/18 20:19:37 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2012/06/18 20:19:33 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012/06/18 20:19:32 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2012/06/18 20:07:33 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2012/06/18 20:07:33 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2012/06/18 20:07:33 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2012/06/18 20:07:26 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2012/06/18 20:07:26 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2012/06/18 20:07:26 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2012/06/18 20:07:13 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2012/06/18 20:07:13 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe

========== Files - Modified Within 30 Days ==========

[2012/07/13 18:22:32 | 000,729,816 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/13 18:22:32 | 000,626,512 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/07/13 18:22:32 | 000,107,756 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/07/13 18:20:45 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/13 18:19:04 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/13 18:19:04 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/13 18:17:52 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
[2012/07/13 18:13:15 | 000,002,198 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/07/13 18:11:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/13 18:11:28 | 495,865,855 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/13 18:07:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\internet.lnk
[2012/07/11 11:37:15 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/09 00:34:56 | 002,232,320 | ---- | M] (IDE Area) -- C:\Users\Nathan\AppData\Roaming\Protector-rtpp.exe
[2012/07/09 00:32:26 | 000,000,674 | ---- | M] () -- C:\Users\Nathan\AppData\Roaming\result.db
[2012/07/09 00:31:56 | 002,232,320 | ---- | M] (IDE Area) -- C:\Users\Nathan\AppData\Roaming\Protector-umai.exe
[2012/07/07 02:51:58 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForNathan.job
[2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/02 19:23:05 | 000,010,512 | ---- | M] () -- C:\Users\Nathan\Desktop\images.jpg
[2012/06/23 00:51:30 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/06/23 00:51:30 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/06/19 10:22:20 | 000,417,192 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

========== Files Created - No Company Name ==========

[2012/07/13 18:20:45 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/13 18:07:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\internet.lnk
[2012/07/09 00:32:26 | 000,000,674 | ---- | C] () -- C:\Users\Nathan\AppData\Roaming\result.db
[2012/07/02 19:23:10 | 000,010,512 | ---- | C] () -- C:\Users\Nathan\Desktop\images.jpg
[2012/05/03 15:22:03 | 000,743,534 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/05/13 09:33:18 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL
[2011/04/15 14:05:50 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011/04/15 14:05:50 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011/04/15 14:05:48 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011/04/15 13:59:48 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011/04/15 13:33:40 | 013,359,616 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:BF3D62E7

< End of report >


[b]Extras[/b]

OTL Extras logfile created on: 7/13/2012 6:21:11 PM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Nathan\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.95 Gb Total Physical Memory | 3.73 Gb Available Physical Memory | 62.65% Memory free
11.90 Gb Paging File | 9.63 Gb Available in Paging File | 80.92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 571.05 Gb Total Space | 510.89 Gb Free Space | 89.46% Space Free | Partition Type: NTFS
Drive D: | 20.96 Gb Total Space | 2.26 Gb Free Space | 10.78% Space Free | Partition Type: NTFS
Drive E: | 3.96 Gb Total Space | 1.08 Gb Free Space | 27.23% Space Free | Partition Type: FAT32
Drive G: | 3.76 Gb Total Space | 3.75 Gb Free Space | 99.98% Space Free | Partition Type: FAT32

Computer Name: NATHAN-HP | User Name: Nathan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{30D171EF-9079-4DD4-869B-9F85F6CA5F4F}" = lport=137 | protocol=17 | dir=in | app=system |
"{342F0557-8374-410B-8643-C8A10D211812}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{515F34CE-B5F8-44BF-8DEF-CAB50CA5F9D8}" = rport=137 | protocol=17 | dir=out | app=system |
"{62DA1BDC-F16B-4287-A4A0-F7286018BCCA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{68E044AD-9879-4820-AE69-CB6D0E018A5C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{883E57DD-75E2-4D41-A30F-11C30ED24AB4}" = lport=10243 | protocol=6 | dir=in | app=system |
"{9527E903-A860-43E4-8918-7855019717FA}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9A54C5F7-533E-4011-AC4C-8122510C3EC6}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{9CA1F3BC-79F4-4DC3-BC07-95261DC739A7}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9D733824-F00E-4062-896B-0C963C55C8F4}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A0E46542-2475-46A4-B826-7E77F7BE4B40}" = rport=10243 | protocol=6 | dir=out | app=system |
"{AB5A41E1-0C0C-475D-9D18-58109F8865EE}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B2C75724-359B-4D55-B41A-6CB91D7D4DB4}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C3A62BA2-4E8C-46FE-98BE-F7F67CAA3B18}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{CFD87E61-61B1-416F-B692-605FB031A480}" = lport=445 | protocol=6 | dir=in | app=system |
"{D7847A0A-BD3E-442E-B7C8-5A0DC427EC11}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DF6BD406-6B0B-493A-AAD1-8547F74DAC63}" = lport=138 | protocol=17 | dir=in | app=system |
"{E2815C9D-21D7-4CDE-BE62-CA18D402BD44}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E6B369C8-87FF-46D2-A28C-140B84B79E62}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{EC86EF69-8773-4CA4-9139-0F976942D950}" = rport=138 | protocol=17 | dir=out | app=system |
"{ECFC2EF4-9E52-43EA-9870-186CBFD612D3}" = rport=139 | protocol=6 | dir=out | app=system |
"{F2C97931-E8AB-4DB7-9504-D756556BA2EE}" = rport=445 | protocol=6 | dir=out | app=system |
"{F4C58400-CAB0-4B3C-BC28-E295EB51936F}" = lport=139 | protocol=6 | dir=in | app=system |
"{F63AD372-078E-4B01-B54B-9514CE58CD83}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0031B06D-2DB6-49B8-8A10-B97F3B1D1598}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{08633A37-BC3B-4EB9-829F-7ADB12397371}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{0DC3C0AC-F71B-409B-A93E-744CA496A6AA}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{166AE9A0-16C4-4B89-B2C6-7A6AED2E4BAE}" = protocol=58 | dir=out | [email protected],-28546 |
"{1A290048-BD01-4E50-9B8B-0787D2C991D9}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{1ABC9A0D-D36F-4516-8DA9-85FAAED5CC68}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{242280D2-0230-4680-871F-24616800755C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{27C7FEEE-9BB3-4476-8626-4A4CA5AEEA13}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{43F23620-BFF4-4D5F-813F-A62A92256CD7}" = protocol=6 | dir=out | app=system |
"{4DCD8305-7F49-4631-A00F-3B73D0C5238C}" = protocol=1 | dir=out | [email protected],-28544 |
"{615BCF1A-77D2-4381-BCED-8AB4BF456127}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{6A6E2027-BD8F-48F1-A26B-C95DEF1A6239}" = protocol=1 | dir=in | [email protected],-28543 |
"{6F1AC408-DC2D-4A59-A5DB-25A700DFF3AB}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{77462A05-3B50-4F10-A24E-F55830483570}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{8E3226ED-D934-4C6E-B2FA-8D7C506D080D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{92AEA4DE-A197-419E-B97F-0EB356E4E672}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{9361F65C-7511-418C-9837-4F621B3841FA}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9AED469D-AF3E-4882-9843-202AEE8B34F9}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{BA967541-798A-421C-B3D0-5484C6D82612}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{BCB63207-5147-44EE-9694-D9BDE64D030F}" = protocol=58 | dir=in | [email protected],-28545 |
"{BEA69EB7-CB5F-45F6-9612-AF288567EFB8}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe |
"{BF7BD07C-CD14-4671-BCA7-21219D5B591C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BFEA3BA9-B568-46B2-A091-415E13111F7C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{D71D766D-DADF-44E8-A43C-552D216723CE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{DCD66081-C288-4580-866B-6393AF5A7DDB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E3DA87D2-22A5-4343-B5AF-E80778E72910}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{E4383954-EDEE-4888-82B0-49FAF2BCDF5D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E4BD336B-E4DD-43F8-8E2F-0EE392135225}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{EA66AFC0-0041-419A-936F-5C72F4B39B4A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F57FEB3A-5DE9-4EDE-BC52-1B62A5E8C272}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{1DEDDD54-EED8-4508-8CEF-BFCD68531429}C:\users\nathan\appdata\local\mediafire express\mf_systray.exe" = protocol=6 | dir=in | app=c:\users\nathan\appdata\local\mediafire express\mf_systray.exe |
"UDP Query User{EDDC116F-0D5F-4A3E-8636-734EB037D67A}C:\users\nathan\appdata\local\mediafire express\mf_systray.exe" = protocol=17 | dir=in | app=c:\users\nathan\appdata\local\mediafire express\mf_systray.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}" = AuthenTec TrueAPI
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel® Wireless Display
"{3C41721F-AF0F-4086-AA1C-4C7F29076228}" = Intel® PROSet/Wireless WiFi Software
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5601F151-A69F-4E30-8C60-37928124CD07}" = HP 3D DriveGuard
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{79174AF2-6CB1-42F5-981E-66DCA49391D0}" = Validity WBF DDK
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo 1.10.02
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9CAB2212-0732-4827-8EC4-61D8EF0AA65B}" = HP Launch Box
"{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}" = Microsoft Security Client
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A0E106D2-4815-4B7A-BAA7-7E21B530CFB4}" = Intel® PROSet/Wireless for Bluetooth® 3.0 + High Speed
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF}" = Apple Mobile Device Support
"{CF8FFD12-602B-422D-AF1D-511B411E7632}" = iTunes
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Security Client" = Microsoft Security Essentials
"ProInst" = Intel PROSet Wireless

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007F778D-F15C-4EAB-AE92-071D21FAF632}" = Adobe Photoshop Elements 9
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{16B7BDA1-B967-4D2D-8B27-E12727C28350}" = HP CoolSense
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{25175695-4B20-4298-9F34-C2C57CD277B3}" = Elements STI Installer
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{285F722C-0E45-47DE-B38E-5B3B10FA4A7C}" = HP Quick Launch
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2E497885-E60B-420A-832D-0148B392E058}_is1" = Qwiklinx
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver
"{31CEFF4E-B6D1-46A5-9169-7C67570E7FFA}" = HP SimplePass 2011
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{433EACD8-4747-4A6A-826A-FFA9F39B0D40}" = Elements 9 Organizer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5036764A-435D-40C9-869C-31085A3D741D}" = HP Setup
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{6748E773-5DA0-4D19-8AA5-273B4133A09B}" = SmartSound Quicktracks for Premiere Elements 9.0
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6C302296-6129-4125-9FD6-2188ECD8814E}" = HP Software Framework
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.2.0
"{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}" = HP Support Assistant
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App (HP Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{84BD11C9-3AC8-4845-AFB3-39A551618820}" = HP Documentation
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B52057C-15DB-433E-957C-E279BC7D07E3}" = HP QuickWeb
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_PROR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0409-1000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0116-0409-1000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X MUI
"{AE502938-5BF1-4CEA-961D-0081B992C878}_is1" = Shop To Win
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{C01A86F5-56E7-101F-9BC9-E3F1025EB779}" = Intel® Identity Protection Technology 1.1.2.0
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DBCD5E64-7379-4648-9444-8A6558DCB614}" = Recovery Manager
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2AE009D-37E5-4724-A6B8-0ED6A6BA4F68}" = Elements STI Installer
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E44578C7-4667-4124-8BC2-1161BCA54978}" = HP Power Manager
"{E96CAA2A-0244-4A2A-8403-0C3C9534778B}" = ESU for Microsoft Windows 7 SP1
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EB9955F8-467C-47FC-90F8-12CD5DF684C3}" = Adobe Premiere Elements 9
"{ED1BD69A-07E3-418C-91F1-D856582581BF}" = HP On Screen Display
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics
"{F302F4F0-588D-6501-1ACF-BE3FDCC9135D}" = Adobe Community Help
"{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote v. 4.2.3
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 9" = Adobe Photoshop Elements 9
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Aleks 3.16" = Aleks 3.16
"Anti-phishing Domain Advisor" = Anti-phishing Domain Advisor
"Any Video Converter Ultimate_is1" = Any Video Converter Ultimate 4.3.7
"Any Video Converter_is1" = Any Video Converter 3.3.7
"AVG Secure Search" = AVG Security Toolbar
"blekkotb_soc" = Blekko search bar
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{6748E773-5DA0-4D19-8AA5-273B4133A09B}" = SmartSound Quicktracks for Premiere Elements 9.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.62.0.1300
"MediaFire Express (beta) 0.11.1.3066" = MediaFire Express (beta)
"Mozilla Firefox 12.0 (x86 en-US)" = Mozilla Firefox 12.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NIS" = Norton Internet Security
"PC Speed Maximizer_is1" = PC Speed Maximizer v3.0
"PremElem90" = Adobe Premiere Elements 9
"ProInst" = Intel PROSet Wireless
"PROR" = Microsoft Office Professional 2007
"VIP Access SDK" = VIP Access SDK (1.0.1.2)
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite" = Windows Live Essentials
"WTA-0d61816c-7f8e-4941-b1a4-9eb95339f00e" = Penguins!
"WTA-13486186-4616-464a-b023-b3dd1862e7ad" = Chuzzle Deluxe
"WTA-1877783f-00d0-40fa-982e-dfbb8b170096" = Bounce Symphony
"WTA-359303c0-21e8-45c7-96bc-f9c73c7f2d2e" = Zuma Deluxe
"WTA-38a999e4-9ded-432e-8622-ccf82611f376" = Mystery of Mortlake Mansion
"WTA-4b3f7ba1-1fa1-487d-9f69-a0f0e8de4abd" = Mah Jong Medley
"WTA-5395e7ce-c40f-4421-a4c7-333604c6cd22" = Namco All-Stars: PAC-MAN
"WTA-5482a469-74b0-4086-b4de-dfa1592cca5c" = Virtual Villagers 5 - New Believers
"WTA-5e0b2314-5513-49a4-9f7c-17be97c41d99" = Bejeweled 3
"WTA-60691643-4d1d-4678-957b-f24847b6e6ea" = Poker Superstars III
"WTA-65954f79-8292-441c-98ed-638c74ca3001" = Governor of Poker 2 Premium Edition
"WTA-70eac230-c9c9-4cca-9f88-33e83ceea4a7" = Chronicles of Albian
"WTA-719d2c6e-11a8-49e9-a41f-43d467840a34" = Cradle of Rome 2
"WTA-723503c1-bf4f-4f6a-b7a6-1dd2220141c0" = Blasterball 3
"WTA-7b4e9457-0f6c-47cc-ad5c-b4fefc0653f5" = FATE
"WTA-80bb4333-cc15-4cfa-a30d-264b802690fb" = Farm Frenzy
"WTA-89902a17-6880-43d8-8d60-b6b402cfd3e8" = Jewel Quest: The Sleepless Star - Collector's Edition
"WTA-948b0220-3c92-4b33-b8cc-c93a74616edf" = Polar Bowler
"WTA-964cad6b-5977-4a43-af90-5398eefc1d9f" = Slingo Supreme
"WTA-acdd7467-c6fa-4325-b8a0-578dc9e27842" = Blackhawk Striker 2
"WTA-ad1194db-237a-4571-b641-3121053123de" = Plants vs. Zombies - Game of the Year
"WTA-c04a9d2c-fc47-4c7c-b0d8-2018e14f8bea" = Cake Mania
"WTA-c46a57b7-4c22-4a03-a916-aef678ae458b" = Vacation Quest - The Hawaiian Islands
"WTA-cc24d71e-e50f-4d13-9e19-7f41ade34a36" = Agatha Christie - Peril at End House
"WTA-dab032be-e82d-4b4a-a214-0bc20e92abb0" = Polar Golfer

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 6/23/2012 5:24:55 PM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1061

Error - 6/23/2012 5:24:58 PM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/23/2012 5:24:58 PM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4009

Error - 6/23/2012 5:24:58 PM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4009

Error - 6/23/2012 5:26:25 PM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/23/2012 5:26:25 PM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1076

Error - 6/23/2012 5:26:25 PM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1076

Error - 6/24/2012 9:10:57 AM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/24/2012 9:10:57 AM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 56672807

Error - 6/24/2012 9:10:57 AM | Computer Name = Nathan-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 56672807

[ Hewlett-Packard Events ]
Error - 1/30/2012 6:57:28 PM | Computer Name = Nathan-HP | Source = HPSF.exe | ID = 4000
Description =

Error - 3/12/2012 10:50:51 PM | Computer Name = Nathan-HP | Source = HPSF.exe | ID = 4000
Description =

Error - 3/12/2012 10:52:37 PM | Computer Name = Nathan-HP | Source = HPSF.exe | ID = 4000
Description =

Error - 4/24/2012 5:02:24 PM | Computer Name = Nathan-HP | Source = HPSF.exe | ID = 2000
Description = HP Error ID: -2147467261 at HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddNavigationProperties()
Message:
Object reference not set to an instance of an object. StackTrace: at HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddNavigationProperties()
Source:
HP.SupportAssistant.Common Name: HPSF.exe Version: 06.00.01.01 Path: C:\Program Files
(x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: en-US RAM: 6091 Ram Utilization:
20 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties()


Error - 4/24/2012 5:02:25 PM | Computer Name = Nathan-HP | Source = HPSF.exe | ID = 2000
Description = HP Error ID: -2147467261HPSF.exe at HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddNavigationProperties()
Message:
Object reference not set to an instance of an object. StackTrace: at HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddNavigationProperties()
Source:
HP.SupportAssistant.Common Name: HPSF.exe Version: 06.00.01.01 Path: C:\Program Files
(x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: en-US RAM: 6091 Ram Utilization:
20 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties()


Error - 7/10/2012 5:29:52 PM | Computer Name = Nathan-HP | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088 at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateDetail(String
category) at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetectCore()

at HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
Boolean localScan) Message: Failed to perform update. StackTrace: at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateDetail(String
category) at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetectCore()

at HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
Boolean localScan) Source: HP.ActiveCheckLocalMode.SessionManager InnerException.Message:
Could not load file or assembly '0 bytes loaded from System, Version=2.0.0.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089' or one of its dependencies. An attempt was made
to load a program with an incorrect format. Name: hpsa_service.exe Version: 06.00.01.01
Path:
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe Format:
en-US RAM: 6091 Ram Utilization: 30 TargetSite: Void UpdateDetail(System.String)

[ System Events ]
Error - 5/26/2012 9:42:00 PM | Computer Name = Nathan-HP | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the IconMan_R service.

Error - 5/30/2012 5:57:57 PM | Computer Name = Nathan-HP | Source = Service Control Manager | ID = 7034
Description = The Windows Biometric Service service terminated unexpectedly. It
has done this 1 time(s).

Error - 5/30/2012 9:43:50 PM | Computer Name = Nathan-HP | Source = EventLog | ID = 6008
Description = The previous system shutdown at 4:53:09 PM on ?5/?30/?2012 was unexpected.

Error - 5/30/2012 9:44:11 PM | Computer Name = Nathan-HP | Source = BugCheck | ID = 1001
Description =

Error - 6/4/2012 2:03:58 PM | Computer Name = Nathan-HP | Source = EventLog | ID = 6008
Description = The previous system shutdown at 12:52:22 PM on ?6/?4/?2012 was unexpected.

Error - 6/5/2012 4:48:25 PM | Computer Name = Nathan-HP | Source = Tcpip | ID = 4199
Description = The system detected an address conflict for IP address 192.168.1.101
with the system having network hardware address EC-9A-74-DE-22-48. Network operations
on this system may be disrupted as a result.

Error - 6/22/2012 2:16:13 AM | Computer Name = Nathan-HP | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the IconMan_R service.

Error - 6/24/2012 9:49:38 AM | Computer Name = Nathan-HP | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the IconMan_R service.

Error - 6/25/2012 1:42:22 PM | Computer Name = Nathan-HP | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the IconMan_R service.

Error - 6/29/2012 5:37:17 PM | Computer Name = Nathan-HP | Source = EventLog | ID = 6008
Description = The previous system shutdown at 3:40:18 PM on ?6/?29/?2012 was unexpected.


< End of report >
  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi there on completion of this run could you let me know if MBAM and MSE start

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Posted Image

    :OTL
    O4 - HKCU..\Run: [Inspector] C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
    O4 - HKCU..\Run: [SPMTray] "C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe" File not found
    O27:64bit: - HKLM IFEO\_avp32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\_avpcc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\_avpm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\~1.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\~2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\a.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\aAvgApi.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AAWTray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\About.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ackwin32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\adaware.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\Ad-Aware.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\advxdwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AdwarePrj.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\agent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\agentsvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\agentw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\alertsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\alevir.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\alogserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AlphaAV: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AlphaAV.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AluSchedulerSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\amon9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AntispywarXP2009.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\anti-trojan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\Anti-Virus Professional.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\antivirus.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AntiVirus_Pro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AntivirusPlus: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AntivirusPlus.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AntivirusPro_2010.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AntivirusXP: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AntivirusXP.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\antivirusxppro2009.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ants.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\apimonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\aplica32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\apvxdwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\arr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashAvast.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashBug.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashChest.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashCnsnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashDisp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashLogV.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashMaiSv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashPopWz.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashQuick.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashServ.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashSimp2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashSimpl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashSkPcc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashSkPck.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashUpd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ashWebSv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\aswChLic.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\aswRegSvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\aswRunDll.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\aswUpdSv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\atcon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\atguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\atro55en.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\atupdater.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\atwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\au.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\aupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\autodown.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\auto-protect.nav80try.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\autotrace.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\autoupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\av360.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avadmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avastSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avastUI.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AVCare.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avcenter.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avciman.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avconfig.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avconsol.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ave32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AVENGINE.EXE: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgcc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgchk.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgcmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgcsrvx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgdumpx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgemc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgiproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgnsx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgrsx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgscanx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgserv9.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgsrmax.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgtray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avgwdsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avkpop.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avkserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avkservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avkwctl9.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avltmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avmailc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avmcdlg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avnotify.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avp32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avpcc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avpdos32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avpm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avptc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avpupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avsched32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avshadow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avsynmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avupgsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\AVWEBGRD.EXE: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avwin95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avwinnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avwsc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avwupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avwupd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avwupsrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avxmonitor9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avxmonitornt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\avxquar.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\b.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\backweb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bargains.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bd_professional.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bdfvcl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bdfvwiz.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\BDInProcPatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bdmcon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\BDMsnScan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\BDSurvey.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\beagle.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\belt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bidef.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bidserver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bipcp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bipcpevalsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bisp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\blackd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\blackice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\blink.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\blss.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bootconf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bootwarn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\borg2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bpc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\brasil.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\brastk.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\brw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bs120.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bspatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bundle.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\bvt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\c.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cavscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ccapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ccevtmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ccpxysvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cdp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfgwiz.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfiadmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfiaudit.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfinet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfinet32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfpconfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfplogvw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cfpupdat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\claw95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\claw95cf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\clean.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cleaner.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cleaner3.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cleanIELow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cleanpc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\click.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cmd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cmdagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cmesys.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cmgrdian.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cmon016.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\connectionmonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\control: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cpd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cpf9x206.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cpfnt206.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\crashrep.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\csc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cssconfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cssupdat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cssurf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cwnb181.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\cwntdwmo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\d.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\datemanager.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dcomx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\defalert.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\defscangui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\defwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\deloeminfs.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\deputy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\divx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dllcache.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dllreg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\doors.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dop.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dpf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dpfsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dpps2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\driverctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\drwatson.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\drweb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\drwebupw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dssagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dvp95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\dvp95_0.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ecengine.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\efpeadm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\emsw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\esafe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\escanhnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\escanv95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\espwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ethereal.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\etrustcipe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\evpn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\exantivirus-cnet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\exe.avxw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\expert.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\explore.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fact.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\f-agnt95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fameh32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fast.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fch32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fih32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\findviru.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\firewall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fixcfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fixfp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fnrb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fprot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\f-prot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\f-prot95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fp-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fp-win_trial.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\frmwrk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\frw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsaa.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsav32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsav530stbyb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsav530wtbyb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsav95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsgk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsm32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsma32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\fsmb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\f-stopw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\gator.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\gav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\gbmenu.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\gbn976rl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\gbpoll.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\generics.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\gmt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\guard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\guarddog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\guardgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\guardxkickoff.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hacktracersetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hbinst.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hbsrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\History.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\homeav2010.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hotactio.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hotpatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\htlog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\htpatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hwpe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hxdl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\hxiul.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\iamapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\iamserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\iamstats.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ibmasn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ibmavsp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\icload95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\icloadnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\icmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\icsupp95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\icsuppnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\Identity.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\idle.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\iedll.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\iedriver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\IEShow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\iface.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ifw2000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\inetlnfo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\infus.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\infwin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\init.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\init32.exe : Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\install[1].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\install[2].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\install[3].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\install[4].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\install[5].exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\intdel.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\intren.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\iomon98.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\istsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\jammer.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\jdbgmrg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\jedi.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\JsRcGen.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\kavlite40eng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\kavpers40eng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\kavpf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\kazza.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\keenvalue.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\kerio-pf-213-en-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\kerio-wrl-421-en-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\kerio-wrp-421-en-win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\killprocesssetup161.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ldnetmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ldpro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ldpromenu.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ldscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\licmgr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\lnetinfo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\loader.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\localnet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\lockdown.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\lockdown2000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\lookout.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\lordpe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\lsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\luall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\luau.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\lucomserver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\luinit.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\luspt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\MalwareRemoval.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mapisvc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mbam.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mbamgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mbamservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcmnhdlr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcmpeng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcmscsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcnasvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\McSACore.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcshell.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcshield.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcsysmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mctool.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcvsrte.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mcvsshld.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\md.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mfin32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mfw2en.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mfweng3.02d30.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mgavrtcl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mgavrte.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mghtml.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mgui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\minilog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mmod.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\monitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\moolive.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mostat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mpfagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mpfservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\MPFSrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mpftray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mrflux.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mrt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msa.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\MSASCui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msbb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msblast.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mscache.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msccn32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mscman.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msconfig: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msdm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msdos.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msiexec16.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mslaugh.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msmgt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msmsgri32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msseces.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mssmmc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mssys.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\msvxd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mu0311ad.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\mwatch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\n32scanw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\navap.navapsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\navapsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\navapw32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\navdx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\navlu32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\navnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\navstub.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nc2000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ncinst4.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ndd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\neomonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\neowatchlog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\netarmor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\netd32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\netinfo.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\netmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\netscanpro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\netspyhunter-1.2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\netutils.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nisserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nisum.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nod32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\normist.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\norton_internet_secu_3.0_407.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\notstart.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\npf40_tw_98_nt_me_2k.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\npfmessenger.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nprotect.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\npscheck.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\npssvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nsched32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nssys32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nstask32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nsupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ntrtscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ntvdm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ntxconfig.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nupgrade.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nvarch16.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nvc95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nvsvc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nwinst4.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nwservice.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\nwtool16.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\OAcat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\OAhlp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\OAReg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\oasrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\oaui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\oaview.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ODSW.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ollydbg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\onsrvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\optimize.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ostronet.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\otfix.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\outpost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\outpostinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\outpostproinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ozn695m5.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\padmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\panixk.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\patch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pavcl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PavFnSvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pavproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pavprsrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pavsched.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pavsrv51.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pavw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PC_Antispyware2010.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pccwin98.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pcfwallicon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pcip10117_0.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pcscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pctsAuxs.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pctsGui.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pctsSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pctsTray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pdfndr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pdsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PerAvir.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\periscope.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\persfw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\personalguard: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\personalguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\perswf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pf2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pfwadmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pgmonitr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pingscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\platin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pop3trap.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\poproxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\popscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\portdetective.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\portmonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\powerscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ppinupdt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pptbc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ppvstop.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\prizesurfer.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\prmt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\prmvr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\procdump.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\processmonitor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\procexplorerv1.0.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\programauditor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\proport.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\protector.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\protectx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PSANCU.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PSANHost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PSANToManager.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PsCtrls.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PsImSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PskSvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\pspf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\PSUNMain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\purge.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\qconsole.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\qh.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\qserver.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\Quick Heal.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\QuickHealCleaner.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rapapp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rav7.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rav7win.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rav8win32eng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rb32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rcsync.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\realmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\reged.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\regedit.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
    O27:64bit: - HKLM IFEO\regedt32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rescue.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rescue32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rrguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rscdwld.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rshell.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rtvscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rtvscn95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rulaunch.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rwg: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\rwg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\SafetyKeeper.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\safeweb.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sahagent.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\Save.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\SaveArmor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\SaveDefense.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\SaveKeep.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\savenow.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sbserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\scam32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\scan32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\scan95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\scanpm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\scrscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\Secure Veteran.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\secureveteran.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\Security Center.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\SecurityFighter.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\securitysoldier.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\serv95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\setloadorder.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\setup_flowprotector_us.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\setupvameeval.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sgssfw32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sh.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\shellspyinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\shield.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\shn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\showbehind.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\signcheck.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\smart.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\smartprotector.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\smc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\smrtdefp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sms.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\smss32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\snetcfg.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\soap.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sofi.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\SoftSafeness.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sperm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\spf.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sphinx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\spoler.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\spoolcv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\spoolsv32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\spywarexpguard.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\spyxx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\srexe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\srng.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ss3edit.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ssg_4104.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\ssgrate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\st2.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\start.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\stcloader.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\supftrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\support.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\supporter5.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\svc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\svchostc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\svchosts.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\svshost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sweep95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sweepnet.sweepsrv.sys.swnetsup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\symlcsvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\symproxysvc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\symtray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\system.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\system32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\sysupd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tapinstall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\taskmgr.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
    O27:64bit: - HKLM IFEO\taumon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tbscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tca.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tcm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tds2-98.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tds2-nt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tds-3.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\teekids.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tfak.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tfak5.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tgbob.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\titanin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\titaninxp.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\TPSrv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\trickler.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\trjscan.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\trjsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\trojantrap3.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\TrustWarrior.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tsadbot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tsc.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tvmd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\tvtmd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\undoboot.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\updat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\upgrad.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\utpost.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vbcmserv.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vbcons.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vbust.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vbwin9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vbwinntw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vcsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vet32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vet95.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vettray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vfsetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vir-help.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\virusmdpersonalfirewall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\virusutilities.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\VisthAux.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\VisthLic.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\VisthUpd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vnlan300.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vnpc3000.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vpc32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vpc42.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vpfw30s.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vptray.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vscan40.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vscenu6.02d30.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vsched.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vsecomr.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vshwin32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vsisetup.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vsmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vsmon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vsstat.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vswin9xe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vswinntse.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\vswinperse.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\w32dsm89.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\W3asbas.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\w9x.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\watchdog.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\webdav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\WebProxy.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\webscanx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\webtrap.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wfindv32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\whoswatchingme.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wimmun32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\win32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\win32us.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winactive.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\win-bugsfix.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\windll32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\window.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\windows Police Pro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\windows.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wininetd.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wininitx.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winlogin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winmain.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winppr32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winrecon.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winservn.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winssk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winstart.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winstart001.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wintsk32.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\winupdate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wkufind.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wnad.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wnt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wradmin.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wrctrl.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wsbgate.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wscfxas.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wscfxav.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wscfxfw.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wsctool.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wupdater.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wupdt.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\wyvernworksfirewall.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\xp_antispyware.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\xpdeluxe.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\xpf202en.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\zapro.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\zapsetup3001.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\zatutor.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\zonalm2601.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27:64bit: - HKLM IFEO\zonealarm.exe: Debugger - C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\_avp32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\_avpcc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\_avpm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\~1.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\~2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\a.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\aAvgApi.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AAWTray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\About.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ackwin32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\adaware.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\Ad-Aware.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\advxdwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AdwarePrj.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\agent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\agentsvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\agentw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\alertsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\alevir.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\alogserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AlphaAV: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AlphaAV.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AluSchedulerSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\amon9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AntispywarXP2009.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\anti-trojan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\Anti-Virus Professional.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\antivirus.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AntiVirus_Pro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AntivirusPlus: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AntivirusPlus.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AntivirusPro_2010.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AntivirusXP: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AntivirusXP.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\antivirusxppro2009.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ants.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\apimonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\aplica32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\apvxdwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\arr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashAvast.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashBug.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashChest.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashCnsnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashDisp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashLogV.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashMaiSv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashPopWz.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashQuick.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashServ.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashSimp2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashSimpl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashSkPcc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashSkPck.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashUpd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ashWebSv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\aswChLic.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\aswRegSvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\aswRunDll.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\aswUpdSv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\atcon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\atguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\atro55en.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\atupdater.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\atwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\au.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\aupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\autodown.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\auto-protect.nav80try.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\autotrace.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\autoupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\av360.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avadmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avastSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avastUI.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AVCare.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avcenter.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avciman.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avconfig.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avconsol.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ave32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AVENGINE.EXE: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgcc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgchk.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgcmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgcsrvx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgdumpx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgemc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgiproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgnsx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgrsx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgscanx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgserv9.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgsrmax.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgtray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avgwdsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avkpop.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avkserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avkservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avkwctl9.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avltmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avmailc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avmcdlg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avnotify.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avp32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avpcc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avpdos32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avpm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avptc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avpupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avsched32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avshadow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avsynmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avupgsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\AVWEBGRD.EXE: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avwin95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avwinnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avwsc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avwupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avwupd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avwupsrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avxmonitor9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avxmonitornt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\avxquar.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\b.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\backweb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bargains.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bd_professional.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bdfvcl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bdfvwiz.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\BDInProcPatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bdmcon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\BDMsnScan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\BDSurvey.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\beagle.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\belt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bidef.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bidserver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bipcp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bipcpevalsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bisp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\blackd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\blackice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\blink.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\blss.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bootconf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bootwarn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\borg2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bpc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\brasil.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\brastk.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\brw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bs120.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bspatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bundle.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\bvt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\c.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cavscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ccapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ccevtmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ccpxysvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cdp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfgwiz.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfiadmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfiaudit.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfinet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfinet32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfpconfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfplogvw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cfpupdat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\claw95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\claw95cf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\clean.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cleaner.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cleaner3.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cleanIELow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cleanpc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\click.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cmd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cmdagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cmesys.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cmgrdian.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cmon016.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\connectionmonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\control: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cpd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cpf9x206.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cpfnt206.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\crashrep.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\csc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cssconfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cssupdat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cssurf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cwnb181.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\cwntdwmo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\d.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\datemanager.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dcomx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\defalert.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\defscangui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\defwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\deloeminfs.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\deputy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\divx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dllcache.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dllreg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\doors.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dop.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dpf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dpfsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dpps2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\driverctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\drwatson.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\drweb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\drwebupw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dssagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dvp95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\dvp95_0.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ecengine.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\efpeadm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\emsw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\esafe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\escanhnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\escanv95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\espwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ethereal.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\etrustcipe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\evpn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\exantivirus-cnet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\exe.avxw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\expert.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\explore.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fact.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\f-agnt95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fameh32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fast.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fch32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fih32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\findviru.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\firewall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fixcfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fixfp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fnrb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fprot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\f-prot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\f-prot95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fp-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fp-win_trial.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\frmwrk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\frw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsaa.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsav32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsav530stbyb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsav530wtbyb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsav95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsgk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsm32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsma32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\fsmb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\f-stopw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\gator.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\gav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\gbmenu.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\gbn976rl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\gbpoll.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\generics.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\gmt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\guard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\guarddog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\guardgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\guardxkickoff.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hacktracersetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hbinst.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hbsrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\History.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\homeav2010.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hotactio.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hotpatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\htlog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\htpatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hwpe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hxdl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\hxiul.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\iamapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\iamserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\iamstats.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ibmasn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ibmavsp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\icload95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\icloadnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\icmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\icsupp95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\icsuppnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\Identity.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\idle.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\iedll.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\iedriver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\IEShow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\iface.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ifw2000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\inetlnfo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\infus.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\infwin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\init.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\init32.exe : Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\install[1].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\install[2].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\install[3].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\install[4].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\install[5].exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\intdel.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\intren.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\iomon98.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\istsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\jammer.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\jdbgmrg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\jedi.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\JsRcGen.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\kavlite40eng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\kavpers40eng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\kavpf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\kazza.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\keenvalue.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\kerio-pf-213-en-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\kerio-wrl-421-en-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\kerio-wrp-421-en-win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\killprocesssetup161.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ldnetmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ldpro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ldpromenu.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ldscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\licmgr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\lnetinfo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\loader.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\localnet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\lockdown.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\lockdown2000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\lookout.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\lordpe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\lsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\luall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\luau.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\lucomserver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\luinit.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\luspt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\MalwareRemoval.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mapisvc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mbam.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mbamgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mbamservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcmnhdlr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcmpeng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcmscsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcnasvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\McSACore.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcshell.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcshield.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcsysmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mctool.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcvsrte.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mcvsshld.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\md.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mfin32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mfw2en.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mfweng3.02d30.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mgavrtcl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mgavrte.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mghtml.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mgui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\minilog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mmod.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\monitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\moolive.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mostat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mpfagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mpfservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\MPFSrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mpftray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mrflux.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mrt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msa.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\MSASCui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msbb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msblast.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mscache.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msccn32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mscman.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msconfig: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msdm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msdos.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msiexec16.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mslaugh.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msmgt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msmsgri32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msseces.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mssmmc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mssys.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\msvxd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mu0311ad.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\mwatch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\n32scanw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\navap.navapsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\navapsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\navapw32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\navdx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\navlu32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\navnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\navstub.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nc2000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ncinst4.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ndd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\neomonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\neowatchlog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\netarmor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\netd32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\netinfo.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\netmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\netscanpro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\netspyhunter-1.2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\netutils.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nisserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nisum.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nod32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\normist.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\norton_internet_secu_3.0_407.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\notstart.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\npf40_tw_98_nt_me_2k.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\npfmessenger.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nprotect.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\npscheck.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\npssvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nsched32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nssys32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nstask32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nsupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ntrtscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ntvdm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ntxconfig.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nupgrade.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nvarch16.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nvc95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nvsvc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nwinst4.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nwservice.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\nwtool16.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\OAcat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\OAhlp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\OAReg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\oasrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\oaui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\oaview.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ODSW.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ollydbg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\onsrvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\optimize.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ostronet.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\otfix.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\outpost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\outpostinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\outpostproinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ozn695m5.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\padmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\panixk.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\patch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pavcl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PavFnSvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pavproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pavprsrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pavsched.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pavsrv51.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pavw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PC_Antispyware2010.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pccwin98.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pcfwallicon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pcip10117_0.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pcscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pctsAuxs.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pctsGui.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pctsSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pctsTray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pdfndr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pdsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PerAvir.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\periscope.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\persfw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\personalguard: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\personalguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\perswf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pf2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pfwadmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pgmonitr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pingscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\platin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pop3trap.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\poproxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\popscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\portdetective.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\portmonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\powerscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ppinupdt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pptbc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ppvstop.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\prizesurfer.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\prmt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\prmvr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\procdump.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\processmonitor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\procexplorerv1.0.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\programauditor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\proport.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\protector.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\protectx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PSANCU.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PSANHost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PSANToManager.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PsCtrls.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PsImSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PskSvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\pspf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\PSUNMain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\purge.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\qconsole.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\qh.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\qserver.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\Quick Heal.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\QuickHealCleaner.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rapapp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rav7.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rav7win.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rav8win32eng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rb32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rcsync.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\realmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\reged.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\regedit.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
    O27 - HKLM IFEO\regedt32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rescue.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rescue32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rrguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rscdwld.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rshell.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rtvscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rtvscn95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rulaunch.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rwg: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\rwg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\SafetyKeeper.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\safeweb.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sahagent.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\Save.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\SaveArmor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\SaveDefense.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\SaveKeep.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\savenow.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sbserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\scam32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\scan32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\scan95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\scanpm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\scrscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\Secure Veteran.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\secureveteran.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\Security Center.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\SecurityFighter.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\securitysoldier.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\serv95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\setloadorder.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\setup_flowprotector_us.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\setupvameeval.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sgssfw32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sh.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\shellspyinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\shield.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\shn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\showbehind.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\signcheck.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\smart.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\smartprotector.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\smc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\smrtdefp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sms.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\smss32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\snetcfg.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\soap.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sofi.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\SoftSafeness.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sperm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\spf.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sphinx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\spoler.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\spoolcv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\spoolsv32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\spywarexpguard.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\spyxx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\srexe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\srng.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ss3edit.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ssg_4104.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\ssgrate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\st2.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\start.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\stcloader.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\supftrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\support.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\supporter5.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\svc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\svchostc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\svchosts.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\svshost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sweep95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sweepnet.sweepsrv.sys.swnetsup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\symlcsvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\symproxysvc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\symtray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\system.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\system32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\sysupd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tapinstall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\taskmgr.exe: Debugger - C:\Users\Nathan\AppData\Roaming\Protector-umai.exe (IDE Area)
    O27 - HKLM IFEO\taumon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tbscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tca.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tcm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tds2-98.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tds2-nt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tds-3.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\teekids.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tfak.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tfak5.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tgbob.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\titanin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\titaninxp.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\TPSrv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\trickler.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\trjscan.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\trjsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\trojantrap3.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\TrustWarrior.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tsadbot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tsc.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tvmd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\tvtmd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\undoboot.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\updat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\upgrad.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\utpost.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vbcmserv.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vbcons.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vbust.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vbwin9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vbwinntw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vcsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vet32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vet95.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vettray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vfsetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vir-help.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\virusmdpersonalfirewall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\virusutilities.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\VisthAux.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\VisthLic.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\VisthUpd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vnlan300.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vnpc3000.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vpc32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vpc42.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vpfw30s.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vptray.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vscan40.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vscenu6.02d30.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vsched.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vsecomr.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vshwin32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vsisetup.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vsmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vsmon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vsstat.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vswin9xe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vswinntse.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\vswinperse.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\w32dsm89.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\W3asbas.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\w9x.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\watchdog.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\webdav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\WebProxy.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\webscanx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\webtrap.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wfindv32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\whoswatchingme.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wimmun32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\win32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\win32us.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winactive.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\win-bugsfix.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\windll32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\window.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\windows Police Pro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\windows.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wininetd.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wininitx.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winlogin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winmain.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winppr32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winrecon.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winservn.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winssk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winstart.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winstart001.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wintsk32.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\winupdate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wkufind.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wnad.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wnt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wradmin.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wrctrl.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wsbgate.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wscfxas.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wscfxav.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wscfxfw.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wsctool.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wupdater.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wupdt.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\wyvernworksfirewall.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\xp_antispyware.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\xpdeluxe.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\xpf202en.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\zapro.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\zapsetup3001.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\zatutor.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\zonalm2601.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    O27 - HKLM IFEO\zonealarm.exe: Debugger - C:\Windows\SysWow64\svchost.exe (Microsoft Corporation)
    [2012/07/09 00:34:56 | 002,232,320 | ---- | C] (IDE Area) -- C:\Users\Nathan\AppData\Roaming\Protector-rtpp.exe
    [2012/07/09 00:31:56 | 002,232,320 | ---- | C] (IDE Area) -- C:\Users\Nathan\AppData\Roaming\Protector-umai.exe

    Files
    ipconfig /flushdns /c

    :Commands
    [purity]
    [resethosts]
    [emptytemp]
    [CREATERESTOREPOINT]
    [Reboot]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

  • 0

#3
NatiePotatie

NatiePotatie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Yes, MBAM and MSE both start now :)

OTL



OTL logfile created on: 7/14/2012 10:11:50 AM - Run 2
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Nathan\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.95 Gb Total Physical Memory | 4.62 Gb Available Physical Memory | 77.58% Memory free
11.90 Gb Paging File | 10.46 Gb Available in Paging File | 87.94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 571.05 Gb Total Space | 510.90 Gb Free Space | 89.47% Space Free | Partition Type: NTFS
Drive D: | 20.96 Gb Total Space | 2.26 Gb Free Space | 10.78% Space Free | Partition Type: NTFS
Drive E: | 3.96 Gb Total Space | 1.08 Gb Free Space | 27.23% Space Free | Partition Type: FAT32
Drive G: | 3.76 Gb Total Space | 3.75 Gb Free Space | 99.98% Space Free | Partition Type: FAT32

Computer Name: NATHAN-HP | User Name: Nathan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/07/13 18:17:52 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
PRC - [2012/07/10 16:20:12 | 001,107,552 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
PRC - [2012/06/18 20:03:19 | 000,935,480 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe
PRC - [2012/05/03 13:07:40 | 000,217,256 | ---- | M] (Visicom Media Inc. (Powered by Panda Security)) -- C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe
PRC - [2012/05/02 14:51:02 | 002,219,008 | ---- | M] (Jackpot Rewards) -- C:\Program Files (x86)\Shop To Win\ShopToWin.exe
PRC - [2012/03/30 10:27:03 | 002,089,984 | ---- | M] (MediaFire LLC) -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_systray.exe
PRC - [2012/03/30 10:27:03 | 001,934,336 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_status.exe
PRC - [2012/03/30 10:27:02 | 002,978,816 | ---- | M] (MediaFire) -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_services.exe
PRC - [2012/03/30 10:27:02 | 001,953,280 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_daemon.exe
PRC - [2012/03/27 18:14:06 | 000,138,232 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\ccsvchst.exe
PRC - [2011/08/26 14:37:18 | 001,342,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
PRC - [2011/08/19 15:48:44 | 000,379,960 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
PRC - [2011/07/11 15:04:44 | 000,574,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2011/07/11 15:04:44 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2011/06/28 04:41:08 | 000,168,504 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
PRC - [2011/06/15 19:58:28 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
PRC - [2011/05/21 18:52:16 | 000,103,992 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2011/05/06 01:06:46 | 000,263,496 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
PRC - [2011/05/06 01:06:28 | 000,653,128 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
PRC - [2011/05/06 01:06:02 | 000,142,664 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
PRC - [2011/02/25 12:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
PRC - [2010/11/20 22:24:27 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
PRC - [2010/11/15 23:02:24 | 000,035,736 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe
PRC - [2010/09/30 05:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2012/07/10 16:20:12 | 001,107,552 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
MOD - [2012/07/10 16:20:12 | 000,132,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\SiteSafety.dll
MOD - [2012/05/13 13:55:45 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012/05/13 13:55:40 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012/04/25 18:37:18 | 000,632,832 | ---- | M] () -- C:\Program Files (x86)\Shop To Win\sqlite3.dll
MOD - [2012/03/30 10:27:06 | 001,351,711 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mediafire_api_connect.dll
MOD - [2012/03/30 10:27:05 | 018,678,784 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtGui4.dll
MOD - [2012/03/30 10:27:05 | 000,978,958 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libstdc++-6.dll
MOD - [2012/03/30 10:27:05 | 000,338,432 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtXml4.dll
MOD - [2012/03/30 10:27:05 | 000,151,054 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libexpat-1.dll
MOD - [2012/03/30 10:27:05 | 000,118,784 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libgcc_s_dw2-1.dll
MOD - [2012/03/30 10:27:04 | 004,533,248 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtCore4.dll
MOD - [2012/03/30 10:27:03 | 001,934,336 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_status.exe
MOD - [2012/03/30 10:27:02 | 001,953,280 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_daemon.exe
MOD - [2012/03/30 10:19:13 | 000,231,424 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\imageformats\qjpeg4.dll
MOD - [2012/03/30 10:19:13 | 000,028,160 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\imageformats\qgif4.dll
MOD - [2012/03/26 12:49:18 | 000,877,952 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\HP.SupportFramework\1.0.0.0__2a4860322af7ba08\HP.SupportFramework.dll
MOD - [2012/02/20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/02/20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012/03/26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012/03/26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2011/05/27 14:06:16 | 000,301,568 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:64bit: - [2011/05/27 13:20:12 | 000,030,520 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV:64bit: - [2011/05/02 16:27:50 | 001,517,328 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel®
SRV:64bit: - [2011/05/02 16:13:54 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2011/05/02 16:10:26 | 000,844,560 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel®
SRV:64bit: - [2011/04/21 10:34:16 | 001,136,640 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011/04/21 09:42:50 | 000,134,928 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) Intel® Centrino® Wireless Bluetooth®
SRV:64bit: - [2010/10/11 04:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
SRV:64bit: - [2010/09/22 20:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/03/03 05:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
SRV - [2012/06/23 00:51:31 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/06/18 20:03:19 | 000,935,480 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe -- (vToolbarUpdater11.1.0)
SRV - [2012/04/20 20:19:00 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/03/27 18:14:06 | 000,138,232 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\ccSvcHst.exe -- (NIS)
SRV - [2011/09/09 18:10:28 | 000,086,072 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
SRV - [2011/07/11 15:04:44 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
SRV - [2011/05/21 18:52:16 | 000,103,992 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2011/05/06 01:06:46 | 000,263,496 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe -- (FPLService)
SRV - [2011/04/30 03:32:54 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel®
SRV - [2011/03/07 19:43:30 | 002,375,168 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
SRV - [2011/03/01 23:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 12:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe -- (jhi_service) Intel®
SRV - [2011/02/22 15:19:12 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel®
SRV - [2011/02/22 15:19:08 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel®
SRV - [2010/10/12 12:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/09/30 05:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/03/29 01:28:38 | 000,405,624 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\symnets.sys -- (SymNetS)
DRV:64bit: - [2012/03/29 01:28:30 | 001,092,728 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\symefa64.sys -- (SymEFA)
DRV:64bit: - [2012/03/29 01:06:25 | 000,190,072 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\ironx64.sys -- (SymIRON)
DRV:64bit: - [2012/03/29 01:03:27 | 000,737,912 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2012/03/29 01:03:27 | 000,037,496 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2012/03/27 15:09:30 | 000,175,736 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2012/03/20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/11/29 17:44:29 | 000,167,048 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\ccsetx64.sys -- (ccSet_NIS)
DRV:64bit: - [2011/11/28 14:51:44 | 000,033,872 | ---- | M] (AnvSoft Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv)
DRV:64bit: - [2011/08/05 13:34:02 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011/08/05 13:34:00 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011/07/08 19:08:26 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/07/08 19:08:26 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/05/27 14:06:16 | 000,528,384 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2011/05/27 13:20:12 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2011/05/27 13:20:12 | 000,030,008 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2011/05/16 15:03:26 | 000,451,192 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1307010.005\symds64.sys -- (SymDS)
DRV:64bit: - [2011/05/01 16:33:06 | 008,593,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel®
DRV:64bit: - [2011/04/26 14:07:36 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011/04/21 10:09:26 | 000,294,912 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) Intel® Centrino®
DRV:64bit: - [2011/04/21 10:09:26 | 000,294,912 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) Intel® Centrino®
DRV:64bit: - [2011/04/15 14:08:26 | 012,228,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/24 19:20:36 | 000,337,512 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2011/03/23 13:20:58 | 000,077,936 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2011/02/22 06:54:22 | 000,351,864 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2010/11/20 22:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 22:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 22:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/10/19 19:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel®
DRV:64bit: - [2010/10/15 04:28:16 | 000,317,440 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel®
DRV:64bit: - [2010/07/28 11:13:50 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 19:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/06/10 16:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009/06/10 16:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009/06/10 16:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009/06/10 15:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009/06/10 15:34:38 | 001,311,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2012/02/23 16:10:53 | 002,048,632 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20120223.001\ex64.sys -- (NAVEX15)
DRV - [2012/02/23 16:10:53 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\VirusDefs\20120223.001\eng64.sys -- (NAVENG)
DRV - [2012/02/05 22:38:11 | 000,138,360 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012/02/04 14:20:35 | 000,482,936 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2011/11/30 21:25:03 | 001,157,240 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\BASHDefs\20120215.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2011/11/30 18:49:05 | 000,488,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\Definitions\IPSDefs\20120222.002\IDSviA64.sys -- (IDSVia64)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKLM\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.c...sa&d=2012-05-08 21:17:33&v=11.0.0.9&sap=hp
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE - HKCU\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://blekkosearch....q={searchTerms}
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...sa&d=2012-05-08 21:17:33&v=11.0.0.9&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKCU\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local;*.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Blekko"
FF - prefs.js..browser.search.order.1: "Blekko"
FF - prefs.js..browser.search.selectedEngine: "Blekko"
FF - prefs.js..browser.startup.homepage: "http://isearch.avg.c...05-08 21:17:33"
FF - prefs.js..keyword.URL: "http://blekko.com/ws...={searchTerms}"


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\IPSFFPlgn\ [2012/02/07 16:00:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\coFFPlgn\ [2012/07/14 10:12:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012/07/10 16:20:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/05/09 19:33:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/05/03 15:18:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Extensions
[2012/05/09 19:34:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions
[2012/05/09 19:34:14 | 000,000,000 | ---D | M] (Qwiklinx for Firefox) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\{6921B3CC-9935-4D28-9A83-B3D824210580}
[2012/05/09 19:33:18 | 000,000,000 | ---D | M] (Blekko search bar) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\{7d9e1adc-7db1-4eaf-b6c7-7e062074e6be}
[2012/05/09 19:34:10 | 000,000,000 | ---D | M] (ShopToWin20) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\{a018b213-6b46-4791-9298-519020db5737}
[2012/05/09 19:33:48 | 000,000,000 | ---D | M] (Yontoo) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\[email protected]
[2012/05/08 15:15:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/05/08 15:15:48 | 000,000,000 | ---D | M] (TrueSuite Website Logon) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
[2012/05/08 21:17:39 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\PROGRAMDATA\AVG SECURE SEARCH\11.0.0.9
[2012/04/20 20:19:34 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/07/10 16:20:11 | 000,003,769 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/04/20 20:18:25 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/05/09 19:33:17 | 000,002,158 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\search.xml
[2012/04/20 20:18:25 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - homepage: http://blekkosearch....1E&tbp=homepage
CHR - default_search_provider: Blekko (Enabled)
CHR - default_search_provider: search_url = http://blekko.com/ws...q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: http://blekkosearch....1E&tbp=homepage
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: nphelper scriptable example plugin (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo\1.2_0\nphelper.dll
CHR - plugin: Simple Pass 2011 (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhihajbmafmgilcciomnamcjfkdhikl\1.0_0\npwebsitelogon.dll
CHR - plugin: Norton Confidential (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.3.7_0\npcoplgn.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.0.2\\npsitesafety.dll
CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: WildTangent Games App Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Nathan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: Make this page red = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo\1.2_0\
CHR - Extension: Website Logon = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhihajbmafmgilcciomnamcjfkdhikl\1.0_0\
CHR - Extension: Norton Identity Protection = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.4.6_0\
CHR - Extension: Yontoo = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.2_0\

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
O2 - BHO: (Qwiklinx) - {3E7C8B5A-96AB-438F-BF9B-782400655440} - C:\Users\Nathan\AppData\Roaming\Qwiklinx\Qwiklinx.dll (Qwiklinx, Inc.)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Blekko search bar) - {7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} - C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll ()
O2 - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Shop to Win) - {F9E44926-2497-46F3-8A25-928136AC079E} - C:\Program Files (x86)\Shop to Win 20\Shop to Win 20.dll (Shop To Win, LLC)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (Blekko search bar) - {7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} - C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe (Hewlett-Packard Development Company, L.P.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Anti-phishing Domain Advisor] C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe (Visicom Media Inc. (Powered by Panda Security))
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPQuickWebProxy] C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKCU..\Run: [MediaFire Tray] C:\Users\Nathan\AppData\Local\MediaFire Express\mf_systray.exe (MediaFire LLC)
O4 - HKCU..\Run: [PC Speed Maximizer] "C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe" File not found
O4 - HKCU..\Run: [Shop To Win] C:\Program Files (x86)\Shop To Win\ShopToWin.exe (Jackpot Rewards)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{675A01D0-05AF-446C-A3F2-969ADAE6D4C0}: DhcpNameServer = 10.0.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/07/14 10:12:21 | 000,000,000 | ---D | C] -- C:\Users\Nathan\AppData\Roaming\Malwarebytes
[2012/07/14 10:04:51 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/07/13 18:20:51 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
[2012/07/13 18:07:36 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

========== Files - Modified Within 30 Days ==========

[2012/07/14 10:18:47 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/14 10:18:47 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/14 10:16:57 | 000,729,816 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/14 10:16:57 | 000,626,512 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/07/14 10:16:57 | 000,107,756 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/07/14 10:10:23 | 000,417,192 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/14 10:10:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/14 10:09:53 | 495,865,855 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/13 18:20:45 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/13 18:17:52 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
[2012/07/13 18:13:15 | 000,002,198 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/07/13 18:07:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\internet.lnk
[2012/07/11 11:37:15 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/09 00:32:26 | 000,000,674 | ---- | M] () -- C:\Users\Nathan\AppData\Roaming\result.db
[2012/07/07 02:51:58 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForNathan.job
[2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/02 19:23:05 | 000,010,512 | ---- | M] () -- C:\Users\Nathan\Desktop\images.jpg

========== Files Created - No Company Name ==========

[2012/07/13 18:20:45 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/13 18:07:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\internet.lnk
[2012/07/09 00:32:26 | 000,000,674 | ---- | C] () -- C:\Users\Nathan\AppData\Roaming\result.db
[2012/07/02 19:23:10 | 000,010,512 | ---- | C] () -- C:\Users\Nathan\Desktop\images.jpg
[2012/05/03 15:22:03 | 000,743,534 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/05/13 09:33:18 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL
[2011/04/15 14:05:50 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011/04/15 14:05:50 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011/04/15 14:05:48 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011/04/15 13:59:48 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011/04/15 13:33:40 | 013,359,616 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll

========== LOP Check ==========

[2012/05/08 21:15:52 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\AnvSoft
[2012/01/03 20:15:46 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\enchant
[2012/05/08 21:15:28 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\OpenCandy
[2012/05/09 19:55:25 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\PC Speed Maximizer
[2012/05/09 19:34:12 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\Qwiklinx
[2012/05/05 11:20:21 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\Windows Live Writer
[2012/03/26 12:37:57 | 000,032,548 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:BF3D62E7

< End of report >
  • 0

#4
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Nice :cool:

I am seeing three antivirus programmes on your system and this is the one time when more is not better :lol:

Let me know which one you want to keep out of AVG, Norton, MSE and I will get the removal tools for the other two

Could you now update and run MBAM please and post the resultant log along with any problems you are seeing
  • 0

#5
NatiePotatie

NatiePotatie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
I want to keep MSE I think, just because the updates seem more regular :)

I'm not seeing anymore problems really. I think that everything is working fine now.
Thank you so much for your help :)

How long have you been removing malware for?

Here's the log:



Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.07.17.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Nathan :: NATHAN-HP [administrator]

7/16/2012 11:03:49 PM
mbam-log-2012-07-16 (23-03-49).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 211463
Time elapsed: 7 minute(s),

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 1
C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll (PUP.BlekkoSearchBar) -> Delete on reboot.

Registry Keys Detected: 5
HKCR\CLSID\{7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} (PUP.BlekkoSearchBar) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7D9E1ADC-7DB1-4EAF-B6C7-7E062074E6BE} (PUP.BlekkoSearchBar) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{7D9E1ADC-7DB1-4EAF-B6C7-7E062074E6BE} (PUP.BlekkoSearchBar) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7D9E1ADC-7DB1-4EAF-B6C7-7E062074E6BE} (PUP.BlekkoSearchBar) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7D9E1ADC-7DB1-4EAF-B6C7-7E062074E6BE} (PUP.BlekkoSearchBar) -> Quarantined and deleted successfully.

Registry Values Detected: 2
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{7D9E1ADC-7DB1-4EAF-B6C7-7E062074E6BE} (PUP.BlekkoSearchBar) -> Data: Blekko search bar -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} (PUP.BlekkoSearchBar) -> Data: -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 6
C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll (PUP.BlekkoSearchBar) -> Quarantined and deleted successfully.
C:\$Recycle.Bin\S-1-5-21-457016509-922606459-4144672583-1001\$RFV39LC.exe (PUP.BundleOffers.IIQ) -> Quarantined and deleted successfully.
C:\$Recycle.Bin\S-1-5-21-457016509-922606459-4144672583-1001\$RGKJS5B.exe (PUP.BundleOffers.IIQ) -> Quarantined and deleted successfully.
C:\$Recycle.Bin\S-1-5-21-457016509-922606459-4144672583-1001\$RK6DDZM.exe (PUP.BundleOffers.IIQ) -> Quarantined and deleted successfully.
C:\Users\Nathan\Downloads\FLVPlayerSetup_MMM (1).exe (PUP.Adware.Installcore) -> Quarantined and deleted successfully.
C:\Users\Nathan\Downloads\FLVPlayerSetup_MMM.exe (PUP.Adware.Installcore) -> Quarantined and deleted successfully.

(end)
  • 0

#6
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Here we go .. Removal tools first, download these to the desktop and run them

Norton
AVG

I have been doing this for about 6 years now, and I am still learning and seeing new things :)

Subject to no further problems :)

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

    :Commands
    [resethosts]
    [emptytemp]
    [Reboot]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done

Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.

We will now confirm that your hidden files are set to that, as some of the tools I use will change that
  • Go to control panel
  • Select folder options (Appearance > Folder options in category view)
  • Select the View Tab.
  • Under the Hidden files and folders heading select Do not show hidden files and folders.
  • Click Yes to confirm.
  • Click OK.

Posted Image
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.

Upgrading Java:
  • Go to this site and click Do I have Java
  • It will check your current version and then offer to update to the latest version

SPRING CLEAN

To manually create a new Restore Point
  • Go to Control Panel and select System
  • Select System
  • On the left select System Protection and accept the warning if you get one
  • Select System Protection Tab
  • Select Create at the bottom
  • Type in a name i.e. Clean
  • Select Create

Now we can purge the infected ones
  • GoStart > All programs > Accessories > system tools
  • Right click Disc cleanup and select run as administrator
  • Select Your main drive and accept the warning if you get one
  • For a few moments the system will make some calculations
  • Select the More Options tab
  • In the System Restore and Shadow Backups select Clean up
  • Select Delete on the pop up
  • Select OK
  • Select Delete

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
Posted Image
Malwarebytes. Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?

Keep safe :wave:
  • 0

#7
NatiePotatie

NatiePotatie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

I have been doing this for about 6 years now, and I am still learning and seeing new things


That's so cool! This malware removal stuff is really interesting to me.
How long does it take you go through a whole OTL log that someone posts?
It seems like it would take a lifetime :lol:

Thank you so much for your help! :)

I ran the OTL custom fix you gave me,
but when it rebooted the OTL tool was still
on my desktop.

I found some oddities on my computer:

  • I installed Mozilla and whenever I start it up
    there is an error that pops up:
    error: typeerror: xuItems[items].getAttribute is not a function when firefox starts up
  • I was looking at the programs installed on my computer and I found PC Speed Maximizer.
    Isn't that a bad program?
  • I was also looking through the services that run on boot up and I came across
    GamesAppService by Wildtangent, Inc. Isn't that a bad program as well?

  • 0

#8
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Wild tangent used to be a bad boy, but they have now cleaned up their act

PC Speed Maximizer is a programme that some people install, however it does not really do much

The time for analysis depends on the infection. The great majority do stand out

Lets tidy Firefox up and see if I can stop that

We will use a fresh copy so download OTL from here

Download OTL to your Desktop

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Posted Image

    :OTL
    FF - prefs.js..browser.search.defaultenginename: "Blekko"
    FF - prefs.js..browser.search.order.1: "Blekko"
    FF - prefs.js..browser.search.selectedEngine: "Blekko"
    FF - prefs.js..keyword.URL: "http://blekko.com/ws...={searchTerms}"
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\IPSFFPlgn\ [2012/02/07 16:00:35 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\coFFPlgn\ [2012/07/14 10:12:08 | 000,000,000 | ---D | M]
    [2012/05/09 19:33:18 | 000,000,000 | ---D | M] (Blekko search bar) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions\{7d9e1adc-7db1-4eaf-b6c7-7e062074e6be}
    O2 - BHO: (Blekko search bar) - {7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} - C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll ()
    O3 - HKLM\..\Toolbar: (Blekko search bar) - {7d9e1adc-7db1-4eaf-b6c7-7e062074e6be} - C:\Program Files (x86)\blekkotb_soc\blekkotb_019X.dll ()
    O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\coieplg.dll (Symantec Corporation)
    O4 - HKCU..\Run: [PC Speed Maximizer] "C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe" File not found
    [2012/05/09 19:55:25 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\PC Speed Maximizer

    :Files
    C:\Program Files (x86)\blekkotb_soc
    C:\Program Files (x86)\PC Speed Maximizer

    :Commands
    [purity]
    [resethosts]
    [emptytemp]
    [CREATERESTOREPOINT]
    [Reboot]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

  • 0

#9
NatiePotatie

NatiePotatie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

Wild tangent used to be a bad boy, but they have now cleaned up their act


Oh okay! I was still thinking they were bad. I'm glad they cleaned up their act.

PC Speed Maximizer is a programme that some people install, however it does not really do much


Alright! I was thinking I saw a PC Speed Maximizer ad on television.
Which usually means that it's bad :lol:

The time for analysis depends on the infection. The great majority do stand out


I bet. Especially since you've been doing this for 6 years.







OTL logfile created on: 7/19/2012 8:38:04 PM - Run 3
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Nathan\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.95 Gb Total Physical Memory | 4.18 Gb Available Physical Memory | 70.24% Memory free
11.90 Gb Paging File | 9.97 Gb Available in Paging File | 83.81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 571.05 Gb Total Space | 513.92 Gb Free Space | 90.00% Space Free | Partition Type: NTFS
Drive D: | 20.96 Gb Total Space | 2.26 Gb Free Space | 10.78% Space Free | Partition Type: NTFS
Drive E: | 3.96 Gb Total Space | 1.08 Gb Free Space | 27.23% Space Free | Partition Type: FAT32

Computer Name: NATHAN-HP | User Name: Nathan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/07/19 20:28:17 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
PRC - [2012/07/15 14:51:55 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe
PRC - [2012/06/18 20:03:19 | 000,935,480 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe
PRC - [2012/06/14 17:20:13 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/05/03 13:07:40 | 000,217,256 | ---- | M] (Visicom Media Inc. (Powered by Panda Security)) -- C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe
PRC - [2012/05/02 14:51:02 | 002,219,008 | ---- | M] (Jackpot Rewards) -- C:\Program Files (x86)\Shop To Win\ShopToWin.exe
PRC - [2012/03/30 10:27:03 | 002,089,984 | ---- | M] (MediaFire LLC) -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_systray.exe
PRC - [2012/03/30 10:27:03 | 001,934,336 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_status.exe
PRC - [2012/03/30 10:27:02 | 002,978,816 | ---- | M] (MediaFire) -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_services.exe
PRC - [2012/03/30 10:27:02 | 001,953,280 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_daemon.exe
PRC - [2011/08/26 14:37:18 | 001,342,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
PRC - [2011/08/19 15:48:44 | 000,379,960 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
PRC - [2011/07/11 15:04:44 | 000,574,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2011/07/11 15:04:44 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2011/06/28 04:41:08 | 000,168,504 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
PRC - [2011/06/15 19:58:28 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
PRC - [2011/05/21 18:52:16 | 000,103,992 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2011/05/06 01:06:46 | 000,263,496 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
PRC - [2011/05/06 01:06:28 | 000,653,128 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
PRC - [2011/05/06 01:06:02 | 000,142,664 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
PRC - [2011/04/30 03:32:54 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2011/02/25 12:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
PRC - [2011/02/22 15:19:12 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2011/02/22 15:19:08 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2010/09/30 05:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2012/07/15 14:51:55 | 009,465,032 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll
MOD - [2012/06/14 17:20:15 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012/05/13 13:55:45 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012/05/13 13:55:40 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012/04/25 18:37:18 | 000,632,832 | ---- | M] () -- C:\Program Files (x86)\Shop To Win\sqlite3.dll
MOD - [2012/03/30 10:27:06 | 001,351,711 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mediafire_api_connect.dll
MOD - [2012/03/30 10:27:05 | 018,678,784 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtGui4.dll
MOD - [2012/03/30 10:27:05 | 000,978,958 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libstdc++-6.dll
MOD - [2012/03/30 10:27:05 | 000,338,432 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtXml4.dll
MOD - [2012/03/30 10:27:05 | 000,151,054 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libexpat-1.dll
MOD - [2012/03/30 10:27:05 | 000,118,784 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\libgcc_s_dw2-1.dll
MOD - [2012/03/30 10:27:04 | 004,533,248 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\QtCore4.dll
MOD - [2012/03/30 10:27:03 | 001,934,336 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_status.exe
MOD - [2012/03/30 10:27:02 | 001,953,280 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\mf_daemon.exe
MOD - [2012/03/30 10:19:13 | 000,231,424 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\imageformats\qjpeg4.dll
MOD - [2012/03/30 10:19:13 | 000,028,160 | ---- | M] () -- C:\Users\Nathan\AppData\Local\MediaFire Express\imageformats\qgif4.dll
MOD - [2012/03/26 12:49:18 | 000,877,952 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\HP.SupportFramework\1.0.0.0__2a4860322af7ba08\HP.SupportFramework.dll
MOD - [2012/02/20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/02/20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012/03/26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012/03/26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2011/05/27 14:06:16 | 000,301,568 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:64bit: - [2011/05/27 13:20:12 | 000,030,520 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV:64bit: - [2011/05/02 16:27:50 | 001,517,328 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel®
SRV:64bit: - [2011/05/02 16:13:54 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2011/05/02 16:10:26 | 000,844,560 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel®
SRV:64bit: - [2011/04/21 10:34:16 | 001,136,640 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011/04/21 09:42:50 | 000,134,928 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) Intel® Centrino® Wireless Bluetooth®
SRV:64bit: - [2010/10/11 04:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
SRV:64bit: - [2010/09/22 20:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/03/03 05:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
SRV - [2012/07/15 14:51:56 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/06/18 20:03:19 | 000,935,480 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe -- (vToolbarUpdater11.1.0)
SRV - [2012/06/14 17:20:14 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011/09/09 18:10:28 | 000,086,072 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
SRV - [2011/07/11 15:04:44 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
SRV - [2011/05/21 18:52:16 | 000,103,992 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2011/05/06 01:06:46 | 000,263,496 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe -- (FPLService)
SRV - [2011/04/30 03:32:54 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel®
SRV - [2011/03/07 19:43:30 | 002,375,168 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
SRV - [2011/03/01 23:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 12:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe -- (jhi_service) Intel®
SRV - [2011/02/22 15:19:12 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel®
SRV - [2011/02/22 15:19:08 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel®
SRV - [2010/10/12 12:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/09/30 05:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/03/20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/11/28 14:51:44 | 000,033,872 | ---- | M] (AnvSoft Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv)
DRV:64bit: - [2011/08/05 13:34:02 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011/08/05 13:34:00 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011/07/08 19:08:26 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/07/08 19:08:26 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/05/27 14:06:16 | 000,528,384 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2011/05/27 13:20:12 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2011/05/27 13:20:12 | 000,030,008 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2011/05/01 16:33:06 | 008,593,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel®
DRV:64bit: - [2011/04/26 14:07:36 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011/04/21 10:09:26 | 000,294,912 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) Intel® Centrino®
DRV:64bit: - [2011/04/21 10:09:26 | 000,294,912 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) Intel® Centrino®
DRV:64bit: - [2011/04/15 14:08:26 | 012,228,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/24 19:20:36 | 000,337,512 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2011/03/23 13:20:58 | 000,077,936 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2011/02/22 06:54:22 | 000,351,864 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2010/11/20 22:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 22:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 22:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/10/19 19:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel®
DRV:64bit: - [2010/10/15 04:28:16 | 000,317,440 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel®
DRV:64bit: - [2010/07/28 11:13:50 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 19:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/06/10 16:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009/06/10 16:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009/06/10 16:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009/06/10 15:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009/06/10 15:34:38 | 001,311,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKLM\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylo...000101f74e724a7
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylo...000101f74e724a7
IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.co...&l=dis&o=HPNTDF
IE - HKCU\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://blekkosearch....q={searchTerms}
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...sa&d=2012-05-08 21:17:33&v=11.0.0.9&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia....h={searchTerms}
IE - HKCU\..\SearchScopes\{FE9BF674-3151-4004-A218-9B263ED34B38}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local;*.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "youtube.com"
FF - prefs.js..keyword.URL: "http://isearch.avg.c...7:33&sap=ku&q="


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012/07/10 16:20:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/18 17:54:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/05/03 15:18:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Extensions
[2012/07/18 18:45:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\jv14f1lv.default\extensions
[2012/07/18 18:07:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/07/18 18:07:12 | 000,000,000 | ---D | M] (TrueSuite Website Logon) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
[2012/06/14 17:20:49 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/07/10 16:20:11 | 000,003,769 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/07/18 17:52:51 | 000,002,349 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012/06/14 17:19:40 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/05/09 19:33:17 | 000,002,158 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\search.xml
[2012/06/14 17:19:40 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - homepage: http://blekkosearch....1E&tbp=homepage
CHR - default_search_provider: Blekko (Enabled)
CHR - default_search_provider: search_url = http://blekko.com/ws...q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: http://blekkosearch....1E&tbp=homepage
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: nphelper scriptable example plugin (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo\1.2_0\nphelper.dll
CHR - plugin: Simple Pass 2011 (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhihajbmafmgilcciomnamcjfkdhikl\1.0_0\npwebsitelogon.dll
CHR - plugin: Norton Confidential (Enabled) = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.3.7_0\npcoplgn.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.0.2\\npsitesafety.dll
CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: WildTangent Games App Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Nathan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: Make this page red = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo\1.2_0\
CHR - Extension: Website Logon = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhihajbmafmgilcciomnamcjfkdhikl\1.0_0\
CHR - Extension: Norton Identity Protection = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.4.6_0\
CHR - Extension: Yontoo = C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.2_0\

O1 HOSTS File: ([2012/07/19 20:29:42 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Qwiklinx) - {3E7C8B5A-96AB-438F-BF9B-782400655440} - C:\Users\Nathan\AppData\Roaming\Qwiklinx\Qwiklinx.dll (Qwiklinx, Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll File not found
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Shop to Win) - {F9E44926-2497-46F3-8A25-928136AC079E} - C:\Program Files (x86)\Shop to Win 20\Shop to Win 20.dll (Shop To Win, LLC)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll File not found
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe (Hewlett-Packard Development Company, L.P.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Anti-phishing Domain Advisor] C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe (Visicom Media Inc. (Powered by Panda Security))
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [HF_G_Jul] "C:\Program Files (x86)\AVG Secure Search\HF_G_Jul.exe" /DoAction File not found
O4 - HKLM..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPQuickWebProxy] C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKCU..\Run: [MediaFire Tray] C:\Users\Nathan\AppData\Local\MediaFire Express\mf_systray.exe (MediaFire LLC)
O4 - HKCU..\Run: [Shop To Win] C:\Program Files (x86)\Shop To Win\ShopToWin.exe (Jackpot Rewards)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{675A01D0-05AF-446C-A3F2-969ADAE6D4C0}: DhcpNameServer = 10.0.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/07/19 20:28:15 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
[2012/07/18 18:27:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012/07/18 18:17:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle
[2012/07/18 18:15:24 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2012/07/18 18:13:42 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2012/07/18 18:07:34 | 000,000,000 | ---D | C] -- C:\Users\Nathan\AppData\Roaming\Symantec
[2012/07/18 17:55:21 | 000,000,000 | ---D | C] -- C:\Users\Nathan\AppData\Local\Macromedia
[2012/07/18 17:53:05 | 000,000,000 | ---D | C] -- C:\Users\Nathan\AppData\Roaming\BabylonToolbar
[2012/07/18 17:53:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar
[2012/07/18 17:52:42 | 000,000,000 | ---D | C] -- C:\Users\Nathan\AppData\Roaming\Babylon
[2012/07/18 17:52:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2012/07/14 10:12:21 | 000,000,000 | ---D | C] -- C:\Users\Nathan\AppData\Roaming\Malwarebytes
[2012/07/14 10:04:51 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/07/13 18:07:36 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/07/13 18:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

========== Files - Modified Within 30 Days ==========

[2012/07/19 20:39:21 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/19 20:39:21 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/19 20:38:08 | 000,729,816 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/19 20:38:08 | 000,626,512 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/07/19 20:38:08 | 000,107,756 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/07/19 20:31:57 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForNathan.job
[2012/07/19 20:31:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/19 20:31:41 | 495,865,855 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/19 20:29:42 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2012/07/19 20:28:17 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Nathan\Desktop\OTL.exe
[2012/07/19 15:51:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/18 17:54:28 | 000,001,049 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/07/18 17:53:05 | 000,000,247 | ---- | M] () -- C:\user.js
[2012/07/15 14:18:51 | 000,213,717 | ---- | M] () -- C:\Users\Nathan\Desktop\beasley-weed.jpg
[2012/07/14 10:10:23 | 000,417,192 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/13 18:20:45 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/13 18:13:15 | 000,002,198 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/07/13 18:07:37 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\MBAM.lnk
[2012/07/09 00:32:26 | 000,000,674 | ---- | M] () -- C:\Users\Nathan\AppData\Roaming\result.db
[2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/02 19:23:05 | 000,010,512 | ---- | M] () -- C:\Users\Nathan\Desktop\images.jpg

========== Files Created - No Company Name ==========

[2012/07/18 17:54:28 | 000,001,049 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/07/18 17:53:05 | 000,000,247 | ---- | C] () -- C:\user.js
[2012/07/15 14:19:50 | 000,213,717 | ---- | C] () -- C:\Users\Nathan\Desktop\beasley-weed.jpg
[2012/07/13 18:20:45 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/13 18:07:37 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\MBAM.lnk
[2012/07/09 00:32:26 | 000,000,674 | ---- | C] () -- C:\Users\Nathan\AppData\Roaming\result.db
[2012/07/02 19:23:10 | 000,010,512 | ---- | C] () -- C:\Users\Nathan\Desktop\images.jpg
[2012/05/03 15:22:03 | 000,743,534 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/05/13 09:33:18 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL
[2011/04/15 14:05:50 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011/04/15 14:05:50 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011/04/15 14:05:48 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011/04/15 13:59:48 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011/04/15 13:33:40 | 013,359,616 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll

========== LOP Check ==========

[2012/05/08 21:15:52 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\AnvSoft
[2012/07/18 17:52:42 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\Babylon
[2012/07/18 17:53:06 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\BabylonToolbar
[2012/01/03 20:15:46 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\enchant
[2012/05/08 21:15:28 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\OpenCandy
[2012/05/09 19:34:12 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\Qwiklinx
[2012/05/05 11:20:21 | 000,000,000 | ---D | M] -- C:\Users\Nathan\AppData\Roaming\Windows Live Writer
[2012/03/26 12:37:57 | 000,032,548 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:BF3D62E7

< End of report >
  • 0

#10
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Has the FF problem been resolved ?
  • 0

#11
NatiePotatie

NatiePotatie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Yes it has :)
  • 0

#12
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
If you are happy run OTL and hit the cleanup button... Enjoy :)
  • 0

#13
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP