Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Laptop full of viruses need help removing [Solved]

Started by djmarzy , Jul 10 2014 06:55 AM

viruses adware optimizer pro reg clean pro buenosearch

This topic is locked

#1
djmarzy

Posted 10 July 2014 - 06:55 AM

Member

Member
134 posts

as tittle suggests my laptop is full of viruses and adware i have tried to remove myself but it seems to be making things worse i just keep getting more and more programs installed. so far i have had optimizer pro, reg clean pro and buenosearch pluss more automatically install. it has made my laptop very slow and hardly usable. if any one can help with this issue it would be great.

#2
Naathim

Posted 10 July 2014 - 06:58 AM

GeekU Minion

Expert
4,568 posts

Minion%20Welcome.jpg

My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat

Before we start please note the following:

Analysis and research take some time, also sometimes real life gets in the way, please be patient.

Limit your internet access to posting here, some infections just wait to steal typed-in passwords.

Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.

Paste the logs in your posts, attachments make my work harder and more complicated.

Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.

Note that we may live in totally different time zones, what may cause some delays between answers.

I can't foresee everything, so if anything unexpected happens, please stop and inform me!

There are no silly questions. Never be afraid to ask if in doubt!

Let's start and enjoy the fight!

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

Right-click on icon and select Run as Administrator to start the tool.
Wait patiently until the main console will appear, it may take a minute or two.

In the main box please paste in the following script:

createsrpoint;
process;
services-list;
systemspecs;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;
filesrcm;
installedprogs;

Make sure that Scan All Users option is checked.
Push Run Script and wait patiently. The scan may take a couple of minutes.
When the scan completes, a zoek-results logfile should open in notepad.
If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

Cheers,
Naat

#3
djmarzy

Posted 10 July 2014 - 07:40 AM

Member

Topic Starter
Member
134 posts

Hi Naat thanks for your reply iv fallowed your instructions and this is the results

Zoek.exe v5.0.0.0 Updated 05-July-2014

Tool run by -LUKE- on 10/07/2014 at 14:18:47.22.

Microsoft® Windows Vista™ Home Basic 6.0.6002 Service Pack 2 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\-LUKE-\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

10/07/2014 14:25:56 Zoek.exe System Restore Point Created Succesfully.

==== Installed Programs ======================

æTorrent

Acer eDataSecurity Management

Acer Empowering Technology

Acer ePresentation Management

Acer eSettings Management

Adobe AIR

Adobe Download Manager

Adobe Flash Player 14 ActiveX

Adobe Flash Player 14 Plugin

Adobe Reader X (10.1.1)

Adobe Shockwave Player 11.5

Apple Application Support

Apple Mobile Device Support

Apple Software Update

ASIO4ALL

Atheros Driver Installation Program

Bonjour

Broadcom Driver v4.170.25.19_Foxconn Installation Program

Buenosearch

Buzzdock

FL Studio 11

FlowStone FL 3.0

focusbase

Free File Viewer 2014

GEAR 32bit Driver Installer

Google Chrome

Google Update Helper

Hercules DJ Products Series drivers

High-Definition Video Playback

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

iCloud

iFunbox (v2.8.2414.748), iFunbox DevTeam

IL Download Manager

IL Shared Libraries

ImgBurn

Intel® Graphics Media Accelerator Driver

iTunes

Java 7 Update 55

Java Auto Updater

Java DB 10.6.2.1

Java™ SE Development Kit 6 Update 24

JavaFX 2.1.1

K-Lite Codec Pack 5.2.0 (Full)

Malwarebytes Anti-Malware version 1.75.0.1300

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4.5.1

Microsoft Security Client

Microsoft Security Essentials

Microsoft Silverlight

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Windows Media Center SDK 5.3

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

MSXML 4.0 SP2 (KB927978)

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MSXML 4.0 SP3 Parser

MSXML 4.0 SP3 Parser (KB2721691)

MSXML 4.0 SP3 Parser (KB2758694)

MSXML 4.0 SP3 Parser (KB973685)

Nero 10 Menu TemplatePack Basic

Nero 10 Movie ThemePack Basic

Nero BackItUp 10 Help (CHM)

Nero BurningROM 10 Help (CHM)

Nero BurnRights 10 Help (CHM)

Nero Control Center 10

Nero ControlCenter 10 Help (CHM)

Nero Core Components 10

Nero CoverDesigner 10 Help (CHM)

Nero DiscCopyGadget 10 Help (CHM)

Nero DiscSpeed 10 Help (CHM)

Nero Dolby Files 10

Nero Express 10 Help (CHM)

Nero InfoTool 10 Help (CHM)

Nero Recode 10 Help (CHM)

Nero RescueAgent 10 Help (CHM)

Nero SoundTrax 10 Help (CHM)

Nero StartSmart 10 Help (CHM)

Nero Vision 10 Help (CHM)

Nero WaveEditor 10 Help (CHM)

NeroKwikMedia Help (CHM)

neroxml

Optimizer Pro v3.2

Play Now Radio

QuickTime 7

reFX Nexus VSTi RTAS v2.2.0

RegClean Pro

RelevantKnowledge

Revo Uninstaller Pro 3.0.8

Search Protect

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)

Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)

Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)

Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)

Sylenth1 v2.20

TuneUp Utilities Language Pack (en-GB)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

v9 uninstall

VirtualDJ PRO Full

VLC media player 1.1.8

VO Package

Windows Media Player Firefox Plugin

WinRAR archiver

==== Running Processes ======================

C:\Windows\System32\smss.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

c:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\Windows\system32\SLsvc.exe

C:\ProgramData\IePluginServices\PluginService.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\rundll32.exe

C:\Program Files\RelevantKnowledge\rlservice.exe

C:\Program Files\NetCrawl\updateNetCrawl.exe

C:\Users\-LUKE-\AppData\Roaming\VOPackage\VOsrv.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\002\yewimmxqbs32.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\taskeng.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files\focusbase\bin\utilfocusbase.exe

C:\Program Files\focusbase\bin\focusbase.PurBrowse.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\focusbase\bin\focusbase.BrowserAdapter.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\RelevantKnowledge\rlvknlg.exe

C:\PROGRA~1\RELEVA~1\rlvknlg32.exe

C:\Users\-LUKE-\AppData\Local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Users\-LUKE-\Downloads\zoek.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\svchost.exe -k swprv

==== Services (whitelist) ======================

R2 - [ca82e1a5] - Optimizer Pro Crash Monitor - "C:\Windows\system32\rundll32.exe" "c:\Program Files\Optimizer Pro\OptProCrash.dll",ServiceMain

R2 - [IePluginServices] - IePlugin Services - C:\ProgramData\IePluginServices\PluginService.exe -service

R2 - [MsMpSvc] - Microsoft Antimalware Service - "c:\Program Files\Microsoft Security Client\MsMpEng.exe"

R2 - [RelevantKnowledge] - RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlservice.exe /service

R2 - [slsvc] - Software Licensing - C:\Windows\system32\SLsvc.exe

R2 - [Update NetCrawl] - Update NetCrawl - "C:\Program Files\NetCrawl\updateNetCrawl.exe"

R2 - [Util focusbase] - Util focusbase - "C:\Program Files\focusbase\bin\utilfocusbase.exe"

R2 - [VOsrv] - Service Component of VO - C:\Users\-LUKE-\AppData\Roaming\VOPackage\VOsrv.exe

R2 - [WMPNetworkSvc] - Windows Media Player Network Sharing Service - "C:\Program Files\Windows Media Player\wmpnetwk.exe"

R2 - [WSearch] - Windows Search - C:\Windows\system32\SearchIndexer.exe /Embedding

R2 - [yewimmxqbs32] - yewimmxqbs32 - C:\Program Files\002\yewimmxqbs32.exe run options=01100010020000000000000000000000 sourceguid=39FABFBE-5A1E-4B00-ADC5-E8C0D0701167

R3 - [VSS] - Volume Shadow Copy - C:\Windows\system32\vssvc.exe

S2 - [clr_optimization_v4.0.30319_32] - Microsoft .NET Framework NGEN v4.0.30319_X86 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

S2 - [Update focusbase] - Update focusbase - "C:\Program Files\focusbase\updatefocusbase.exe"

S3 - [AdobeFlashPlayerUpdateSvc] - Adobe Flash Player Update Service - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

S3 - [ALG] - Application Layer Gateway Service - C:\Windows\System32\alg.exe

S3 - [aspnet_state] - ASP.NET State Service - C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe

S3 - [COMSysApp] - COM+ System Application - C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

S3 - [DFSR] - DFS Replication - C:\Windows\system32\DFSR.exe

S3 - [FontCache3.0.0.0] - Windows Presentation Foundation Font Cache 3.0.0.0 - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

S3 - [gupdatem] - Google Update Service (gupdatem) - "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc

S3 - [IDriverT] - InstallDriver Table Manager - "C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"

S3 - [iPod Service] - iPod Service - "C:\Program Files\iPod\bin\iPodService.exe"

S3 - [MSDTC] - Distributed Transaction Coordinator - C:\Windows\System32\msdtc.exe

S3 - [msiserver] - Windows Installer - C:\Windows\system32\msiexec /V

S3 - [NisSrv] - Microsoft Network Inspection - "c:\Program Files\Microsoft Security Client\NisSrv.exe"

S3 - [NMIndexingService] - NMIndexingService - "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"

S3 - [RpcLocator] - Remote Procedure Call (RPC) Locator - C:\Windows\system32\locator.exe

S3 - [SNMPTRAP] - SNMP Trap - C:\Windows\System32\snmptrap.exe

S3 - [TrustedInstaller] - Windows Modules Installer - C:\Windows\servicing\TrustedInstaller.exe

S3 - [vds] - Virtual Disk - C:\Windows\System32\vds.exe

S3 - [wmiApSrv] - WMI Performance Adapter - C:\Windows\system32\wbem\WmiApSrv.exe

S3 - [WPFFontCache_v0400] - Windows Presentation Foundation Font Cache 4.0.0.0 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

S4 - [AdobeARMservice] - Adobe Acrobat Update Service - "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe"

S4 - [Apple Mobile Device] - Apple Mobile Device - "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"

S4 - [Bonjour Service] - Bonjour Service - "C:\Program Files\Bonjour\mDNSResponder.exe"

S4 - [clr_optimization_v2.0.50727_32] - Microsoft .NET Framework NGEN v2.0.50727_X86 - C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

S4 - [eDataSecurity Service] - eDataSecurity Service - "C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe"

S4 - [eRecoveryService] - eRecovery Service - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

S4 - [eSettingsService] - eSettings Service - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

S4 - [gupdate] - Google Update Service (gupdate) - "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc

S4 - [HerculesDJControlMP3] - Hercules DJ Control MP3 - C:\Program Files\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE

==== System Specs ======================

Windows: Windows Vista Home Basic Edition Service Pack 2 (Build 6002)

Memory (RAM): 1014 MB

CPU Info: Intel® Celeron® CPU 530 @ 1.73GHz

CPU Speed: 1726.9 MHz

Sound Card: Speakers (High Definition Audio |

Display Adapters: Mobile Intel® 965 Express Chipset Family | Mobile Intel® 965 Express Chipset Family | RDPDD Chained DD | RDP Encoder Mirror Driver

Monitors: 1x; Generic PnP Monitor |

Screen Resolution: 1280 X 800 - 32 bit

Network: Network Present

Network Adapters: Atheros AR5007EG Wireless Network Adapter | Generic Marvell Yukon Chipset based Ethernet Controller

CD / DVD Drives: 1x (D: | ) D: MATSHITADVD-RAM UJ-850S

Ports: COM3 LPT Port NOT Present.

Mouse: 2 Button Mouse Present

Hard Disks: C: 64.8GB

Hard Disks - Free: C: 6.7GB

Manufacturer *: Phoenix Technologies LTD

BIOS Info: AT/AT COMPATIBLE | 09/05/07 | ACRSYS - 6040000

Time Zone: GMT Standard Time

Motherboard *: Acer Volvi2

Country: United Kingdom

Language: ENG

==== System Specs (Software) ======================

Anti-Virus: Microsoft Security Essentials On-access scanning disabled (Outdated)

Anti-Spyware: Windows Defender disabled (Outdated)

Anti-Spyware: Microsoft Security Essentials disabled (Outdated)

Default Browser: Google Chrome 35.0.1916.153

Internet Explorer Version: 9.0.8112.16421

Google Chrome version: 35.0.1916.153

Sun Java version: 1.7.0_55 (32-bit)

Flash Player version: 14.0.0.145

Shockwave Player version: 11.5.9r620

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\-LUKE-\AppData\Local\Temp ====

2014-07-10 09:47:34 C9B0E5CAB733D9B9FBB851A85DDE0299 576083 ------w- C:\Users\-LUKE-\AppData\Local\Temp\is45637729\1989389_stp\AnyProtectScannerSetup.exe

2014-07-09 23:16:52 EF8F8F959C53163555B7AF0F33DC5CB9 6884024 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\optprosetup.exe

2014-07-09 23:13:38 2AFA8A9E0B307688BE29917D22E3B9D2 786640 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\107201401337\Uninstall Bubble Dock.exe

2014-07-09 23:05:14 A4B34F21548FFD7E9AADE1B56630AB3B 372832 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\AVBD.exe

2014-07-09 23:01:10 9FB9D49C2DB7EDD1084AB765D619F5C6 66368 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\SearchProtectINT.exe

2014-07-09 10:36:08 C9B0E5CAB733D9B9FBB851A85DDE0299 576083 ------w- C:\Users\-LUKE-\AppData\Local\Temp\is45637729\30415327_stp\AnyProtectScannerSetup.exe

2014-07-07 16:47:16 02C162FD7706E887624DFCC410979355 156061 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\nsv2B37.exe

2014-07-07 16:47:16 02C162FD7706E887624DFCC410979355 156061 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\nsq6C08.exe

2014-07-07 16:47:16 02C162FD7706E887624DFCC410979355 156061 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\nsq4A2D.exe

2014-07-07 16:47:16 02C162FD7706E887624DFCC410979355 156061 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\nsl7424.exe

2014-07-07 16:47:16 02C162FD7706E887624DFCC410979355 156061 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\nsg5BEA.exe

2014-07-07 16:47:16 02C162FD7706E887624DFCC410979355 156061 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\nsa7C20.exe

2014-07-03 22:35:32 13A09BECABCE7CE7DE02D42D9C00A250 38456 ----a-w- C:\Users\-LUKE-\AppData\Local\Temp\bitool.dll

====== Java Cache =====

====== C:\Windows\system32 =====

2014-07-09 23:19:34 EEA80AB2D477D2CA04A4AE395CFEE1EC 660760 ----a-w- C:\Windows\System32\rlls.dll

2014-07-09 23:08:28 E6730883EF0AAC91922650671A9A24AF 18776 ----a-w- C:\Windows\System32\roboot.exe

2014-07-03 20:40:41 9033DAF3277F0498BC86C8D4566C25CE 1554944 ----a-w- C:\Windows\System32\vorbis.acm

====== C:\Windows\system32\drivers =====

2014-07-10 12:30:54 FD213DCD14FDD807670B6FD3A8D68065 55232 ----a-w- C:\Windows\System32\drivers\{2b929fe1-284b-4766-afb9-19b0915b99b0}t.sys

2014-07-09 23:03:03 637318A990CCFB83C5FD40BDBB19E81B 18360 ----a-w- C:\Windows\System32\drivers\SPPD.sys

2014-07-03 23:33:49 CBEAEA2729985BFB260641AB424E0166 320120 ----a-w- C:\Windows\System32\drivers\sptd.sys

2014-06-12 17:12:37 A4196D394207369E1431E8681B373312 915392 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2014-06-12 17:12:37 95389980F70FC4990A4395A0B8BBE1D6 31232 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys

====== C:\Windows\Tasks ======

2014-07-09 23:27:13 97BBDC908F2B4092F36E8ECFB38907B6 3534 ----a-w- C:\Windows\system32\Tasks\Play Now Radio

2014-07-09 23:24:22 46E10FF7B1568B39FAB0916F5D5AC185 364 ----a-w- C:\Windows\Tasks\APSnotifierPP3.job

2014-07-09 23:24:02 7B6627B2B3CBF604F240A0064C8F1D5E 3236 ----a-w- C:\Windows\system32\Tasks\Optimizer Pro Schedule

2014-07-09 23:23:14 78751BB2ABE55BBFBAEBF6B89DE98DC6 2816 ----a-w- C:\Windows\system32\Tasks\APSnotifierPP3

2014-07-09 23:23:11 AE7A35123B7CD37CC0FA1E24C9F75E7A 2816 ----a-w- C:\Windows\system32\Tasks\APSnotifierPP2

2014-07-09 23:23:10 EC4EA4430F28C05BDA56FF6BC4A79408 364 ----a-w- C:\Windows\Tasks\APSnotifierPP2.job

2014-07-09 23:23:01 7A630CD22741EF9C90CD8535789F7964 2818 ----a-w- C:\Windows\system32\Tasks\APSnotifierPP1

2014-07-09 23:22:56 5547316B1FD5B18C4FD04D20D4676428 366 ----a-w- C:\Windows\Tasks\APSnotifierPP1.job

2014-07-09 23:15:28 1091425DE702F297744B0BC8BB9F5B76 3528 ----a-w- C:\Windows\system32\Tasks\Buenosearch

2014-07-09 23:09:13 98875FC8DCF2F87C8FBF2EB2D9E51FFE 2862 ----a-w- C:\Windows\system32\Tasks\RegClean Pro_DEFAULT

2014-07-09 23:09:11 AAFE37EF05ECCD3E63EB938B8FD1B0A9 3312 ----a-w- C:\Windows\system32\Tasks\Advanced System Protector

2014-07-09 23:09:11 24BB0B5A0E21A4BC925B6190103FCAA0 266 ----a-w- C:\Windows\Tasks\RegClean Pro_DEFAULT.job

2014-07-09 23:09:07 E737ABAA20E931423A39746D991E8084 3018 ----a-w- C:\Windows\system32\Tasks\RegClean Pro_UPDATES

2014-07-09 23:09:05 EBAB34CE622837A30FD167896804DEE2 274 ----a-w- C:\Windows\Tasks\RegClean Pro_UPDATES.job

2014-07-09 23:08:51 C6F1BBB708D61DFF357E7D006A1612A3 3096 ----a-w- C:\Windows\system32\Tasks\RegClean Pro

2014-07-03 22:49:52 3FD725761E7F1E509104322A44AFBC35 2950 ----a-w- C:\Windows\system32\Tasks\{670A0151-7FBB-460E-AD81-B6CD27625B13}

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-07-09 23:26:16 -------- d-----w- C:\Program Files\NetCrawl

2014-07-09 23:23:17 -------- d-----w- C:\Program Files\SupTab

2014-07-09 23:19:12 -------- d-----w- C:\Program Files\RelevantKnowledge

2014-07-09 23:17:06 -------- d-----w- C:\Program Files\Optimizer Pro

2014-07-09 23:08:03 -------- d-----w- C:\Program Files\RegClean Pro

2014-07-09 23:04:40 -------- d-----w- C:\Program Files\focusbase

2014-07-09 23:02:21 -------- d-----w- C:\Program Files\SearchProtect

2014-07-04 00:22:18 -------- d-----w- C:\Program Files\Steinberg

2014-07-04 00:04:08 -------- d-----w- C:\Program Files\Common Files\Digidesign

2014-07-03 20:43:32 -------- d-----w- C:\Program Files\ASIO4ALL v2

2014-07-03 20:43:14 -------- d-----w- C:\Program Files\VstPlugins

2014-07-03 20:40:16 -------- d-----w- C:\Program Files\DSPRobotics

2014-07-03 20:27:40 -------- d-----w- C:\Program Files\Image-Line

2014-06-30 20:30:36 -------- d-----w- C:\Program Files\iPod

======= C: =====

====== C:\Users\-LUKE-\AppData\Roaming ======

2014-07-09 23:26:49 -------- d-----w- C:\Users\-LUKE-\AppData\Local\playnowradio

2014-07-09 23:23:55 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\Optimizer Pro

2014-07-09 23:23:45 192CFDE319BA24C73A3CCBEFD20AF46A 314 ----a-w- C:\Users\-LUKE-\AppData\Roaming\aps.uninstall.scan.results

2014-07-09 23:21:39 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\v9

2014-07-09 23:21:06 -------- d-----w- C:\Users\-LUKE-\AppData\Local\StormFall

2014-07-09 23:15:18 -------- d-----w- C:\Users\-LUKE-\AppData\Local\buenosearch

2014-07-09 23:09:05 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\VOPackage

2014-07-09 23:08:43 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\Systweak

2014-07-09 23:02:58 -------- d-----w- C:\Users\-LUKE-\AppData\Local\SearchProtect

2014-07-06 01:34:37 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\VS Revo Group

2014-07-03 20:43:33 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2

2014-07-03 20:41:40 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\Image-Line

2014-07-03 20:41:39 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line

2014-07-03 20:40:18 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\FlowStone

2014-06-30 21:46:58 -------- d-----w- C:\Users\-LUKE-\AppData\Local\pangu

2014-06-22 15:18:09 -------- d-----w- C:\Users\-LUKE-\AppData\Roaming\Media Player Classic

====== C:\Users\-LUKE- ======

2014-07-10 12:45:19 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge

2014-07-09 23:25:19 -------- d-----w- C:\ProgramData\IePluginServices

2014-07-09 23:17:44 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2

2014-07-09 23:08:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro

2014-07-04 00:22:27 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sylenth1

2014-07-04 00:04:10 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reFX

2014-06-30 20:34:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-30 20:29:30 -------- d-----w- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

====== C: exe-files ==

2014-07-10 12:36:22 CF809C98567EA0A627B1CEC03AC28CBF 543520 ----a-w- C:\Program Files\focusbase\focusbaseUn.exe

2014-07-10 12:30:54 8B5C64A8638AAC9167ED08EF1133C904 96544 ----a-w- C:\Program Files\focusbase\bin\focusbase.BrowserAdapter.exe

2014-07-10 12:30:53 5B8F12D69F1704D78D13B6313FCB571A 239392 ----a-w- C:\Program Files\focusbase\bin\focusbase.PurBrowse.exe

2014-07-10 12:28:46 C92F316A76924FBA76133214641BFD3C 319264 ----a-w- C:\Program Files\focusbase\bin\utilfocusbase.exe

2014-07-09 23:05:08 77A0EF99E710BC5FF5BF1BB72DC5E7B4 240146 ----a-w- C:\Program Files\focusbase\focusbaseUninstall.exe

2014-07-09 19:07:12 C92F316A76924FBA76133214641BFD3C 319264 ----a-w- C:\Program Files\focusbase\updatefocusbase.exe

2014-07-03 20:43:33 C6DB64994C5644040774BB378B84B802 44712 ----a-w- C:\Program Files\ASIO4ALL v2\uninstall.exe

2014-07-03 20:41:37 4A6879519157F4B81C77E11CE3989B3D 427017 ----a-w- C:\Program Files\Image-Line\Downloader\Uninstall.exe

2014-07-03 20:40:31 E9CF575B0550D74BAA52733A9C2154B5 721220 ----a-w- C:\Program Files\Image-Line\FL Studio 11\Uninstall.exe

2014-07-03 20:40:20 967CA03D349C4ECE12B8597EFAC46080 61799 ----a-w- C:\Program Files\DSPRobotics\FlowStone\uninstall fl version.exe

=== C: other files ==

2014-07-10 12:30:53 D38327CBD17EFAEB29FD087BF91E3C96 372384 ----a-w- C:\Program Files\focusbase\bin\focusbase.PurBrowse.zip

2014-07-10 12:29:23 74AD084A6F1448B83A8C7346FE02FF27 6121 ----a-w- C:\Program Files\RelevantKnowledge\rlcm.crx

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-21-114143902-2153543805-3046081360-1001\Software\Microsoft\Windows\CurrentVersion\Run]

"buenosearch"="C:\Users\-LUKE-\AppData\Local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe"

"Optimizer Pro"="C:\Program Files\Optimizer Pro\OptProLauncher.exe"

"playnowradio"="C:\Users\-LUKE-\AppData\Local\playnowradio\playnowradio\1.3.4.1\playnowradio.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"Hercules DJ Series"="C:\Program Files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe /boot"

"Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide"

"AnyProtect Scanner"="C:\Program Files\AnyProtectEx\AnyProtect.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"buenosearch"="C:\Users\-LUKE-\AppData\Local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe"

"Optimizer Pro"="C:\Program Files\Optimizer Pro\OptProLauncher.exe"

"playnowradio"="C:\Users\-LUKE-\AppData\Local\playnowradio\playnowradio\1.3.4.1\playnowradio.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="C:\\PROGRA~1\\SupTab\\SEARCH~1.DLL"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="AdobeAAMUpdater-1.0"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\UpdaterStartupUtility.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"

"hkey"="HKCU"

"command"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\""

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [08/07/2014 21:06]

C:\Windows\tasks\APSnotifierPP1.job --a------ C:\Program Files\AnyProtectEx\AnyProtect.exe []

C:\Windows\tasks\APSnotifierPP2.job --a------ C:\Program Files\AnyProtectEx\AnyProtect.exe []

C:\Windows\tasks\APSnotifierPP3.job --a------ C:\Program Files\AnyProtectEx\AnyProtect.exe []

C:\Windows\tasks\FreeFileViewerUpdateChecker.job --a------ [Undetermined Task]

C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf5e455071bfa0.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [28/10/2013 17:09]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [28/10/2013 17:09]

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-114143902-2153543805-3046081360-1000Core.job --a------ C:\Users\owner\AppData\Local\Google\Update\GoogleUpdate.exe []

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-114143902-2153543805-3046081360-1000UA.job --a------ C:\Users\owner\AppData\Local\Google\Update\GoogleUpdate.exe []

C:\Windows\tasks\MySearchDial.job --a------ C:\Users\-LUKE-\AppData\Roaming\MYSEAR1\UPDATE1\UPDATE1.exe []

C:\Windows\tasks\RegClean Pro_DEFAULT.job --a------ C:\Program Files\RegClean Pro\RegCleanPro.exe [22/08/2013 18:36]

C:\Windows\tasks\RegClean Pro_UPDATES.job --a------ C:\Program Files\RegClean Pro\RegCleanPro.exe [22/08/2013 18:36]

C:\Windows\tasks\User_Feed_Synchronization-{44D07C0B-BFB6-482D-8043-004548F37FC4}.job --ah----- C:\Windows\system32\msfeedssync.exe [28/05/2014 17:29]

==== Other Scheduled Tasks ======================

"C:\Windows\system32\tasks\0" [c:\program files\internet explorer\iexplore.exe]

"C:\Windows\system32\tasks\4576" [wscript.exe C:\Users\-LUKE-\AppData\Local\Temp\launchie.vbs //B]

"C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\system32\tasks\Advanced System Protector" ["C:\Program Files\RegClean Pro\SystweakASP.exe"]

"C:\Windows\system32\tasks\APSnotifierPP1" [C:\Program Files\AnyProtectEx\AnyProtect.exe]

"C:\Windows\system32\tasks\APSnotifierPP2" [C:\Program Files\AnyProtectEx\AnyProtect.exe]

"C:\Windows\system32\tasks\APSnotifierPP3" [C:\Program Files\AnyProtectEx\AnyProtect.exe]

"C:\Windows\system32\tasks\Buenosearch" [C:\Users\-LUKE-\AppData\Local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe]

"C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

"C:\Windows\system32\tasks\FreeFileViewerUpdateChecker" [C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore1cf5e455071bfa0" [C:\Program Files\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskUserS-1-5-21-114143902-2153543805-3046081360-1000Core" [C:\Users\owner\AppData\Local\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskUserS-1-5-21-114143902-2153543805-3046081360-1000UA" [C:\Users\owner\AppData\Local\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\MySearchDial" [C:\Users\-LUKE-\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE]

"C:\Windows\system32\tasks\Optimizer Pro Schedule" ["C:\Program Files\Optimizer Pro\OptProLauncher.exe"]

"C:\Windows\system32\tasks\Play Now Radio" [C:\Users\-LUKE-\AppData\Local\playnowradio\playnowradio\1.3.4.1\playnowradio.exe]

"C:\Windows\system32\tasks\RegClean Pro" [C:\Program Files\RegClean Pro\RegCleanPro.exe]

"C:\Windows\system32\tasks\RegClean Pro_DEFAULT" [C:\Program Files\RegClean Pro\RegCleanPro.exe]

"C:\Windows\system32\tasks\RegClean Pro_UPDATES" [C:\Program Files\RegClean Pro\RegCleanPro.exe]

"C:\Windows\system32\tasks\TidyNetwork Update" [C:\Users\-LUKE-\AppData\Local\TidyNetwork.com\tidy2update.exe]

"C:\Windows\system32\tasks\Total Domination W1" [C:\Program Files\Google\Chrome\Application\chrome.exe]

"C:\Windows\system32\tasks\Total Domination W2" [C:\Program Files\Google\Chrome\Application\chrome.exe]

"C:\Windows\system32\tasks\User_Feed_Synchronization-{44D07C0B-BFB6-482D-8043-004548F37FC4}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\system32\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files\Apple Software Update\SoftwareUpdate.exe]

"C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}"="C:\Program Files\RelevantKnowledge\firefox" [10/07/2014 13:29]

==== Firefox Extensions ======================

==== Firefox Plugins ======================

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

bakijjialdiiboeaknfpmflphhmljfkd - No path found[]

iagcajndpnfncplednpbnkahadegklfa - C:\Users\-LUKE-\AppData\Local\speedial.crx[24/04/2014 11:52]

mkndcbhcgphcfkkddanakjiepeknbgle - C:\Program Files\RelevantKnowledge\rlcm.crx[10/04/2014 16:37]

Save Me - -LUKE-\AppData\Local\Chromatic Browser\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - -LUKE-\AppData\Local\Chromatic Browser\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - -LUKE-\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - -LUKE-\AppData\Local\Chromatic Browser\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - -LUKE-\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - -LUKE-\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - -LUKE-\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - -LUKE-\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Google Voice Search Hotword (Beta) - -LUKE-\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn

RelevantKnowledge - -LUKE-\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle

Google Wallet - -LUKE-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Save Me - -LUKE-\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - -LUKE-\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - -LUKE-\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - -LUKE-\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - -LUKE-\AppData\Local\Torch\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - -LUKE-\AppData\Local\Torch\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - -LUKE-\AppData\Local\Torch\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - -LUKE-\AppData\Local\Torch\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Administrator\AppData\Local\Torch\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Administrator\AppData\Local\Torch\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Administrator\AppData\Local\Torch\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Administrator\AppData\Local\Torch\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Google Docs - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Save Me - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

Google Search - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

SNT - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Show-Password - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\logekkkdbdidmmcgkonmmonclldogceg

Google Wallet - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

Save Me - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg

Save Me - Guest\AppData\Local\Torch\User Data\Default\Extensions\boemmnepglcoinjcdlfcpcbmhiecichi

SNT - Guest\AppData\Local\Torch\User Data\Default\Extensions\gocodaaboaaffamokoninjpcnliipdgj

VauDix - Guest\AppData\Local\Torch\User Data\Default\Extensions\kdnkkenodhmikkcaacgkelhjipchmcpn

YoutubeAdblocker - Guest\AppData\Local\Torch\User Data\Default\Extensions\lhbgbhhfnmedmdcpghjhdecidongnajg