hi Biscuithhd, this is what I collected after scanning
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-09-2014 01
Ran by Thai Nguyen (administrator) on THANNY-PC on 25-09-2014 11:49:09
Running from C:\Users\Thai Nguyen\Downloads
Loaded Profiles: Thai Nguyen & DefaultAppPool (Available profiles: Thai Nguyen & Guest & DefaultAppPool)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
() C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086\etmajyzoqm.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\005\cyycfhtzro32.exe
() C:\Users\Thai Nguyen\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
(COMPANYVERS_NAME) C:\Program Files\InboxAce_1g\bar\1.bin\1gbarsvc.exe
(Parallel Lines Development, LLC) C:\ProgramData\InternetUpdater\InternetUpdaterService.exe
() C:\Program Files\005\jxbalvtmyz32.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files\V-bates\guardsvc.exe
() C:\Windows\System32\nethtsrv.exe
() C:\Program Files\004\rqpbhevlkc32.exe
() C:\Windows\score.exe
() C:\Users\Thai Nguyen\AppData\Roaming\VOPackage\VOsrv.exe
(Radialpoint SafeCare Inc.) C:\Program Files\Telus\security advisor\5.5.12.650.1\Telus_ServicepointService.exe
() C:\Windows\System32\netupdsrv.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe
() C:\Program Files\V-bates\ExtensionUpdaterService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\003\xmkysecqun32.exe
(Yahoo! Inc.) C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Slimware Utilities, Inc.) C:\Program Files\FixCleaner\FixCleaner.exe
(HQuality3) C:\Program Files\HQuality-v3\1ae219f2-326d-461b-9f25-6adb3380f981.exe
(Uniblue Systems Ltd) C:\Program Files\Uniblue\SpeedUpMyPC\spmonitor.exe
(SlimWare Utilities, Inc.) C:\Program Files\DriverUpdate\DriverUpdate.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
() C:\Program Files\V-bates\notifier.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Creative Technology Ltd.) C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Updater) C:\ProgramData\Updater\updater.exe
(Telus) C:\Program Files\Telus\security advisor\5.5.12.650.1\TelusSecurityAdvisor.exe
() C:\Program Files\ShopperPro\JSDriver\1.37.0.199\jsdrv.exe
(Logitech Inc.) C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Logitech Inc.) C:\Program Files\Logitech\Vid HD\Vid.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
() C:\Program Files\Boost\BoostUpdater.exe
() C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp.exe
(Weather Notifications, LLC) C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe
(rateó) C:\Users\Thai Nguyen\AppData\Local\swbgkv.exe
() C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
() C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp.exe
(YTDownloader) C:\Program Files\YTDownloader\YTDownloader.exe
(Goobzo LTD) C:\Program Files\ShopperPro\ShopperPro.exe
(Goobzo) C:\Program Files\ShopperPro\Updater.exe
(Goobzo) C:\Program Files\YTDownloader\Updater.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
(WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
(Uniblue Systems Ltd) C:\Program Files\Uniblue\SpeedUpMyPC\spnotifier.exe
(Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe
(Apple Inc.) C:\Program Files\Safari\Safari.exe
(Apple Inc.) C:\Program Files\Safari\Apple Application Support\WebKit2WebProcess.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [ISBMgr.exe] => C:\Program Files\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM\...\Run: [Module Loader] => C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe [57344 2007-07-23] (Creative Technology Ltd.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [InboxAce Search Scope Monitor] => C:\Program Files\InboxAce_1g\bar\1.bin\1gSrchMn.exe [44784 2013-06-04] (MindSpark)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1013616 1999-12-31] (Realtek Semiconductor)
HKLM\...\Run: [Updater] => C:\ProgramData\Updater\Updater.exe [486264 2013-12-18] (Updater)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [TelusSecurityAdvisor] => C:\Program Files\Telus\security advisor\5.5.12.650.1\TelusSecurityAdvisor.exe [13836984 2012-11-02] (Telus)
HKLM\...\Run: [YTDownloader] => C:\Program Files\YTDownloader\YTDownloader.exe [1974120 2014-05-22] (YTDownloader)
HKLM\...\Run: [SPDriver] => C:\Program Files\ShopperPro\JSDriver\1.37.0.199\jsdrv.exe [3211776 2014-07-22] ()
HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM\...\Run: [BrowserSafeguard] => C:\Program Files\Browsersafeguard\BrowserSafeguard.exe [363008 2014-06-20] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\Run: [SystemMaintenanceUpdaterGL] => C:\Program Files\System Maintenance GL\System Maintenance Updater.exe [214800 2014-08-31] (Gross Mauntin)
HKLM\...\Run: [V-bates] => C:\Program Files\V-bates\notifier.exe [419152 2014-09-03] ()
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [Logitech Vid] => C:\Program Files\Logitech\Vid HD\Vid.exe [5915480 2010-10-29] (Logitech Inc.)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [cdloader] => C:\Users\Thai Nguyen\AppData\Roaming\mjusbsp\cdloader2.exe [50592 2012-02-01] (magicJack L.P.)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [Messenger (Yahoo!)] => C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [SpeedUpMyPC] => C:\Program Files\Uniblue\SpeedUpMyPC\launcher.exe [67960 2012-04-16] (Uniblue Systems Ltd)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [ConduitFloatingPlugin_cbjibcbpmbcabnfnohhgjjmkgkimajko] => "C:\Windows\system32\Rundll32.exe" "C:\Users\THAING~1\AppData\Local\Temp\CT3294791\plugins\TBVerifier.dll",RunConduitFloatingPlugin cbjibcbpmbcabnfnohhgjjmkgkimajko <===== ATTENTION
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [Updater] => C:\ProgramData\Updater\updater.exe [486264 2013-12-18] (Updater)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [YTDownloader] => C:\Program Files\YTDownloader\YTDownloader.exe [1974120 2014-05-22] (YTDownloader)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [SPDriver] => C:\Program Files\ShopperPro\JSDriver\1.37.0.199\jsdrv.exe [3211776 2014-07-22] ()
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [SystemMaintenanceUpdaterGL] => C:\Program Files\System Maintenance GL\System Maintenance Updater.exe [214800 2014-08-31] (Gross Mauntin)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Run: [swbgkv] => c:\users\thai nguyen\appdata\local\swbgkv.exe [2613248 2014-09-24] (rateó)
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-1045307804-3161103378-2353340640-1000\...\MountPoints2: F - F:\autorun.exe
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "C:\Windows\system32\config\systemprofile\AppData\Roaming\SearchProtect"
AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL => C:\Program Files\SupTab\SearchProtect32.dll [91248 2014-05-08] (Skytech Co., Ltd.)
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\Thai Nguyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BoostUpdater.lnk
ShortcutTarget: BoostUpdater.lnk -> C:\Program Files\Boost\BoostUpdater.exe ()
Startup: C:\Users\Thai Nguyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts App.lnk
ShortcutTarget: Severe Weather Alerts App.lnk -> C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp.exe ()
Startup: C:\Users\Thai Nguyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts.lnk
ShortcutTarget: Severe Weather Alerts.lnk -> C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe (Weather Notifications, LLC)
Startup: C:\Users\Thai Nguyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\swbgkv.lnk
ShortcutTarget: swbgkv.lnk -> C:\Users\Thai Nguyen\AppData\Local\swbgkv.exe (rateó)
HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dll
HKLM\...\AppCertDlls: [x86] -> c:\program files\settings manager\systemk\sysapcrt.dll [490000 2014-05-25] ()
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
SearchScopes: HKLM - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKCU - {13897551-F97A-303E-34C8-352A397F36F2} URL =
BHO: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll (Yahoo! Inc.)
BHO: HQuality-v3 -> {11111111-1111-1111-1111-110611171162} -> C:\Program Files\HQuality-v3\HQuality-v3-bho.dll (HQuality3)
BHO: V-bates -> {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} -> C:\Program Files\V-bates\Extension32.dll ()
BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Funmoods Helper Object -> {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} -> No File
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: DefaultTab Browser Helper -> {7F6AFBF1-E065-4627-A2FD-810366367D01} -> No File
BHO: savernett -> {81D4E514-6390-9DC5-77A6-CEF9CAE05B14} -> C:\ProgramData\savernett\n.dll ()
BHO: Boost -> {8DE6FC60-E023-4AD7-A3B7-591E1460E7F7} -> C:\Program Files\Boost\Boost.dll (Jigsaw)
BHO: Search Assistant BHO -> {9359da42-06fb-46f2-9e4a-05c05b98a5ef} -> C:\Program Files\InboxAce_1g\bar\1.bin\1gSrcAs.dll (MindSpark)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> No File
BHO: Shopper Pro -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> C:\ProgramData\ShopperPro\ShopperPro.dll (Goobzo Ltd.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: SumaartCompare -> {B7D36C62-14DF-BC08-5C41-4F75EB25471C} -> C:\ProgramData\SumaartCompare\5B1XWfAKq.dll ()
BHO: ApPtoU -> {BB643CED-764C-4CB7-8FA2-DDEF39DC346B} -> C:\ProgramData\ApPtoU\re.dll ()
BHO: Toolbar BHO -> {d5a1d22b-9e17-454f-8ecd-83c578fb3983} -> C:\Program Files\InboxAce_1g\bar\1.bin\1gbar.dll (MindSpark)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: AllDaySavings -> {fbdff406-2c4c-5d35-8469-34bb67ea3353} -> C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086\kzhxnitccw.dll ()
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll (Yahoo! Inc.)
Toolbar: HKLM - Funmoods Toolbar - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - No File
Toolbar: HKLM - InboxAce - {3775afd7-5921-4571-968f-85a631203d1c} - C:\Program Files\InboxAce_1g\bar\1.bin\1gbar.dll (MindSpark)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {3BBD3C14-4C16-4989-8366-95BC9179779D} - No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: 127.0.0.1 d3oxij66pru1i3.cloudfront.net
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 75.153.176.1
FireFox:
========
FF ProfilePath: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188
FF DefaultSearchEngine: v9
FF SearchEngineOrder.1: default-search.net
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.v9.com/?type=hppp&ts=1411157354&from=adks&uid=WDCXWD5000BEVT-26A0RT0_WD-WX91A10A2715A2715&i=psd&t=3491d8626
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @InboxAce_1g.com/Plugin -> C:\Program Files\InboxAce_1g\bar\1.bin\NP1gStub.dll (MindSpark)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @radialpoint.com/SPA_8,version=1 -> C:\Program Files\Telus\security advisor\5.5.12.650.1\nprpspa.dll (Telus)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF user.js: detected! => C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\user.js
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\ask-web-search.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\default-search.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\my-web-search.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\softonic.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\Speedial.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\vgrabber-v1-customized-web-search.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\WSE Rocket.xml
FF SearchPlugin: C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\searchplugins\yahoo-sd.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\default-search.xml
FF Extension: HQuality-v3 - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-09-24]
FF Extension: InboxAce - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\1gffxtbr@InboxAce_1g.com [2013-06-04]
FF Extension: Cinema-Plus-2.3c - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-09-01]
FF Extension: AApptoU - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-08-05]
FF Extension: ssavernet - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-08-23]
FF Extension: Fast Start - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-07-22]
FF Extension: softonic.com - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-01-26]
FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2014-09-08]
FF Extension: toupbuyer - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-07-22]
FF Extension: SomaRtCCoMPaaree - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-09-18]
FF Extension: Settings Manager - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{23ED0228-2D3B-215B-F198-289D36BD9A8A} [2014-06-17]
FF Extension: appbario12 - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{465fcfbb-47a4-4866-a5d5-d12f9a77da00} [2013-12-12]
FF Extension: Yahoo! Toolbar - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014-06-09]
FF Extension: WhiteSmoke New - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{739df940-c5ee-4bab-9d7e-270894ae687a} [2013-11-19]
FF Extension: Shopper-Pro - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} [2014-06-15]
FF Extension: Vgrabber v1 - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{7f7f82f1-7c95-47cd-814f-950b56d58fc3} [2013-02-07]
FF Extension: YouTube™ Anywhere Player - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{c9d31470-81c6-4e3e-9a37-46eb9237ed3a} [2014-08-29]
FF Extension: Rocket New Tab - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{ecaa9181-d92a-47b9-8e14-bef9680f204b} [2014-07-22]
FF Extension: Speedial - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{fa95f577-07cb-4470-ac90-e843f5f83c52} [2014-05-27]
FF Extension: Boost - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-05-15]
FF Extension: Cleanest Addon Manager - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2014-08-27]
FF Extension: Add Google Search To New Tab Page - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\
[email protected] [2012-12-02]
FF Extension: Speed Search - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{0248628d-e285-40dc-96cc-d6ffd303ab25}.xpi [2014-08-19]
FF Extension: YouTube High Definition - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2014-04-27]
FF Extension: ImTranslator - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2012-12-02]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-18]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-18]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [1gffxtbr@InboxAce_1g.com] - C:\Program Files\InboxAce_1g\bar\1.bin
FF Extension: InboxAce - C:\Program Files\InboxAce_1g\bar\1.bin [2013-06-04]
FF HKLM\...\Firefox\Extensions: [
[email protected]] - C:\Program Files\Better-Surf\ff
FF HKLM\...\Firefox\Extensions: [
[email protected]] - C:\Program Files\MediaViewV1\MediaViewV1alpha2498\ff
FF Extension: Media View - C:\Program Files\MediaViewV1\MediaViewV1alpha2498\ff [2014-02-28]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF Extension: V-bates - C:\Program Files\V-bates\Firefox [2014-09-08]
FF HKLM\...\Firefox\Extensions: [
[email protected]] - C:\Users\Thai Nguyen\AppData\Roaming\Mozilla\Firefox\Profiles\x22wc7yg.default-1354396459188\extensions\
[email protected]
Chrome:
=======
CHR CustomProfile: C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default\Extensions\bminhpopbpjkkcjhdlgpclmepcngcenm [2014-08-01]
CHR Extension: (No Name) - C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbjibcbpmbcabnfnohhgjjmkgkimajko [2014-08-01]
CHR Extension: (Add to Wunderlist) - C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmnddeddcgdllibmaodanoonljfdmooc [2014-09-10]
CHR Extension: (videos MediaPlay-Air) - C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default\Extensions\iklgpchfbohgmghgfagediakopecfmbm [2014-09-01]
CHR Extension: (No Name) - C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jffcmkkfbampimhpimhofhhkanhflfce [2014-09-08]
CHR Extension: (HQuality-v3) - C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb [2014-09-24]
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\THAING~1\AppData\Local\funmoods.crx [2012-09-25]
CHR HKLM\...\Chrome\Extension: [bminhpopbpjkkcjhdlgpclmepcngcenm] - C:\Program Files\Telus\security advisor\5.5.12.650.1\ChromeExtension.crx [2014-06-03]
CHR HKLM\...\Chrome\Extension: [cbjibcbpmbcabnfnohhgjjmkgkimajko] - C:\Users\Thai Nguyen\AppData\Local\CRE\cbjibcbpmbcabnfnohhgjjmkgkimajko.crx [2013-11-26]
CHR HKLM\...\Chrome\Extension: [cgiaikfpllchefojlnehlmpekeogihnm] - C:\Users\Thai Nguyen\AppData\Local\CRE\cgiaikfpllchefojlnehlmpekeogihnm.crx [2013-11-26]
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\THAING~1\AppData\Local\funmoods-speeddial.crx [2012-09-25]
CHR HKLM\...\Chrome\Extension: [dedmngkbaffkenlfdcbganndoghblmap] - C:\Program Files\BetterSurf\ch\Chrome.crx [2012-09-25]
CHR HKLM\...\Chrome\Extension: [ggamifejnddpoocdmadhjdbgaijnphdi] - C:\Users\Thai Nguyen\AppData\Local\CRE\ggamifejnddpoocdmadhjdbgaijnphdi.crx [2012-09-25]
CHR HKLM\...\Chrome\Extension: [gpbmlaiamdndgldnihpofpadjnledloo] - C:\Program Files\MediaViewV1\MediaViewV1alpha2498\ch\MediaViewV1alpha2498.crx [2012-09-25]
CHR HKLM\...\Chrome\Extension: [jnidgldcbakaidffpjinopjbmobecifb] - C:\Users\Thai Nguyen\AppData\Local\CRE\jnidgldcbakaidffpjinopjbmobecifb.crx [2012-09-25]
CHR HKLM\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Thai Nguyen\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2012-09-25]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
CHR HKLM\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Thai Nguyen\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2013-05-14]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ChromeExt\ab.crx [2013-05-14]
CHR HKLM\...\Chrome\Extension: [poheodfamflhhhdcmjfeggbgigeefaco] - C:\Program Files\Better-Surf\ch\Chrome.crx [2013-05-14]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\THAING~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-09-09]
CHR HKCU\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\THAING~1\AppData\Local\funmoods.crx [2012-09-25]
CHR HKCU\...\Chrome\Extension: [cbjibcbpmbcabnfnohhgjjmkgkimajko] - C:\Users\Thai Nguyen\AppData\Local\CRE\cbjibcbpmbcabnfnohhgjjmkgkimajko.crx [2013-11-26]
CHR HKCU\...\Chrome\Extension: [cgiaikfpllchefojlnehlmpekeogihnm] - C:\Users\Thai Nguyen\AppData\Local\CRE\cgiaikfpllchefojlnehlmpekeogihnm.crx [2013-11-26]
CHR HKCU\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\THAING~1\AppData\Local\funmoods-speeddial.crx [2012-09-25]
CHR HKCU\...\Chrome\Extension: [ggamifejnddpoocdmadhjdbgaijnphdi] - C:\Users\Thai Nguyen\AppData\Local\CRE\ggamifejnddpoocdmadhjdbgaijnphdi.crx [2012-09-25]
CHR HKCU\...\Chrome\Extension: [jnidgldcbakaidffpjinopjbmobecifb] - C:\Users\Thai Nguyen\AppData\Local\CRE\jnidgldcbakaidffpjinopjbmobecifb.crx [2012-09-25]
CHR HKCU\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Thai Nguyen\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2012-09-25]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 64af91bf; c:\ProgramData\Fast And Safe\FastAndSafeSvc.dll [186192 2014-07-22] () [File not signed]
R2 892cc6a3; c:\ProgramData\Performance Optimizer\PerformanceOptimizerSvc.dll [186192 2014-09-04] () [File not signed]
R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AllDaySavingsService; C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086\etmajyzoqm.exe [150528 2014-07-31] () [File not signed]
S2 CouponDownloaderService; C:\Program Files\B9CBA23D-4CBF-4122-9CD4-34A83873247C\pbjpxjxixm.exe [151040 2014-07-17] () [File not signed]
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-06-25] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-06-25] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-11] (Creative Technology Ltd) [File not signed]
R2 cyycfhtzro32; C:\Program Files\005\cyycfhtzro32.exe [543232 2014-07-23] () [File not signed]
R2 DefaultTabUpdate; C:\Users\Thai Nguyen\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2013-05-29] () [File not signed]
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-24] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-24] (globalUpdate) [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)
R2 InboxAce_1gService; C:\Program Files\InboxAce_1g\bar\1.bin\1gbarsvc.exe [42504 2013-06-04] (COMPANYVERS_NAME)
R2 InternetUpdater; C:\ProgramData\InternetUpdater\InternetUpdaterService.exe [45568 2014-01-14] (Parallel Lines Development, LLC) [File not signed]
R2 jxbalvtmyz32; C:\Program Files\005\jxbalvtmyz32.exe [543232 2014-08-01] () [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2009-03-17] (Hewlett-Packard Company) [File not signed]
R2 Mext Guard; C:\Program Files\V-bates\guardsvc.exe [131920 2014-09-03] ()
R2 NetHttpService; C:\Windows\system32\nethtsrv.exe [179200 2014-07-29] () [File not signed]
R2 rqpbhevlkc32; C:\Program Files\004\rqpbhevlkc32.exe [543232 2014-05-27] () [File not signed]
R2 scores; C:\Windows\score.exe [4823040 2014-08-29] () [File not signed]
R2 servervo; C:\Users\Thai Nguyen\AppData\Roaming\VOPackage\VOsrv.exe [72192 2014-09-01] () [File not signed]
R2 ServicepointService8; C:\Program Files\Telus\security advisor\5.5.12.650.1\Telus_ServicepointService.exe [12575752 2012-11-02] (Radialpoint SafeCare Inc.)
R2 ServiceUpdater; C:\Windows\system32\netupdsrv.exe [159744 2014-07-29] () [File not signed]
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3289208 2013-01-31] (Skype Technologies S.A.)
S2 SMUpd; C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe [1813352 2014-05-26] (Search Module Ltd.)
R2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [1812992 2014-07-22] (ShopperPro) [File not signed]
S2 SupraSavingsService; C:\Program Files\0012C5CB-3192-475B-B0A8-5F323C30CEDE\SupraSavingsService.exe [151040 2014-06-25] () [File not signed]
R2 V-bates Updater; C:\Program Files\V-bates\ExtensionUpdaterService.exe [215376 2014-09-03] ()
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [204648 2009-12-01] (Sony Corporation)
S3 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [513392 2009-11-30] (Sony Corporation)
R2 xmkysecqun32; C:\Program Files\003\xmkysecqun32.exe [541696 2014-05-25] () [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed]
R1 archlp; C:\Windows\System32\drivers\archlp.sys [127744 2009-02-19] ()
R1 F06DEFF2-5B9C-490D-910F-35D3A91196222; C:\Program Files\Settings Manager\systemk\systemkmgrc1.cfg [31120 2014-05-25] (Aztec Media Inc)
S3 ksaud; C:\Windows\System32\drivers\ksaud.sys [1255168 2010-07-29] (Creative Technology Ltd.)
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25824 2010-05-07] ()
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [31744 2014-07-31] (NetFilterSDK.com) [File not signed]
R1 nethfdrv; C:\Windows\system32\drivers\nethfdrv.sys [40528 2014-07-29] (nethfdrv)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7517696 2011-08-03] (Intel Corporation)
R2 rimspci; C:\Windows\System32\DRIVERS\rimssne86.sys [73216 2010-01-15] (REDC)
R2 risdsnpe; C:\Windows\System32\DRIVERS\risdsne86.sys [46592 2009-12-09] (REDC)
R2 sbmntr; C:\Program Files\YTDownloader\sbmntr.sys [50024 2014-05-22] (YTDownloader)
R3 SMUpdd; C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [31592 2014-05-26] ()
R3 SPBIUpdd; C:\Program Files\Common Files\ShopperPro\spbiw.sys [25600 2014-07-22] () [File not signed]
R2 SPDRIVER_1.37.0.199; C:\Program Files\ShopperPro\JSDriver\1.37.0.199\jsdrv.sys [41320 2014-07-22] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-09-25] ()
S3 UHSfiltv; C:\Windows\System32\drivers\UHSfiltv.sys [18944 2012-09-28] (Creative Technology Ltd.) [File not signed]
R1 {4bbc3b2f-4023-460e-8404-cfddb6e4477d}w; C:\Windows\System32\drivers\{4bbc3b2f-4023-460e-8404-cfddb6e4477d}w.sys [52912 2014-05-22] (StdLib)
R1 {9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw; C:\Windows\System32\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw.sys [52920 2014-05-24] (StdLib)
S1 netfilter2; No ImagePath
S3 SPPD; No ImagePath
S3 Synth3dVsc; No ImagePath
S3 tsusbhub; No ImagePath
S3 VGPU; No ImagePath
U5 Websteroids; C:\ProgramData\Websteroids\up\2.6.80\Websteroids.exe [42872 2014-05-27] (Creative Island Media, LLC)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-25 11:49 - 2014-09-25 11:55 - 00042505 _____ () C:\Users\Thai Nguyen\Downloads\FRST.txt
2014-09-25 11:40 - 2014-09-25 11:49 - 00000000 ____D () C:\FRST
2014-09-25 11:38 - 2014-09-25 11:38 - 01100800 _____ (Farbar) C:\Users\Thai Nguyen\Downloads\FRST.exe
2014-09-25 09:32 - 2014-09-25 09:32 - 00000687 _____ () C:\awh189E.tmp
2014-09-25 09:06 - 2014-09-25 09:08 - 00002134 _____ () C:\Users\Thai Nguyen\Desktop\JOINNING INSTRUCTION.txt
2014-09-25 08:10 - 2014-09-25 08:10 - 00794906 _____ () C:\Windows\unins000.exe
2014-09-25 08:10 - 2014-09-25 08:10 - 00004158 _____ () C:\Windows\unins000.dat
2014-09-25 08:10 - 2014-09-25 08:10 - 00000910 _____ () C:\Users\Public\Desktop\File Splitter & Joiner.lnk
2014-09-25 08:10 - 2014-09-25 08:10 - 00000000 ____D () C:\Windows\system32\FFSJ
2014-09-25 08:09 - 2014-09-25 08:10 - 01116646 _____ (Le Minh Hoang ) C:\Users\Thai Nguyen\Downloads\FSJSetup.exe
2014-09-25 07:50 - 2014-09-25 08:13 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\FFSJ
2014-09-25 06:53 - 2014-09-25 07:19 - 00000000 ____D () C:\Users\Thai Nguyen\Desktop\A. Tin KARAOKE LIST
2014-09-25 06:44 - 2014-09-25 06:44 - 00000687 _____ () C:\awh2E6F.tmp
2014-09-24 18:08 - 2014-09-25 10:26 - 00001360 _____ () C:\Windows\Tasks\DZBZP.job
2014-09-24 18:08 - 2014-09-25 09:28 - 00002566 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-4.job
2014-09-24 18:08 - 2014-09-25 09:28 - 00001824 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-1.job
2014-09-24 18:08 - 2014-09-25 09:28 - 00001686 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5_user.job
2014-09-24 18:08 - 2014-09-25 09:28 - 00001666 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5.job
2014-09-24 18:08 - 2014-09-25 09:28 - 00001450 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-2.job
2014-09-24 18:08 - 2014-09-25 09:28 - 00001430 _____ () C:\Windows\Tasks\1ae219f2-326d-461b-9f25-6adb3380f981.job
2014-09-24 18:08 - 2014-09-24 18:08 - 01506200 _____ (HQuality3) C:\Users\Thai Nguyen\AppData\Roaming\DZBZP.exe
2014-09-24 18:07 - 2014-09-25 11:27 - 00001358 _____ () C:\Windows\Tasks\KGMD.job
2014-09-24 18:07 - 2014-09-25 09:28 - 00004140 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-11.job
2014-09-24 18:07 - 2014-09-25 09:28 - 00003450 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-3.job
2014-09-24 18:07 - 2014-09-25 09:28 - 00000608 _____ () C:\Windows\Tasks\8e39f416-5204-4767-9616-9bf881585f4c.job
2014-09-24 18:07 - 2014-09-24 18:09 - 00000000 ____D () C:\Program Files\HQuality-v3
2014-09-24 18:07 - 2014-09-24 18:07 - 01994136 _____ (HQuality3) C:\Users\Thai Nguyen\AppData\Roaming\KGMD.exe
2014-09-24 17:05 - 2014-09-25 11:55 - 01094964 _____ () C:\Users\Thai Nguyen\AppData\Local\swbgkv.gss
2014-09-24 17:05 - 2014-09-25 09:25 - 01222656 _____ () C:\Users\Thai Nguyen\AppData\Local\swbgkv.gdb
2014-09-24 17:05 - 2014-09-24 17:05 - 02613248 _____ (rateó) C:\Users\Thai Nguyen\AppData\Local\swbgkv.exe
2014-09-24 17:04 - 2014-09-24 17:04 - 00000687 _____ () C:\awh43B3.tmp
2014-09-20 10:27 - 2014-09-20 10:27 - 00000687 _____ () C:\awhA42A.tmp
2014-09-20 09:56 - 2014-09-20 09:56 - 00000687 _____ () C:\awh5D7A.tmp
2014-09-19 15:12 - 2014-09-19 15:12 - 00000687 _____ () C:\awh449D.tmp
2014-09-19 12:54 - 2014-09-19 12:54 - 00000687 _____ () C:\awh2EFB.tmp
2014-09-19 09:32 - 2014-09-19 09:32 - 00000687 _____ () C:\awh2184.tmp
2014-09-19 08:52 - 2014-09-19 08:52 - 00000687 _____ () C:\awhA2D3.tmp
2014-09-19 08:43 - 2014-09-19 08:43 - 00000687 _____ () C:\awh5C61.tmp
2014-09-19 07:43 - 2014-09-19 07:43 - 00000687 _____ () C:\awhE7DE.tmp
2014-09-18 20:54 - 2014-09-18 20:54 - 00000687 _____ () C:\awh4691.tmp
2014-09-18 20:11 - 2014-06-26 18:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-18 20:07 - 2014-08-01 04:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-18 19:59 - 2014-06-23 19:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-18 19:52 - 2014-09-04 18:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-18 19:52 - 2014-09-04 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-18 19:38 - 2014-07-08 18:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-09-18 19:38 - 2014-07-08 18:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-09-18 19:38 - 2014-07-08 18:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-09-18 19:38 - 2014-07-08 18:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-09-18 19:38 - 2014-07-08 18:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-09-18 19:38 - 2014-07-08 15:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-09-18 19:03 - 2014-09-24 17:29 - 00001104 _____ () C:\Users\Thai Nguyen\Desktop\Continue Live Installation.lnk
2014-09-18 18:38 - 2014-09-18 18:38 - 00000687 _____ () C:\awh6363.tmp
2014-09-18 17:46 - 2014-09-18 17:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-18 16:33 - 2014-09-25 06:40 - 00001245 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-18 16:14 - 2014-09-18 16:14 - 00612006 _____ (ClickMeIn Limited) C:\Users\Thai Nguyen\AppData\Local\nsj1BFD.tmp
2014-09-18 14:23 - 2014-09-18 14:23 - 00000687 _____ () C:\awhC580.tmp
2014-09-18 14:08 - 2014-09-18 14:07 - 00612006 _____ (ClickMeIn Limited) C:\Users\Thai Nguyen\AppData\Local\nsd27ED.tmp
2014-09-18 14:07 - 2014-09-18 14:07 - 00000000 ____D () C:\ProgramData\Registry Helper
2014-09-18 13:38 - 2014-09-18 13:38 - 00000687 _____ () C:\awh4EAB.tmp
2014-09-18 13:17 - 2014-09-18 13:17 - 00000687 _____ () C:\awh9F2B.tmp
2014-09-10 22:44 - 2014-08-19 10:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-10 22:44 - 2014-08-18 15:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 22:44 - 2014-08-18 15:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 22:44 - 2014-08-18 14:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 22:44 - 2014-08-18 14:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-10 22:44 - 2014-08-18 14:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 22:44 - 2014-08-18 14:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-10 22:44 - 2014-08-18 14:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-10 22:44 - 2014-08-18 14:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-10 22:44 - 2014-08-18 14:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 22:44 - 2014-08-18 14:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 22:44 - 2014-08-18 14:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-10 22:44 - 2014-08-18 14:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 22:44 - 2014-08-18 14:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 22:44 - 2014-08-18 14:36 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-10 22:44 - 2014-08-18 14:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-10 22:44 - 2014-08-18 14:30 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-10 22:44 - 2014-08-18 14:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 22:44 - 2014-08-18 14:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-10 22:44 - 2014-08-18 14:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-10 22:44 - 2014-08-18 14:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 22:44 - 2014-08-18 14:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 22:44 - 2014-08-18 14:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 22:44 - 2014-08-18 14:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 22:44 - 2014-08-18 14:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 22:44 - 2014-08-18 14:08 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-10 22:44 - 2014-08-18 14:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-10 22:44 - 2014-08-18 13:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 22:44 - 2014-08-18 13:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 22:44 - 2014-08-18 13:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-10 18:46 - 2014-07-06 18:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 18:46 - 2014-07-06 18:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 18:40 - 2014-09-10 18:41 - 00000000 ____D () C:\ProgramData\SumaartCompare
2014-09-10 18:20 - 2014-09-10 18:20 - 00000000 ____D () C:\ProgramData\ShoppingDealFactory
2014-09-10 18:06 - 2014-09-10 18:06 - 00000687 _____ () C:\awh10F0.tmp
2014-09-08 12:29 - 2014-09-25 11:29 - 00000294 _____ () C:\Windows\Tasks\FF Watcher {436F0309-4DDE-4A5E-8D19-0309F34E08D1}.job
2014-09-08 08:12 - 2014-09-08 08:12 - 00000000 ____D () C:\ProgramData\UltraCoupon
2014-09-08 07:57 - 2014-09-08 07:57 - 00000687 _____ () C:\awh99FD.tmp
2014-09-04 12:25 - 2014-09-04 12:25 - 00000687 _____ () C:\awhEFF9.tmp
2014-09-04 12:08 - 2014-09-04 12:08 - 00000000 ____D () C:\ProgramData\Performance Optimizer
2014-09-03 07:37 - 2014-09-03 07:37 - 00000687 _____ () C:\awhE407.tmp
2014-09-02 15:15 - 2014-09-02 15:15 - 00000687 _____ () C:\awh1FA0.tmp
2014-09-01 17:37 - 2014-09-02 15:10 - 00000000 ____D () C:\Program Files\Ad Muncher
2014-09-01 17:13 - 2014-09-01 17:13 - 00000687 _____ () C:\awh4633.tmp
2014-09-01 17:01 - 2014-09-01 17:48 - 00000000 ____D () C:\ProgramData\Ad Muncher
2014-09-01 16:24 - 2014-09-01 16:24 - 00000687 _____ () C:\awh44BD.tmp
2014-09-01 16:21 - 2014-09-25 09:33 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-09-01 16:21 - 2014-09-01 16:21 - 00000000 ____D () C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086
2014-09-01 16:20 - 2014-09-01 16:21 - 00000000 ____D () C:\Program Files\2B6A3384-29F8-4469-8585-001604CFE056
2014-09-01 16:16 - 2014-09-01 16:16 - 00000687 _____ () C:\awh8D7F.tmp
2014-09-01 14:05 - 2014-09-01 14:05 - 00000687 _____ () C:\awh7BE3.tmp
2014-09-01 13:13 - 2014-09-01 13:13 - 00000687 _____ () C:\awh6863.tmp
2014-09-01 11:48 - 2014-09-01 11:48 - 00000687 _____ () C:\awh1B7B.tmp
2014-09-01 11:31 - 2014-09-01 11:31 - 00301608 _____ (VuuPC Limited) C:\Users\Thai Nguyen\AppData\Local\nsg65C6.tmp
2014-09-01 11:21 - 2014-09-01 11:21 - 00000687 _____ () C:\awh3B89.tmp
2014-09-01 10:56 - 2014-09-25 06:41 - 00000000 ___HD () C:\Users\Public\Temp
2014-09-01 10:53 - 2014-09-01 10:54 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\VOPackage
2014-09-01 10:53 - 2014-09-01 10:54 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\Activeris
2014-09-01 10:53 - 2014-08-29 04:43 - 04823040 _____ () C:\Windows\score.exe
2014-09-01 10:52 - 2014-09-01 10:52 - 01261056 _____ () C:\Users\Thai Nguyen\Downloads\New_Player.exe
2014-09-01 09:51 - 2014-09-01 09:51 - 00000687 _____ () C:\awhD0B6.tmp
2014-09-01 09:11 - 2014-09-01 09:11 - 00000687 _____ () C:\awhC7E0.tmp
2014-09-01 08:54 - 2014-09-01 08:54 - 00000687 _____ () C:\awhDB60.tmp
2014-09-01 01:18 - 2014-09-01 01:18 - 00002086 _____ () C:\Users\Thai Nguyen\AppData\Roaming\DZBZP
2014-09-01 01:18 - 2014-09-01 01:18 - 00001248 _____ () C:\Users\Thai Nguyen\AppData\Roaming\KGMD
2014-08-31 09:32 - 2014-08-31 09:32 - 01458400 _____ () C:\Users\Thai Nguyen\Downloads\Setup (2).exe
2014-08-31 09:19 - 2014-08-31 09:19 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\System Maintenance GL
2014-08-31 09:19 - 2014-08-31 09:19 - 00000000 ____D () C:\ProgramData\System Maintenance GL
2014-08-31 09:19 - 2014-08-31 09:19 - 00000000 ____D () C:\Program Files\System Maintenance GL
2014-08-31 09:17 - 2014-08-31 09:16 - 01932048 _____ (Gross Mauntin) C:\Users\Thai Nguyen\Downloads\adobe_flash.exe
2014-08-31 09:16 - 2014-08-31 09:16 - 00781048 _____ ( ) C:\Users\Thai Nguyen\Downloads\adobe_flash_setup.exe
2014-08-31 09:08 - 2014-08-31 09:08 - 00000687 _____ () C:\awh143B.tmp
2014-08-31 08:35 - 2014-08-31 08:36 - 00000000 ____D () C:\Users\Thai Nguyen\Desktop\show 23-08-2014
2014-08-31 08:12 - 2014-08-31 08:12 - 00000687 _____ () C:\awhAF8.tmp
2014-08-30 08:17 - 2014-08-30 08:17 - 00000687 _____ () C:\awh20D8.tmp
2014-08-29 18:22 - 2014-08-29 18:22 - 00000687 _____ () C:\awh85A3.tmp
2014-08-28 21:19 - 2014-08-28 21:19 - 00000687 _____ () C:\awh7BD.tmp
2014-08-28 12:14 - 2014-08-22 18:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 12:14 - 2014-08-22 17:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-28 11:43 - 2014-08-28 11:43 - 00000687 _____ () C:\awh316B.tmp
2014-08-27 09:23 - 2014-08-27 09:23 - 00000687 _____ () C:\awh92BD.tmp
2014-08-26 09:20 - 2014-08-26 09:20 - 00000687 _____ () C:\awh7AD9.tmp
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-25 11:55 - 2014-09-25 11:49 - 00042505 _____ () C:\Users\Thai Nguyen\Downloads\FRST.txt
2014-09-25 11:55 - 2014-09-24 17:05 - 01094964 _____ () C:\Users\Thai Nguyen\AppData\Local\swbgkv.gss
2014-09-25 11:49 - 2014-09-25 11:40 - 00000000 ____D () C:\FRST
2014-09-25 11:40 - 2012-07-08 00:05 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-25 11:38 - 2014-09-25 11:38 - 01100800 _____ (Farbar) C:\Users\Thai Nguyen\Downloads\FRST.exe
2014-09-25 11:34 - 2012-07-08 00:05 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-25 11:29 - 2014-09-08 12:29 - 00000294 _____ () C:\Windows\Tasks\FF Watcher {436F0309-4DDE-4A5E-8D19-0309F34E08D1}.job
2014-09-25 11:27 - 2014-09-24 18:07 - 00001358 _____ () C:\Windows\Tasks\KGMD.job
2014-09-25 11:08 - 2012-07-07 23:37 - 01791204 _____ () C:\Windows\WindowsUpdate.log
2014-09-25 10:58 - 2014-07-22 14:58 - 00000310 _____ () C:\Windows\Tasks\Rocket Updater.job
2014-09-25 10:26 - 2014-09-24 18:08 - 00001360 _____ () C:\Windows\Tasks\DZBZP.job
2014-09-25 10:23 - 2014-03-10 21:12 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\vlc
2014-09-25 10:23 - 2013-12-01 08:15 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\FixCleaner
2014-09-25 10:23 - 2012-07-22 12:55 - 00000000 ____D () C:\Windows\Minidump
2014-09-25 09:41 - 2014-08-13 21:36 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts
2014-09-25 09:40 - 2014-08-13 21:40 - 00004494 _____ () C:\Windows\Tasks\738fae31-4f84-4d97-b506-625ca6742dd5-11.job
2014-09-25 09:39 - 2014-08-13 21:39 - 00003812 _____ () C:\Windows\Tasks\738fae31-4f84-4d97-b506-625ca6742dd5-3.job
2014-09-25 09:37 - 2013-12-01 06:52 - 00000406 _____ () C:\Windows\Tasks\DriverUpdate Startup.job
2014-09-25 09:36 - 2013-12-01 08:15 - 00000390 _____ () C:\Windows\Tasks\FixCleaner Startup.job
2014-09-25 09:36 - 2013-08-25 07:27 - 00013464 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-09-25 09:36 - 2013-05-29 10:55 - 00000394 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-09-25 09:36 - 2009-07-13 21:34 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-25 09:36 - 2009-07-13 21:34 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-25 09:33 - 2014-09-01 16:21 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-09-25 09:32 - 2014-09-25 09:32 - 00000687 _____ () C:\awh189E.tmp
2014-09-25 09:29 - 2013-09-09 09:26 - 00000000 ___RD () C:\Users\Thai Nguyen\Google Drive
2014-09-25 09:28 - 2014-09-24 18:08 - 00002566 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-4.job
2014-09-25 09:28 - 2014-09-24 18:08 - 00001824 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-1.job
2014-09-25 09:28 - 2014-09-24 18:08 - 00001686 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5_user.job
2014-09-25 09:28 - 2014-09-24 18:08 - 00001666 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5.job
2014-09-25 09:28 - 2014-09-24 18:08 - 00001450 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-2.job
2014-09-25 09:28 - 2014-09-24 18:08 - 00001430 _____ () C:\Windows\Tasks\1ae219f2-326d-461b-9f25-6adb3380f981.job
2014-09-25 09:28 - 2014-09-24 18:07 - 00004140 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-11.job
2014-09-25 09:28 - 2014-09-24 18:07 - 00003450 _____ () C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-3.job
2014-09-25 09:28 - 2014-09-24 18:07 - 00000608 _____ () C:\Windows\Tasks\8e39f416-5204-4767-9616-9bf881585f4c.job
2014-09-25 09:28 - 2014-08-13 21:39 - 00000922 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-25 09:28 - 2012-09-25 09:33 - 00000336 _____ () C:\Windows\Tasks\SpeedUpMyPC.job
2014-09-25 09:28 - 2012-07-08 00:05 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-25 09:27 - 2012-11-10 17:29 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-09-25 09:27 - 2009-07-13 21:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-25 09:25 - 2014-09-24 17:05 - 01222656 _____ () C:\Users\Thai Nguyen\AppData\Local\swbgkv.gdb
2014-09-25 09:08 - 2014-09-25 09:06 - 00002134 _____ () C:\Users\Thai Nguyen\Desktop\JOINNING INSTRUCTION.txt
2014-09-25 08:13 - 2014-09-25 07:50 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\FFSJ
2014-09-25 08:10 - 2014-09-25 08:10 - 00794906 _____ () C:\Windows\unins000.exe
2014-09-25 08:10 - 2014-09-25 08:10 - 00004158 _____ () C:\Windows\unins000.dat
2014-09-25 08:10 - 2014-09-25 08:10 - 00000910 _____ () C:\Users\Public\Desktop\File Splitter & Joiner.lnk
2014-09-25 08:10 - 2014-09-25 08:10 - 00000000 ____D () C:\Windows\system32\FFSJ
2014-09-25 08:10 - 2014-09-25 08:09 - 01116646 _____ (Le Minh Hoang ) C:\Users\Thai Nguyen\Downloads\FSJSetup.exe
2014-09-25 07:19 - 2014-09-25 06:53 - 00000000 ____D () C:\Users\Thai Nguyen\Desktop\A. Tin KARAOKE LIST
2014-09-25 06:44 - 2014-09-25 06:44 - 00000687 _____ () C:\awh2E6F.tmp
2014-09-25 06:41 - 2014-09-01 10:56 - 00000000 ___HD () C:\Users\Public\Temp
2014-09-25 06:40 - 2014-09-18 16:33 - 00001245 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-25 06:40 - 2014-08-01 22:04 - 00001257 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-25 06:40 - 2012-07-07 23:43 - 00001651 _____ () C:\Users\Thai Nguyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-25 06:39 - 2014-08-13 21:39 - 00000926 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-24 18:09 - 2014-09-24 18:07 - 00000000 ____D () C:\Program Files\HQuality-v3
2014-09-24 18:08 - 2014-09-24 18:08 - 01506200 _____ (HQuality3) C:\Users\Thai Nguyen\AppData\Roaming\DZBZP.exe
2014-09-24 18:07 - 2014-09-24 18:07 - 01994136 _____ (HQuality3) C:\Users\Thai Nguyen\AppData\Roaming\KGMD.exe
2014-09-24 18:06 - 2013-02-07 13:15 - 00000537 _____ () C:\END
2014-09-24 17:34 - 2012-07-08 00:05 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-24 17:34 - 2012-07-08 00:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-24 17:29 - 2014-09-18 19:03 - 00001104 _____ () C:\Users\Thai Nguyen\Desktop\Continue Live Installation.lnk
2014-09-24 17:17 - 2014-05-24 17:44 - 00000000 __SHD () C:\Users\Thai Nguyen\AppData\Local\EmieSiteList
2014-09-24 17:05 - 2014-09-24 17:05 - 02613248 _____ (rateó) C:\Users\Thai Nguyen\AppData\Local\swbgkv.exe
2014-09-24 17:04 - 2014-09-24 17:04 - 00000687 _____ () C:\awh43B3.tmp
2014-09-20 10:27 - 2014-09-20 10:27 - 00000687 _____ () C:\awhA42A.tmp
2014-09-20 09:56 - 2014-09-20 09:56 - 00000687 _____ () C:\awh5D7A.tmp
2014-09-20 09:51 - 2014-07-23 06:37 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-09-19 18:08 - 2009-07-13 19:37 - 00000000 ____D () C:\Windows\tracing
2014-09-19 15:12 - 2014-09-19 15:12 - 00000687 _____ () C:\awh449D.tmp
2014-09-19 14:26 - 2013-12-22 09:15 - 00000000 ____D () C:\Users\DefaultAppPool
2014-09-19 14:04 - 2009-07-13 19:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-19 13:10 - 2014-02-28 21:48 - 00000670 __RSH () C:\ProgramData\ntuser.pol
2014-09-19 12:54 - 2014-09-19 12:54 - 00000687 _____ () C:\awh2EFB.tmp
2014-09-19 12:00 - 2013-12-01 08:15 - 00000450 _____ () C:\Windows\Tasks\FixCleaner Scan.job
2014-09-19 09:32 - 2014-09-19 09:32 - 00000687 _____ () C:\awh2184.tmp
2014-09-19 08:52 - 2014-09-19 08:52 - 00000687 _____ () C:\awhA2D3.tmp
2014-09-19 08:43 - 2014-09-19 08:43 - 00000687 _____ () C:\awh5C61.tmp
2014-09-19 08:10 - 2012-07-08 00:06 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\Adobe
2014-09-19 07:43 - 2014-09-19 07:43 - 00000687 _____ () C:\awhE7DE.tmp
2014-09-19 07:37 - 2009-07-13 21:33 - 00417688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-18 20:54 - 2014-09-18 20:54 - 00000687 _____ () C:\awh4691.tmp
2014-09-18 20:45 - 2014-05-23 08:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-18 19:30 - 2009-07-13 19:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-18 18:38 - 2014-09-18 18:38 - 00000687 _____ () C:\awh6363.tmp
2014-09-18 18:32 - 2014-08-01 22:04 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-18 18:32 - 2014-07-23 06:38 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2014-09-18 17:46 - 2014-09-18 17:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-18 17:41 - 2014-06-24 13:51 - 00001404 _____ () C:\Users\Thai Nguyen\.swfinfo
2014-09-18 16:58 - 2012-07-08 00:13 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Local\Apple Computer
2014-09-18 16:41 - 2014-05-27 10:22 - 00000366 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-09-18 16:21 - 2014-05-27 10:14 - 00000322 _____ () C:\Users\Thai Nguyen\AppData\Roaming\aps.uninstall.scan.results
2014-09-18 16:14 - 2014-09-18 16:14 - 00612006 _____ (ClickMeIn Limited) C:\Users\Thai Nguyen\AppData\Local\nsj1BFD.tmp
2014-09-18 14:23 - 2014-09-18 14:23 - 00000687 _____ () C:\awhC580.tmp
2014-09-18 14:07 - 2014-09-18 14:08 - 00612006 _____ (ClickMeIn Limited) C:\Users\Thai Nguyen\AppData\Local\nsd27ED.tmp
2014-09-18 14:07 - 2014-09-18 14:07 - 00000000 ____D () C:\ProgramData\Registry Helper
2014-09-18 13:38 - 2014-09-18 13:38 - 00000687 _____ () C:\awh4EAB.tmp
2014-09-18 13:25 - 2013-01-13 21:54 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-18 13:17 - 2014-09-18 13:17 - 00000687 _____ () C:\awh9F2B.tmp
2014-09-15 09:06 - 2012-07-08 00:27 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-10 22:43 - 2013-08-15 00:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 22:22 - 2012-07-08 12:14 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 22:18 - 2013-12-01 17:50 - 00799036 _____ () C:\Windows\system32\perfh013.dat
2014-09-10 22:18 - 2013-12-01 17:50 - 00172820 _____ () C:\Windows\system32\perfc013.dat
2014-09-10 22:18 - 2013-12-01 17:03 - 00792646 _____ () C:\Windows\system32\perfh015.dat
2014-09-10 22:18 - 2013-12-01 17:03 - 00176082 _____ () C:\Windows\system32\perfc015.dat
2014-09-10 22:18 - 2013-12-01 15:13 - 00713008 _____ () C:\Windows\system32\perfh01D.dat
2014-09-10 22:18 - 2013-12-01 15:13 - 00160328 _____ () C:\Windows\system32\perfc01D.dat
2014-09-10 22:18 - 2013-12-01 14:53 - 00773432 _____ () C:\Windows\system32\perfh019.dat
2014-09-10 22:18 - 2013-12-01 14:53 - 00169666 _____ () C:\Windows\system32\perfc019.dat
2014-09-10 22:18 - 2013-12-01 14:01 - 00429516 _____ () C:\Windows\system32\prfh0404.dat
2014-09-10 22:18 - 2013-12-01 14:01 - 00130034 _____ () C:\Windows\system32\prfc0404.dat
2014-09-10 22:18 - 2013-12-01 13:42 - 00782234 _____ () C:\Windows\system32\prfh0816.dat
2014-09-10 22:18 - 2013-12-01 13:42 - 00169766 _____ () C:\Windows\system32\prfc0816.dat
2014-09-10 22:18 - 2013-12-01 13:25 - 00765362 _____ () C:\Windows\system32\prfh0416.dat
2014-09-10 22:18 - 2013-12-01 13:25 - 00164228 _____ () C:\Windows\system32\prfc0416.dat
2014-09-10 22:18 - 2013-12-01 12:49 - 00445006 _____ () C:\Windows\system32\perfh011.dat
2014-09-10 22:18 - 2013-12-01 12:49 - 00137044 _____ () C:\Windows\system32\perfc011.dat
2014-09-10 22:18 - 2013-12-01 12:34 - 00411542 _____ () C:\Windows\system32\prfh0804.dat
2014-09-10 22:18 - 2013-12-01 12:34 - 00134536 _____ () C:\Windows\system32\prfc0804.dat
2014-09-10 22:18 - 2013-12-01 11:46 - 00456148 _____ () C:\Windows\system32\perfh012.dat
2014-09-10 22:18 - 2013-12-01 11:46 - 00135328 _____ () C:\Windows\system32\perfc012.dat
2014-09-10 22:18 - 2013-12-01 11:38 - 00705150 _____ () C:\Windows\system32\perfh01F.dat
2014-09-10 22:18 - 2013-12-01 11:38 - 00157766 _____ () C:\Windows\system32\perfc01F.dat
2014-09-10 22:18 - 2013-12-01 11:30 - 00793206 _____ () C:\Windows\system32\perfh010.dat
2014-09-10 22:18 - 2013-12-01 11:30 - 00165082 _____ () C:\Windows\system32\perfc010.dat
2014-09-10 22:18 - 2013-12-01 11:05 - 00543488 _____ () C:\Windows\system32\perfh014.dat
2014-09-10 22:18 - 2013-12-01 11:05 - 00111216 _____ () C:\Windows\system32\perfc014.dat
2014-09-10 22:18 - 2012-07-07 23:50 - 18824880 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 18:41 - 2014-09-10 18:40 - 00000000 ____D () C:\ProgramData\SumaartCompare
2014-09-10 18:41 - 2014-07-22 07:02 - 00000000 ____D () C:\ProgramData\4e928b04fc07c645
2014-09-10 18:20 - 2014-09-10 18:20 - 00000000 ____D () C:\ProgramData\ShoppingDealFactory
2014-09-10 18:06 - 2014-09-10 18:06 - 00000687 _____ () C:\awh10F0.tmp
2014-09-08 12:29 - 2014-05-25 14:28 - 00000000 ____D () C:\Program Files\V-bates
2014-09-08 08:12 - 2014-09-08 08:12 - 00000000 ____D () C:\ProgramData\UltraCoupon
2014-09-08 07:57 - 2014-09-08 07:57 - 00000687 _____ () C:\awh99FD.tmp
2014-09-04 18:52 - 2014-09-18 19:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-04 18:47 - 2014-09-18 19:52 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-04 12:25 - 2014-09-04 12:25 - 00000687 _____ () C:\awhEFF9.tmp
2014-09-04 12:08 - 2014-09-04 12:08 - 00000000 ____D () C:\ProgramData\Performance Optimizer
2014-09-04 12:08 - 2014-05-27 15:41 - 00000000 ____D () C:\ProgramData\2308189059
2014-09-04 12:07 - 2013-01-11 17:39 - 00000338 _____ () C:\Windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1045307804-3161103378-2353340640-1000.job
2014-09-03 07:37 - 2014-09-03 07:37 - 00000687 _____ () C:\awhE407.tmp
2014-09-02 16:01 - 2013-06-04 08:13 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Local\InboxAce_1g
2014-09-02 15:15 - 2014-09-02 15:15 - 00000687 _____ () C:\awh1FA0.tmp
2014-09-02 15:10 - 2014-09-01 17:37 - 00000000 ____D () C:\Program Files\Ad Muncher
2014-09-01 17:48 - 2014-09-01 17:01 - 00000000 ____D () C:\ProgramData\Ad Muncher
2014-09-01 17:13 - 2014-09-01 17:13 - 00000687 _____ () C:\awh4633.tmp
2014-09-01 16:24 - 2014-09-01 16:24 - 00000687 _____ () C:\awh44BD.tmp
2014-09-01 16:21 - 2014-09-01 16:21 - 00000000 ____D () C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086
2014-09-01 16:21 - 2014-09-01 16:20 - 00000000 ____D () C:\Program Files\2B6A3384-29F8-4469-8585-001604CFE056
2014-09-01 16:16 - 2014-09-01 16:16 - 00000687 _____ () C:\awh8D7F.tmp
2014-09-01 14:13 - 2014-07-22 04:55 - 00000000 ____D () C:\Program Files\CouponDownloader
2014-09-01 14:05 - 2014-09-01 14:05 - 00000687 _____ () C:\awh7BE3.tmp
2014-09-01 13:54 - 2014-08-13 21:36 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Severe Weather Alerts
2014-09-01 13:13 - 2014-09-01 13:13 - 00000687 _____ () C:\awh6863.tmp
2014-09-01 12:12 - 2014-07-22 21:07 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Local\CocCoc
2014-09-01 11:48 - 2014-09-01 11:48 - 00000687 _____ () C:\awh1B7B.tmp
2014-09-01 11:31 - 2014-09-01 11:31 - 00301608 _____ (VuuPC Limited) C:\Users\Thai Nguyen\AppData\Local\nsg65C6.tmp
2014-09-01 11:21 - 2014-09-01 11:21 - 00000687 _____ () C:\awh3B89.tmp
2014-09-01 10:56 - 2009-07-13 19:37 - 00000000 ___RD () C:\Users\Public
2014-09-01 10:54 - 2014-09-01 10:53 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\VOPackage
2014-09-01 10:54 - 2014-09-01 10:53 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\Activeris
2014-09-01 10:52 - 2014-09-01 10:52 - 01261056 _____ () C:\Users\Thai Nguyen\Downloads\New_Player.exe
2014-09-01 10:17 - 2012-07-08 00:05 - 00000000 ____D () C:\Program Files\Google
2014-09-01 09:51 - 2014-09-01 09:51 - 00000687 _____ () C:\awhD0B6.tmp
2014-09-01 09:11 - 2014-09-01 09:11 - 00000687 _____ () C:\awhC7E0.tmp
2014-09-01 08:54 - 2014-09-01 08:54 - 00000687 _____ () C:\awhDB60.tmp
2014-09-01 01:18 - 2014-09-01 01:18 - 00002086 _____ () C:\Users\Thai Nguyen\AppData\Roaming\DZBZP
2014-09-01 01:18 - 2014-09-01 01:18 - 00001248 _____ () C:\Users\Thai Nguyen\AppData\Roaming\KGMD
2014-08-31 09:32 - 2014-08-31 09:32 - 01458400 _____ () C:\Users\Thai Nguyen\Downloads\Setup (2).exe
2014-08-31 09:19 - 2014-08-31 09:19 - 00000000 ____D () C:\Users\Thai Nguyen\AppData\Roaming\System Maintenance GL
2014-08-31 09:19 - 2014-08-31 09:19 - 00000000 ____D () C:\ProgramData\System Maintenance GL
2014-08-31 09:19 - 2014-08-31 09:19 - 00000000 ____D () C:\Program Files\System Maintenance GL
2014-08-31 09:16 - 2014-08-31 09:17 - 01932048 _____ (Gross Mauntin) C:\Users\Thai Nguyen\Downloads\adobe_flash.exe
2014-08-31 09:16 - 2014-08-31 09:16 - 00781048 _____ ( ) C:\Users\Thai Nguyen\Downloads\adobe_flash_setup.exe
2014-08-31 09:08 - 2014-08-31 09:08 - 00000687 _____ () C:\awh143B.tmp
2014-08-31 08:36 - 2014-08-31 08:35 - 00000000 ____D () C:\Users\Thai Nguyen\Desktop\show 23-08-2014
2014-08-31 08:12 - 2014-08-31 08:12 - 00000687 _____ () C:\awhAF8.tmp
2014-08-30 08:17 - 2014-08-30 08:17 - 00000687 _____ () C:\awh20D8.tmp
2014-08-29 18:22 - 2014-08-29 18:22 - 00000687 _____ () C:\awh85A3.tmp
2014-08-29 04:43 - 2014-09-01 10:53 - 04823040 _____ () C:\Windows\score.exe
2014-08-28 21:19 - 2014-08-28 21:19 - 00000687 _____ () C:\awh7BD.tmp
2014-08-28 11:43 - 2014-08-28 11:43 - 00000687 _____ () C:\awh316B.tmp
2014-08-27 09:23 - 2014-08-27 09:23 - 00000687 _____ () C:\awh92BD.tmp
2014-08-26 09:20 - 2014-08-26 09:20 - 00000687 _____ () C:\awh7AD9.tmp
Some content of TEMP:
====================
C:\Users\Thai Nguyen\AppData\Local\Temp\HD_Quality_CA_setup.exe
C:\Users\Thai Nguyen\AppData\Local\Temp\setup_401.exe
C:\Users\Thai Nguyen\AppData\Local\Temp\setup_ra.exe
C:\Users\Thai Nguyen\AppData\Local\Temp\update_203046_setup.exe
C:\Users\Thai Nguyen\AppData\Local\Temp\update_323353_setup.exe
C:\Users\Thai Nguyen\AppData\Local\Temp\update_360573_setup.exe
C:\Users\Thai Nguyen\AppData\Local\Temp\update_436028_setup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-18 21:18
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-09-2014 01
Ran by Thai Nguyen at 2014-09-25 11:56:34
Running from C:\Users\Thai Nguyen\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ApPtoU (HKLM\...\{01B91C29-337A-1FFD-7CFC-473451D2F861}) (Version: - ApptOU) <==== ATTENTION
ArcSoft Panorama Maker 6 (HKLM\...\{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}) (Version: 6.0.8.85 - ArcSoft)
ArcSoft TotalMedia Extreme (HKLM\...\{F97B750E-554D-4194-BF3F-41EA91389E10}) (Version: 1.0.10.5 - ArcSoft)
AVS Media Player 4.1.9.95 (HKLM\...\AVS Media Player_is1) (Version: - Online Media Technologies Ltd.)
AVS Video Converter 8 (HKLM\...\AVS4YOU Video Converter 7_is1) (Version: - Online Media Technologies Ltd.)
AVS Video Editor 6 (HKLM\...\AVS Video Editor_is1) (Version: - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (HKLM\...\AVS4YOU Software Navigator_is1) (Version: - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Boost for Internet Explorer (HKLM\...\Boost) (Version: 3.0.0.10 - Verti Technology Group, Inc.)
CameraHelperMsi (Version: 13.51.815.0 - Logitech) Hidden
Canon MX340 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX340_series) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Creative System Information (HKLM\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Crescendo Music Notation Editor (HKLM\...\Crescendo) (Version: - NCH Software)
Defaulttab (HKLM\...\DefaultTab) (Version: 2.4.8.1 - Search Results, LLC) <==== ATTENTION
Digital Voice Editor 3 (HKLM\...\{6CCC133E-9A2F-4CAA-8866-75D029CD3AB3}) (Version: 3.1.02.12070 - Sony Corporation)
Dolby Digital Live Pack (HKLM\...\Dolby Digital Live Pack) (Version: 3.01 - Creative Technology Limited)
DriverMax 3.0 (HKLM\...\DMX3_is1) (Version: - Innovative Solutions)
DriverUpdate (HKLM\...\{C85A8187-7E95-429D-9C9C-57C10268B3CF}) (Version: 2.2.38275 - SlimWare Utilities, Inc.)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fast And Safe (HKLM\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf}) (Version: - GTgroup) <==== ATTENTION
File Splitter and Joiner (FFSJ v3.3) (HKLM\...\File Splitter and Joiner_is1) (Version: - Le Minh Hoang)
FileParade Bundle (HKLM\...\FileParade Bundle) (Version: 1.0.0.0 - FileParade Bundle) <==== ATTENTION
FixCleaner (HKLM\...\{76B0EC2C-CB14-422D-AD07-BDAEC0D1BEEB}) (Version: 2.0.5013 - Slimware Utilities, Inc.)
Flv Player Packages (HKCU\...\Flv Player Packages) (Version: - ) <==== ATTENTION
FlvPlayer (HKCU\...\FlvPlayer) (Version: ${VERSION} - ) <==== ATTENTION
Genesis (HKCU\...\swbgkv) (Version: - ) <==== ATTENTION
Google Drive (HKLM\...\{56D4499E-AC3E-4B8D-91C9-C700C148C44B}) (Version: 1.13.5782.599 - Google, Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
HQuality-v3 (HKLM\...\HQuality-v3) (Version: 1.34.8.12 - HQuality3)
InboxAce Toolbar (HKLM\...\InboxAce_1gbar Uninstall) (Version: - Mindspark Interactive Network) <==== ATTENTION
Intel® Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2993 - Intel Corporation)
Internet Updater (HKLM\...\InternetUpdater) (Version: 2.6.57 - Parallel Lines Development, LLC) <==== ATTENTION
Iomega ScreenPlay Discovery (HKLM\...\{DC1B23F0-2A8C-49DD-8F83-74F50950D5A7}) (Version: 1.1.0.0 - Iomega Corporation an EMC Company)
Itibiti RTC (Version: 0.0.1 - Itibiti Inc) Hidden
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (Version: 2.1.67.1 - Oracle, Inc.) Hidden
LightScribe System Software (HKLM\...\{7F10292C-A190-4176-A665-A1ED3478DF86}) (Version: 1.18.3.2 - LightScribe)
Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7240) - Logitech Inc..)
Logitech Webcam Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
LWS Facebook (Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (Version: 13.51.827.0 - Logitech) Hidden
LWS Help_main (Version: 13.51.828.0 - Logitech) Hidden
LWS Launcher (Version: 13.51.828.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.51.815.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.51.815.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.51.815.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
magicJack (HKCU\...\magicJack) (Version: 2.0.6073.4413 - magicJack L.P.)
Media View (HKLM\...\MediaViewV1alpha2498) (Version: 1.1 - Media View) <==== ATTENTION
Microsoft .NET Framework 4.5.1 (ARA) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (CHS) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (CSY) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DAN) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (dansk) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1030) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (ELL) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (ESN) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (FIN) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (FRA) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HEB) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HUN) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (ITA) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (JPN) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (KOR) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Nederlands) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1043) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (NLD) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (NOR) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (PLK) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Português) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 2070) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (PTB) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (PTG) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (RUS) (Version: 4.5.50938 - Корпорация Майкрософт) Hidden
Microsoft .NET Framework 4.5.1 (suomi) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1035) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (SVE) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (svenska) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1053) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (TRK) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Türkçe) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1055) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Ελληνικά) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1032) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Русский) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1049) (Version: 4.5.50938 - Корпорация Майкрософт)
Microsoft .NET Framework 4.5.1 (עברית) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1037) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (العربية) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1025) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (日本語) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1041) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (简体中文) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 2052) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1(한국어) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1042) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1, norsk språkpakke (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1044) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET-keretrendszer 4.5.1 (magyar) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1038) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Firefox 32.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 32.0.2 (x86 en-US)) (Version: 32.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla)
MuseScore 1.2 MuseScore score typesetter (HKLM\...\MuseScore) (Version: 1.2.0 - Werner Schweer and Others)
OffersWizard Network System Driver (HKLM\...\inethnfd) (Version: 1.0.0.3001 - ) <==== ATTENTION
Opera 12.16 (HKLM\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA)
Opera 12.16 (HKLM\...\Opera 12.16.1860_1) (Version: 12.16.1860 - Opera Software ASA)
Performance Optimizer (HKLM\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{892cc6a3}) (Version: - Linker Ltd) <==== ATTENTION
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
Remote Desktop Access (VuuPC) (HKLM\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
savernett (HKLM\...\{614925F9-841A-53FE-A28F-DC30FA07239B}) (Version: - savErneT)
Search module (HKLM\...\Search module) (Version: - Search Module)
Search Protect (HKLM\...\SearchProtect) (Version: 2.15.14.58 - Client Connect LTD) <==== ATTENTION
Setting Utility Series (HKLM\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
Settings Manager (HKLM\...\Settings Manager) (Version: 5.0.0.12565 - Aztec Media Inc) <==== ATTENTION
Severe Weather Alerts (HKCU\...\Severe Weather Alerts) (Version: 1.23.0.0 - Weather Notifications, LLC) <==== ATTENTION
Shopper-Pro (HKLM\...\ShopperPro) (Version: - )
ShoppingDealFactory (HKLM\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - ShoppingDealFactory) <==== ATTENTION
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.9.12585 - Skype Technologies S.A.)
Skype™ 6.6 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.6.106 - Skype Technologies S.A.)
Software Version Updater (HKLM\...\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}) (Version: 1.1.3.8 - ) <==== ATTENTION
Sound Blaster X-Fi Surround 5.1 Pro (HKLM\...\{0A9DA353-D0CD-4922-A54B-2F5F4EC90986}) (Version: 1.0 - Creative Technology Limited)
SumaartCompare (HKLM\...\{A9F7A981-09A3-C1F7-2D46-1BA20CFDF02F}) (Version: - SmmartCompare) <==== ATTENTION
System Maintenance GL (HKLM\...\System Maintenance GL) (Version: 1.2 - Gross Mauntin)
TELUS security advisor 5.5.12 (HKLM\...\Radialpoint_8_Spd_is1) (Version: 5.5.12 - TELUS)
Uniblue SpeedUpMyPC (HKLM\...\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1) (Version: 5.2.1.7 - Uniblue Systems Ltd) <==== ATTENTION
Updater (HKLM\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B}) (Version: 2.6.53 - Creative Island Media, LLC) <==== ATTENTION
VAIO Control Center (HKLM\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Event Service (HKLM\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.12010 - Sony Corporation)
VAIO Power Management (HKLM\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.11300 - Sony Corporation)
V-bates 2.0.0.445 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.445 - Wajamu) <==== ATTENTION
videos MediaPlay-Air (HKLM\...\videos MediaPlay-Air) (Version: 1.34.8.12 - enter) <==== ATTENTION
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Vpskeys 4.3 (HKLM\...\Vpskeys_is1) (Version: - )
WavePad Sound Editor (HKLM\...\WavePad) (Version: 5.48 - NCH Software)
Yahoo! Messenger (HKLM\...\Yahoo! Messenger) (Version: - Yahoo! Inc.)
Yahoo! Software Update (HKLM\...\Yahoo! Software Update) (Version: - )
Yahoo! Toolbar (HKLM\...\Yahoo! Companion) (Version: - Yahoo! Inc.)
Youtube Downloader HD v. 2.9.9.13 (HKLM\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com)
YTDownloader (HKLM\...\YTDownloader) (Version: - YTDownloader)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1045307804-3161103378-2353340640-1000_Classes\CLSID\{5fdb0cd8-5760-44d1-8d13-a78bf558c3c7}\InprocServer32 -> C:\Program Files\InboxAce_1g\bar\1.bin\1gSrcAs.dll (MindSpark)
==================== Restore Points =========================
26-08-2014 16:26:54 Windows Update
27-08-2014 16:21:10 Before Updating
28-08-2014 22:33:46 Windows Update
31-08-2014 16:54:28 Windows Update
04-09-2014 19:25:18 Before Updating
08-09-2014 14:59:58 Windows Update
11-09-2014 05:09:46 Windows Update
18-09-2014 21:02:43 Windows Update
19-09-2014 01:38:55 Before Updating
19-09-2014 03:07:12 Windows Update
19-09-2014 20:12:35 Removed Microsoft Silverlight
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 19:04 - 2014-07-22 14:57 - 00000867 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 d3oxij66pru1i3.cloudfront.net
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {00FA4BCE-EBE8-4E66-BB57-9D01228D2371} - System32\Tasks\Smp => C:\Program Files\Common Files\Goobzo\GBUpdate\smp.exe [2014-03-30] () <==== ATTENTION
Task: {013D9BD0-BF4C-4A10-80F4-4F8CF49EC791} - System32\Tasks\{2D46FFCA-48A7-4D7E-B579-FA28F12336E3} => Firefox.exe
Task: {075D59EC-3099-4A32-8823-0CC89130E2E9} - System32\Tasks\{CDEC9C8C-1174-4A0A-A352-1D9D8BE48381} => C:\Program Files\Safari\Safari.exe [2012-04-25] (Apple Inc.)
Task: {0C5FEE4E-8ED1-4BE9-B219-4618502EAEC5} - System32\Tasks\FFMPEGUpd => C:\Program Files\FFMPEG\FFMPEGUpdate.exe [2013-08-08] (Goobzo)
Task: {0CF312B5-2229-4345-BB0C-45AF3A26AD0A} - System32\Tasks\{BAFDAD68-8A1D-4A55-BE1C-031743347FBE} => Chrome.exe
Task: {0DDF99D4-AC38-4C38-A44A-B7CFC595D5DE} - System32\Tasks\{F12A7181-F1C5-43E1-B2AE-397B6E071760} => Chrome.exe
Task: {0FC9870A-50C2-4C1B-9F87-33663D395D23} - System32\Tasks\738fae31-4f84-4d97-b506-625ca6742dd5-11 => C:\Program Files\videos MediaPlay-Air\738fae31-4f84-4d97-b506-625ca6742dd5-11.exe [2014-08-13] (enter) <==== ATTENTION
Task: {12A3F319-027E-4A1B-A2A9-711452D9800A} - System32\Tasks\{53572729-FDB9-47DA-9086-663638038A76} => C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2012-05-25] (Yahoo! Inc.)
Task: {1705F736-4262-4EBD-AC81-D449141BB4A2} - System32\Tasks\BrowserSafeguard Update Task => C:\Program Files\Browsersafeguard\uninstall.BrowserSafeguard.exe [2014-06-20] () <==== ATTENTION
Task: {18270526-1CBB-4EC5-BAE2-7ED86622F343} - System32\Tasks\{93BFD72F-D3E0-49AC-BBF8-082421D6F58A} => Firefox.exe
Task: {182B0FC2-DBEF-415D-9ED4-DE0CA2940A3C} - System32\Tasks\{AA8ED6A3-D58A-4532-BE58-ADF105886372} => C:\Program Files\ArcSoft\TotalMedia Extreme\TMExtreme.exe [2008-11-19] (ArcSoft, Inc.)
Task: {19EEA801-5031-41B8-8290-A88857334FEF} - System32\Tasks\{CC252103-2C7B-45D8-AD9C-171083F3BEB6} => C:\Program Files\YTDownloader\YTDownloader.exe [2014-05-22] (YTDownloader)
Task: {1B292743-4EBE-4622-B41E-BEAF3BECE4CE} - System32\Tasks\{782C9D80-2C3E-4E98-A8DB-A4832F639660} => C:\Program Files\Safari\Safari.exe [2012-04-25] (Apple Inc.)
Task: {1B89EE08-3623-4079-A8D2-0B5EB238F685} - System32\Tasks\DriverUpdate Startup => C:\Program Files\DriverUpdate\DriverUpdate.exe [2014-05-14] (SlimWare Utilities, Inc.)
Task: {1BEAA1E8-9151-4D41-8F13-CE7BEC227F5E} - System32\Tasks\APSnotifierPP3 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {202091E3-2FAD-4460-8531-45A644A75858} - System32\Tasks\{C0C32A41-B9CB-457D-BAA1-66A00C56243C} => Firefox.exe
Task: {220B8BDD-6DB5-4256-97B4-BDE8A459C954} - System32\Tasks\{88FE8D95-E50D-400D-88F7-7AC34D328250} => Firefox.exe
Task: {2822570C-9D24-423C-9843-1D292997B4EC} - System32\Tasks\8e39f416-5204-4767-9616-9bf881585f4c => C:\Program Files\HQuality-v3\8e39f416-5204-4767-9616-9bf881585f4c.exe [2014-09-24] ()
Task: {2B45727C-2EFF-4905-8D86-DF517AD0E155} - System32\Tasks\{586702CF-165A-4628-976B-38542E883315} => Firefox.exe
Task: {2C05ED32-2E33-4BA1-B77C-200D4E520340} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {2CD99656-B200-4D9C-B04E-DE314D0199F2} - System32\Tasks\AmiUpdXp => C:\Users\Thai Nguyen\AppData\Local\3192\a12437.exe [2014-08-02] () <==== ATTENTION
Task: {2E2A5064-48F5-4A73-A40B-766809F39501} - System32\Tasks\{DF7E484C-25DC-4F44-BA29-ECDF7DBB0FB0} => C:\Program Files\ArcSoft\TotalMedia Extreme\TMExtreme.exe [2008-11-19] (ArcSoft, Inc.)
Task: {2E7CDCF9-A021-4E08-A252-76E0742A38F8} - System32\Tasks\DealPly => C:\Users\THAING~1\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {2F63CD43-2CB5-4A29-A7CF-1A2994467F34} - System32\Tasks\{AA9F4D21-0A14-4306-98B0-BD8515D02463} => C:\Users\Thai Nguyen\AppData\Roaming\mjusbsp\magicJackLoader.exe [2012-02-01] (magicJack L.P.)
Task: {348528C0-1841-4F23-9AA7-47D796F2F076} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-09-24] (globalUpdate) <==== ATTENTION
Task: {35F9B18D-B750-41CE-8655-707794C88FA8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {367603F8-E42A-42D8-AAE6-C7E45A691500} - System32\Tasks\{AE20AD7E-0D50-4F7C-A24C-D2695E3AF58F} => Chrome.exe
Task: {372EBE86-05B8-47F6-B62F-CB06486DA7C6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-08] (Google Inc.)
Task: {3A3E5342-E285-4733-8FFC-65FE67D51853} - System32\Tasks\{2C9AD8AF-E972-4C5F-8189-8070160C839C} => Firefox.exe
Task: {3EEBE160-6504-4418-971F-72650320C902} - System32\Tasks\{ACF33CB3-2231-4C74-96FC-9A25BB4D793D} => Chrome.exe
Task: {403D392E-C008-48B0-9E96-5B92A9404AB6} - System32\Tasks\DTChk => C:\Users\Public\Util\DTChk.exe [2014-04-23] (Search Results, LLC) <==== ATTENTION
Task: {41361FE7-586A-4CB1-BDE6-080065BABD86} - System32\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5_user => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-5.exe [2014-09-24] (HQuality3)
Task: {42B81A97-7879-46A0-9386-5D48C1C1EE76} - System32\Tasks\{B79EC874-67FA-4F62-AEE6-DF21F0343F80} => Chrome.exe
Task: {493C7748-FD23-4C40-B0DF-CA5F66845E6B} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-09-24] (globalUpdate) <==== ATTENTION
Task: {4A0C0447-17F7-4B1B-8A8E-D946A57C47D1} - System32\Tasks\{8BE6217A-72EE-461F-8301-5B29A9095D30} => Firefox.exe
Task: {4B5ED4CA-5B29-4FF5-A41A-C8DCEBBDE0C2} - System32\Tasks\{106C06E5-C92F-45EF-A2CA-5ED579931D69} => C:\Program Files\Safari\Safari.exe [2012-04-25] (Apple Inc.)
Task: {4CFFE315-4271-405D-81ED-D1DBE0932CE1} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)
Task: {4E08CC8B-7CA9-4F7E-B6BE-C4094FB9D8CE} - System32\Tasks\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2 => C:\Program Files\V-bates\startsc.bat [2014-03-24] ()
Task: {4ED06A5B-36AD-441F-9E32-F2DBC0044CC9} - System32\Tasks\{30281820-CAE3-437D-AC15-8841615EFE46} => Chrome.exe
Task: {4F88481F-FC83-47D5-8F63-3349113A0108} - System32\Tasks\{AEAA944A-789A-4A12-9A95-A95FA8D96BB8} => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5043F723-CA0A-4E77-BB6E-85E00E4ABC64} - System32\Tasks\Rocket Updater => C:\Users\Thai Nguyen\AppData\Roaming\RocketUpdater\UpdateProc\UpdateTask.exe [2013-05-01] ()
Task: {55EDF4ED-36F9-40CA-BF38-FB5D68DDC7EB} - System32\Tasks\{44C4F987-9D5C-490D-908D-95F9DEBB705E} => Firefox.exe
Task: {597ACB07-21ED-4C6F-B569-A81A5EF63BCD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {598A8230-B2AC-45D3-BACE-A93A7DB3667D} - System32\Tasks\FF Watcher {436F0309-4DDE-4A5E-8D19-0309F34E08D1} => C:\Program Files\V-bates\PrefHelper.exe <==== ATTENTION
Task: {5AADF583-897C-4426-B21E-A6EB288A2107} - System32\Tasks\{22938336-5FD6-4764-BB2E-D34C75ED8991} => Chrome.exe
Task: {5B6E7C91-69CC-4DF9-8A50-E78D7194F6F2} - System32\Tasks\{0D0D7959-005D-4C55-9373-A9F8B8D4494E} => Firefox.exe
Task: {5CDFAEA6-D06C-48AF-9F62-2706840820A2} - System32\Tasks\{B417249C-4206-4459-BF7A-B38E23E481DD} => C:\Program Files\Safari\Safari.exe [2012-04-25] (Apple Inc.)
Task: {5DB6B6C0-069B-46AF-8122-A29892F52EB0} - System32\Tasks\{F1B5A825-97CF-4B50-AE9F-2C6DF70C6735} => Firefox.exe
Task: {634A0083-F83D-47A2-836E-F36FBE9BA7A4} - System32\Tasks\{C0115FFA-9868-4A6E-A92C-EC4511280144} => C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2012-05-25] (Yahoo! Inc.)
Task: {65E9800B-DD48-41B8-9F81-A7C439AA2683} - System32\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-2 => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-2.exe [2014-09-24] (HQuality3)
Task: {708FC666-56CD-4D01-A831-3CBD90BDDF83} - System32\Tasks\{99713A6A-7608-4C0F-A216-A7A81D440BC3} => Chrome.exe
Task: {745319F5-ED95-414D-9A7E-A4CE6EA89C54} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1045307804-3161103378-2353340640-1000 => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: {763ADEF9-CEAC-4404-9E9A-B6EE4DE0D8EE} - System32\Tasks\ShopperPro => C:\Program Files\ShopperPro\ShopperPro.exe [2014-07-22] (Goobzo LTD) <==== ATTENTION
Task: {77B1B53A-50DB-4C4C-A25C-FC4B64F97BD6} - System32\Tasks\{3D9B989B-FB57-44D2-93C6-9DC3CF80B702} => Firefox.exe
Task: {784685CE-B1EF-4B7A-8ECA-6C4827760F65} - System32\Tasks\{DB0212D5-AFEA-4B2E-8D79-0F870EF6C48F} => Firefox.exe
Task: {785E4C83-1200-4D4A-9E05-8E10A4CDA5A9} - System32\Tasks\KGMD => C:\Users\Thai Nguyen\AppData\Roaming\KGMD.exe [2014-09-24] (HQuality3)
Task: {7D044563-B276-4A2C-9FCA-F07D32F118D4} - System32\Tasks\DTReg => \DefaultTab\DefaultTab\DTReg.exe <==== ATTENTION
Task: {808C67C6-CC9A-4912-B996-61E04046B377} - System32\Tasks\{E3B782F7-FD9F-40F0-9FA8-2CD33AFDE4A0} => C:\Program Files\Telus\security advisor\5.5.12.650\TelusSecurityAdvisor.exe
Task: {81FADAB0-3714-4596-9284-30834FA8841C} - System32\Tasks\SpeedUpMyPC => C:\Program Files\Uniblue\SpeedUpMyPC\spmonitor.exe [2012-04-16] (Uniblue Systems Ltd) <==== ATTENTION
Task: {826F7114-E461-4466-AC48-E45947E81193} - System32\Tasks\APSnotifierPP2 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {85035023-9E42-4462-BC03-B8F7047D713B} - System32\Tasks\{0BCC0420-785A-4CFA-9C02-85DBAB13A599} => Firefox.exe
Task: {85CAD81E-3C8C-446B-8A7E-1B916193B6A1} - System32\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-4 => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-4.exe [2014-09-24] (HQuality3)
Task: {89B259CF-6289-42F2-ABE8-3EA0D23EA8C1} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1045307804-3161103378-2353340640-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {8A8FB3D9-2CE5-44A2-BC6D-26EFE4E73DD5} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1045307804-3161103378-2353340640-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {8BF08A64-1293-4099-B969-B3C11A29B258} - System32\Tasks\{DC28935A-4BE7-4E00-B802-8B260223AD5B} => Chrome.exe
Task: {8CA993EB-3188-44B1-8D49-4CF2AAEC3094} - System32\Tasks\{BDBBC016-6C20-42E8-9BE2-45337CB324F8} => C:\Program Files\Common Files\logishrd\LWSPlugins\LWS\Applets\HelpMain\launchershortcut.exe [2012-09-26] ()
Task: {8D816962-B300-4401-9D2E-2E391A96478D} - System32\Tasks\{9F5DA324-FFA3-44F0-9745-B43246B63AA1} => C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2012-05-25] (Yahoo! Inc.)
Task: {8D8D29BF-C862-4E31-AE20-7ACF517725A5} - System32\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5 => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-5.exe [2014-09-24] (HQuality3)
Task: {91EAC15A-6AB1-4937-99F2-15E71CCED6E2} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {9F8593B2-ED2A-4163-8FE9-81F1F3167ED5} - System32\Tasks\{825CDC0C-CF91-4958-891A-3C5D7E8414B5} => Firefox.exe
Task: {A02AA70E-950C-4F7F-9EAC-6EC4BBCFB575} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-07-08] (Google Inc.)
Task: {A267A047-2502-475B-96AA-1DCA7CE6A4B7} - System32\Tasks\{7DAD1BF3-251B-4982-B2CE-B443FBB3F561} => C:\Program Files\Iomega\ScreenPlay Discovery\ScreenPlay Discovery.exe [2009-07-29] (Iomega Corp.)
Task: {A806F717-F770-42F1-93F8-9FE9E0EA13D8} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1045307804-3161103378-2353340640-1000 => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: {A8208720-6518-4B6A-938C-9C7AD9000EC3} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)
Task: {A88D85EB-DE11-4B5D-B196-87AF248FA62B} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1045307804-3161103378-2353340640-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {A9D75788-AB61-4477-BF2A-741870F4EF91} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {A9E4BC60-1574-47BE-84D8-857FAAF5ECD2} - System32\Tasks\SPBIW_UpdateTask_Time_313035353734303933392d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0
Task: {AA0299AD-D951-4B87-A2E3-4C1DD3CE484A} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {AA2766F2-E316-4A5C-B980-9F1FF712C671} - System32\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-3 => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-3.exe [2014-09-24] (HQuality3)
Task: {ABE59D25-B720-42C4-89FD-EF13B5749C3E} - System32\Tasks\{3EC85FE7-D56E-4091-8C9B-838E12D089C3} => Chrome.exe
Task: {ACC720CE-0B09-48A0-BC8B-503C8DF40194} - System32\Tasks\{38A2BDD2-09F6-4E68-9B30-F9060794F75D} => C:\Program Files\Safari\Safari.exe [2012-04-25] (Apple Inc.)
Task: {AEFA704D-A8E1-4AC6-9DCB-0828858B607A} - System32\Tasks\{97145D6D-A2DE-48FA-BED2-77EAB6610BE0} => Firefox.exe
Task: {AF058395-79B5-4498-B2C2-8BC14591958A} - System32\Tasks\{6EBBFA3B-EC81-47B2-B924-48101932E9F1} => Chrome.exe
Task: {AF75E057-DCC9-4E25-B7E7-EE3EE35F2AB4} - System32\Tasks\DZBZP => C:\Users\Thai Nguyen\AppData\Roaming\DZBZP.exe [2014-09-24] (HQuality3)
Task: {B02A0EB6-A42B-48D5-9272-F95F5ADD63D0} - System32\Tasks\UNELEVATE_878 => C:\Program Files\ShopperPro\JSDriver\1.37.0.199\jsdrv.exe [2014-07-22] () <==== ATTENTION
Task: {B85E92A3-EA5A-4CD0-B730-7EBEB8CC4C8D} - System32\Tasks\{2EFC75D7-1C74-4788-948F-14F9875C0553} => Firefox.exe
Task: {BB041004-53F6-45F9-B71E-6078C861F2A4} - System32\Tasks\{252411C0-CB38-4772-9E54-6422A0371EE8} => C:\Program Files\Safari\Safari.exe [2012-04-25] (Apple Inc.)
Task: {BBB284EE-F8A8-4216-B34E-34FBBFBC5643} - System32\Tasks\{D0CCB9D2-216C-4A08-BA88-A014A8A4E7FA} => Firefox.exe
Task: {BE75EBC2-9BE0-4876-A481-31CA873B7F2F} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1045307804-3161103378-2353340640-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: {BE77BDE6-0EF3-4A5B-9402-B60E7DDC99A1} - System32\Tasks\YTDownloader => C:\Program Files\YTDownloader\YTDownloader.exe [2014-05-22] (YTDownloader) <==== ATTENTION
Task: {C3226335-0F82-4833-B52D-1A16727DFAC7} - System32\Tasks\APSnotifierPP1 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {C396E5BF-D415-4193-B623-07B73A0B1976} - System32\Tasks\SMW_UpdateTask_Time_313035353734303933392d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {C7662B23-3E11-4B21-AB4E-F51EBD0DF349} - System32\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-1 => C:\Program Files\HQuality-v3\HQuality-v3-codedownloader.exe [2014-09-24] (HQuality3)
Task: {D36FB4FB-EF40-4C8C-9089-D934FE4C8D73} - System32\Tasks\{F40DE13F-F146-4B2D-9178-19A8BC5756A8} => Firefox.exe
Task: {D503CA5E-5657-4180-B776-6496150C4467} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {D75C9E73-FD08-465F-8F11-2DBB1E580A55} - System32\Tasks\{62CE4C5D-8733-4F06-AD2E-2344CBB11D46} => Firefox.exe
Task: {D79EBC0F-7CB3-4F54-AFD2-72A7D5DDBFA9} - System32\Tasks\FixCleaner Scan => C:\Program Files\FixCleaner\FixCleaner.exe [2013-09-11] (Slimware Utilities, Inc.)
Task: {DB1A62BF-9EF6-4751-8BDD-440375F74695} - System32\Tasks\UNELEVATE_27534 => C:\Program Files\ShopperPro\JSDriver\1.36.1.172\jsdrv.exe [2014-04-28] () <==== ATTENTION
Task: {DB68BCFA-9CA7-41E7-B652-9436AB535DAB} - System32\Tasks\{E3D0CB65-A3BF-4C98-8656-28470335E001} => Firefox.exe
Task: {DE0E5F69-1495-4114-81A4-556C731978C7} - System32\Tasks\ShopperProJSUpd => C:\Program Files\ShopperPro\updater.exe [2014-07-22] (Goobzo) <==== ATTENTION
Task: {E2BA1C05-E701-4406-96C7-5EF6535FB771} - System32\Tasks\{1EC2F164-930A-4FCE-B73F-4B838C8DCC0E} => C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe [2010-02-18] (Creative Technology Ltd)
Task: {E32A9E71-5A74-43B4-BA9F-C8210C1C4CBC} - System32\Tasks\{F74CB65D-02E9-432D-BA69-D2A9805A50C3} => C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2012-05-25] (Yahoo! Inc.)
Task: {E4387D1C-1462-4715-B9D7-89E00E259EC3} - System32\Tasks\738fae31-4f84-4d97-b506-625ca6742dd5-3 => C:\Program Files\videos MediaPlay-Air\738fae31-4f84-4d97-b506-625ca6742dd5-3.exe [2014-08-13] (enter) <==== ATTENTION
Task: {E95F4D2D-0307-4919-8850-14CBCE58C7B6} - System32\Tasks\{A024893D-4676-4C95-9BE4-D24724CAB1DA} => Firefox.exe
Task: {EB5C283A-1715-4955-A23F-386817903102} - System32\Tasks\1ae219f2-326d-461b-9f25-6adb3380f981 => C:\Program Files\HQuality-v3\1ae219f2-326d-461b-9f25-6adb3380f981.exe [2014-09-24] (HQuality3)
Task: {ED773363-6354-4A9C-BF6C-D588B357206D} - System32\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-11 => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-11.exe [2014-09-24] (HQuality3)
Task: {F07F8023-43A3-4339-8BB2-1B428D62092A} - System32\Tasks\{AB903CE3-8D33-4D2D-B3F7-7800D42B1CDC} => Chrome.exe
Task: {F29D2B13-0E71-47AA-ADD6-7A28AB6A8202} - System32\Tasks\FixCleaner Startup => C:\Program Files\FixCleaner\FixCleaner.exe [2013-09-11] (Slimware Utilities, Inc.)
Task: {F31CD81F-D71C-4F7E-A34E-0B20B9BD994C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F422131D-731D-459F-94A8-213F765AA013} - System32\Tasks\SPDriver => C:\Program Files\ShopperPro\JSDriver\1.37.0.199\jsdrv.exe [2014-07-22] () <==== ATTENTION
Task: {F5F9CE8C-20B8-4B71-BB98-70149948F3D1} - System32\Tasks\{4CAC9BDD-BCE8-466D-8E59-6494D943AE06} => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: {F60A5CED-6629-42C6-9F04-1875AD0F11AA} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1045307804-3161103378-2353340640-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {F6F2DC18-774A-4E38-AF2E-4E5FAF05A36B} - System32\Tasks\{43E952DD-904D-48DD-B869-F09D5AC32F27} => C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2012-05-25] (Yahoo! Inc.)
Task: {F71ECDF3-6A7E-4C29-B994-4CD6C8CFA1B5} - System32\Tasks\{7334F1C0-C98C-4326-9593-662E21E4C095} => Firefox.exe
Task: {F9A4547B-8BA9-4AF1-8696-4BB3771470E6} - System32\Tasks\{5EBDBBC4-20F1-467D-A31E-18E7515B1D5B} => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: {FABEC1D6-1B0C-4468-BCC0-6ECA30F04653} - System32\Tasks\{39C15997-D827-4BD1-B0B3-B3FF225DE3AF} => Firefox.exe
Task: {FB219054-1BB0-4C40-8B0F-221DCF1DDE7D} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)
Task: {FBA63A73-CD89-4CD3-94CA-B6825B728B2B} - System32\Tasks\YTDownloaderUpd => C:\Program Files\YTDownloader\updater.exe [2014-05-22] (Goobzo) <==== ATTENTION
Task: {FD817726-0C16-494E-8F7A-9F80302EE897} - System32\Tasks\{BFA9C0B8-ED7C-4224-BA70-9F63B8E1E422} => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\1ae219f2-326d-461b-9f25-6adb3380f981.job => C:\Program Files\HQuality-v3\1ae219f2-326d-461b-9f25-6adb3380f981.exe
Task: C:\Windows\Tasks\738fae31-4f84-4d97-b506-625ca6742dd5-11.job => C:\Program Files\videos MediaPlay-Air\738fae31-4f84-4d97-b506-625ca6742dd5-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\738fae31-4f84-4d97-b506-625ca6742dd5-3.job => C:\Program Files\videos MediaPlay-Air\738fae31-4f84-4d97-b506-625ca6742dd5-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\738fae31-4f84-4d97-b506-625ca6742dd5-7.job => C:\Program Files\videos MediaPlay-Air\738fae31-4f84-4d97-b506-625ca6742dd5-7.exeÑ/updateapp /agentregpath='videos MediaPlay-Air-738f' /appid=61799 /srcid='001673' /subid='verticals-ads,pops,shopping' /zdata='0' /bic=2A6C3065D93543EE89ADFE795D5D41E2IE /verifier=4b70afbb6c260fd7a6b964f844390fdf /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1407991059 /statsdomain=
http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='9a18ee66-230d-49ee-be76-f7aae1d47cb0.dll' /DllName64ToInjectToChrome='97834587-c78a-474c-95cb-a46d964a1a7b.dll' /nova64bitexe='738fae31-4f84-4d97-b506-625ca6742dd5-64.exe <==== ATTENTION
Task: C:\Windows\Tasks\8e39f416-5204-4767-9616-9bf881585f4c.job => C:\Program Files\HQuality-v3\8e39f416-5204-4767-9616-9bf881585f4c.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Thai Nguyen\AppData\Local\3192\a12437.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-1.job => C:\Program Files\HQuality-v3\HQuality-v3-codedownloader.exe
Task: C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-11.job => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-11.exe
Task: C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-2.job => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-2.exe
Task: C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-3.job => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-3.exe
Task: C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-4.job => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-4.exe
Task: C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5.job => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-5.exe
Task: C:\Windows\Tasks\d580af0f-eb7b-41f0-84f5-658eccd3d403-5_user.job => C:\Program Files\HQuality-v3\d580af0f-eb7b-41f0-84f5-658eccd3d403-5.exe
Task: C:\Windows\Tasks\DriverUpdate Startup.job => C:\Program Files\DriverUpdate\DriverUpdate.exe
Task: C:\Windows\Tasks\DZBZP.job => C:\Users\Thai Nguyen\AppData\Roaming\DZBZP.exe
Task: C:\Windows\Tasks\FF Watcher {436F0309-4DDE-4A5E-8D19-0309F34E08D1}.job => C:\Program Files\V-bates\PrefHelper.exe <==== ATTENTION
Task: C:\Windows\Tasks\FixCleaner Scan.job => C:\Program Files\FixCleaner\FixCleaner.exe
Task: C:\Windows\Tasks\FixCleaner Startup.job => C:\Program Files\FixCleaner\FixCleaner.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\KGMD.job => C:\Users\Thai Nguyen\AppData\Roaming\KGMD.exe
Task: C:\Windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1045307804-3161103378-2353340640-1000.job => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: C:\Windows\Tasks\Rocket Updater.job => C:\Users\THAING~1\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC.job => C:\Program Files\Uniblue\SpeedUpMyPC\spmonitor.exe <==== ATTENTION
Task: C:\Windows\Tasks\temp_6c93d79a-d04b-45dc-bea5-1694f193b206-6.job => C:\Program Files\Browsers Apps\6c93d79a-d04b-45dc-bea5-1694f193b206-6.exe-/agentregpath='Browsers Apps-6c93' /appid=61787 /srcid='001738' /subid='0' /zdata='0' /bic=2A6C3065D93543EE89ADFE795D5D41E2IE /verifier=4b70afbb6c260fd7a6b964f844390fdf /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1407991054 /statsdomain=
http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='8b049cc7-b97c-4c9a-9a43-86dfa0f0c31d.dll' /DllName64ToInjectToChrome='efbf0531-2db7-42ae-8938-a22dfdd2b14b.dll' /nova64bitexe='6c93d79a-d04b-45dc-bea5-1694f193b206-64.exe <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2014-06-17 22:41 - 2014-05-25 09:04 - 00490000 _____ () c:\program files\settings manager\systemk\sysapcrt.dll
2014-07-22 06:42 - 2014-07-22 06:42 - 00186192 _____ () c:\ProgramData\Fast And Safe\FastAndSafeSvc.dll
2014-07-22 06:42 - 2014-07-22 06:42 - 04125696 _____ () c:\ProgramData\Fast And Safe\FastAndSafe.dll
2014-09-04 12:08 - 2014-09-04 12:08 - 00186192 _____ () c:\ProgramData\Performance Optimizer\PerformanceOptimizerSvc.dll
2014-09-04 12:08 - 2014-09-04 12:08 - 04125184 _____ () c:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll
2014-07-31 13:20 - 2014-07-31 13:20 - 00150528 _____ () C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086\etmajyzoqm.exe
2014-07-31 13:20 - 2014-07-31 13:20 - 00102400 _____ () C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086\nfapi.dll
2014-07-31 13:20 - 2014-07-31 13:20 - 00323584 _____ () C:\Program Files\C19E5206-B324-4F60-9A43-1E83FFD73086\ProtocolFilters.dll
2014-07-23 06:21 - 2014-07-23 06:21 - 00543232 _____ () C:\Program Files\005\cyycfhtzro32.exe
2013-05-29 10:55 - 2013-05-29 10:55 - 00107520 _____ () C:\Users\Thai Nguyen\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
2014-08-01 08:42 - 2014-08-01 08:42 - 00543232 _____ () C:\Program Files\005\jxbalvtmyz32.exe
2014-09-08 12:29 - 2014-09-03 18:12 - 00131920 _____ () C:\Program Files\V-bates\guardsvc.exe
2014-07-29 23:47 - 2014-07-29 23:47 - 00179200 _____ () C:\Windows\system32\nethtsrv.exe
2014-07-29 23:47 - 2014-07-29 23:47 - 00108544 _____ () C:\Windows\system32\hfnapi.dll
2014-07-29 23:47 - 2014-07-29 23:47 - 00246784 _____ () C:\Windows\system32\hfpapi.dll
2014-05-27 10:13 - 2014-05-27 10:13 - 00543232 _____ () C:\Program Files\004\rqpbhevlkc32.exe
2014-09-01 10:53 - 2014-08-29 04:43 - 04823040 _____ () C:\Windows\score.exe
2014-09-01 10:54 - 2014-09-01 10:54 - 00072192 _____ () C:\Users\Thai Nguyen\AppData\Roaming\VOPackage\VOsrv.exe
2014-07-29 23:48 - 2014-07-29 23:48 - 00159744 _____ () C:\Windows\system32\netupdsrv.exe
2014-09-08 12:29 - 2014-09-03 18:12 - 00215376 _____ () C:\Program Files\V-bates\ExtensionUpdaterService.exe
2012-07-08 00:12 - 2009-12-01 22:03 - 00010752 _____ () C:\Program Files\Sony\VAIO Event Service\VESBasePS.dll
2012-07-08 00:12 - 2009-12-01 22:03 - 00009728 _____ () C:\Program Files\Sony\VAIO Event Service\VESMgrSubPS.dll
2014-05-25 14:30 - 2014-05-25 14:30 - 00541696 _____ () C:\Program Files\003\xmkysecqun32.exe
2014-09-08 12:29 - 2014-09-03 18:12 - 00089424 _____ () C:\Program Files\V-bates\lbwnhk.dll
2014-09-25 08:10 - 2008-07-20 21:11 - 00247808 _____ () C:\Windows\system32\FFSJ\FFSJSHL.dll
2014-09-08 12:29 - 2014-09-03 18:12 - 00419152 _____ () C:\Program Files\V-bates\notifier.exe
2014-09-08 12:29 - 2014-09-03 18:12 - 00409424 _____ () C:\Program Files\V-bates\lbrdr2.dll
2014-09-08 12:29 - 2014-09-03 18:12 - 00191312 _____ () C:\Program Files\V-bates\lbp2hk.dll
2014-09-08 12:29 - 2014-09-03 18:12 - 00303952 _____ () C:\Program Files\V-bates\lbnjct2.dll
2013-06-25 22:07 - 2009-12-29 16:50 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL
2013-06-25 22:07 - 2010-07-22 16:45 - 00181760 _____ () C:\Windows\SYSTEM32\APOMngr.DLL
2012-07-07 23:45 - 2012-01-10 13:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2014-06-03 21:58 - 2012-05-22 15:57 - 20758016 _____ () C:\Program Files\Telus\security advisor\5.5.12.650.1\libcef.dll
2014-06-03 21:58 - 2012-05-22 15:57 - 01094158 _____ () C:\Program Files\Telus\security advisor\5.5.12.650.1\avcodec-53.dll
2014-06-03 21:58 - 2012-05-22 15:57 - 00117262 _____ () C:\Program Files\Telus\security advisor\5.5.12.650.1\avutil-51.dll
2014-06-03 21:58 - 2012-05-22 15:57 - 00183822 _____ () C:\Program Files\Telus\security advisor\5.5.12.650.1\avformat-53.dll
2014-06-03 21:58 - 2012-05-22 15:57 - 00622080 _____ () C:\Program Files\Telus\security advisor\5.5.12.650.1\libglesv2.dll
2014-06-03 21:58 - 2012-05-22 15:57 - 00111616 _____ () C:\Program Files\Telus\security advisor\5.5.12.650.1\libegl.dll
2014-07-22 06:49 - 2014-07-22 00:50 - 03211776 _____ () C:\Program Files\ShopperPro\JSDriver\1.37.0.199\jsdrv.exe
2010-05-07 18:35 - 2010-05-07 18:35 - 02143576 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtCore4.dll
2010-05-07 18:35 - 2010-05-07 18:35 - 07954776 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtGui4.dll
2010-05-07 18:36 - 2010-05-07 18:36 - 00340824 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtXml4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00027480 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00126808 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2009-04-09 16:04 - 2009-04-09 16:04 - 02141008 _____ () C:\Program Files\Logitech\Vid HD\QtCore4.dll
2009-03-03 15:17 - 2009-03-03 15:17 - 07704400 _____ () C:\Program Files\Logitech\Vid HD\QtGui4.dll
2009-04-22 14:53 - 2009-04-22 14:53 - 00969040 _____ () C:\Program Files\Logitech\Vid HD\QtNetwork4.dll
2009-03-03 15:17 - 2009-03-03 15:17 - 00475472 _____ () C:\Program Files\Logitech\Vid HD\QtOpenGL4.dll
2009-03-03 15:17 - 2009-03-03 15:17 - 00363856 _____ () C:\Program Files\Logitech\Vid HD\QtXml4.dll
2009-03-03 15:17 - 2009-03-03 15:17 - 00200016 _____ () C:\Program Files\Logitech\Vid HD\QtSql4.dll
2010-10-29 13:01 - 2010-10-29 13:01 - 00027472 _____ () C:\Program Files\Logitech\Vid HD\SDL.dll
2009-03-03 15:17 - 2009-03-03 15:17 - 11311952 _____ () C:\Program Files\Logitech\Vid HD\QtWebKit4.dll
2009-03-03 15:17 - 2009-03-03 15:17 - 00291664 _____ () C:\Program Files\Logitech\Vid HD\phonon4.dll
2010-10-29 13:02 - 2010-10-29 13:02 - 00751616 _____ () C:\Program Files\Logitech\Vid HD\vpxmd.dll
2009-03-03 15:18 - 2009-03-03 15:18 - 00029008 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qgif4.dll
2009-03-03 15:18 - 2009-03-03 15:18 - 00035152 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qico4.dll
2009-03-03 15:18 - 2009-03-03 15:18 - 00138064 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll
2012-09-21 12:08 - 2012-09-21 12:08 - 00184024 _____ () C:\Program Files\Common Files\logishrd\SharedBin\LVAPI11.dll
2014-04-21 12:24 - 2014-04-21 12:24 - 00392704 _____ () C:\Program Files\Boost\BoostUpdater.exe
2013-07-08 22:02 - 2013-07-08 22:02 - 00348384 _____ () C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp.exe
2013-07-08 22:02 - 2013-07-08 22:02 - 00076000 _____ () C:\Users\Thai Nguyen\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsAppAPI.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 00264040 _____ () C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2012-09-13 00:39 - 2012-09-13 00:39 - 00336232 _____ () C:\Program Files\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2014-09-25 09:28 - 2014-09-25 09:28 - 00098816 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32api.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00110080 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\pywintypes27.dll
2014-09-25 09:28 - 2014-09-25 09:28 - 00364544 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\pythoncom27.dll
2014-09-25 09:28 - 2014-09-25 09:28 - 00044032 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\_socket.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 01153024 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\_ssl.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00320512 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32com.shell.shell.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00711680 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\_hashlib.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 01175040 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\wx._core_.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00805888 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\wx._gdi_.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00811008 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\wx._windows_.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 01062400 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\wx._controls_.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00735232 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\wx._misc_.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00128512 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\_elementtree.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00127488 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\pyexpat.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00557056 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\pysqlite2._sqlite.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00087040 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\_ctypes.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00119808 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32file.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00108544 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32security.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00018432 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32event.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00038912 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32inet.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00122368 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\wx._wizard.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00026624 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\_multiprocessing.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00070656 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\wx._html2.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00010240 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\select.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00686080 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\unicodedata.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00025600 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32pdh.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00521680 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\windows._lib_cacheinvalidation.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00011264 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32crypt.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00024064 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32pipe.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00035840 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32process.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00017408 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32profile.pyd
2014-09-25 09:28 - 2014-09-25 09:28 - 00022528 _____ () C:\Users\Thai Nguyen\AppData\Local\Temp\_MEI45922\win32ts.pyd
2012-09-25 09:33 - 2012-04-16 14:27 - 00018792 _____ () C:\Program Files\Uniblue\SpeedUpMyPC\cwebpage.DLL
2012-04-24 20:18 - 2012-04-24 20:18 - 00087912 _____ () C:\Program Files\Safari\Apple Application Support\zlib1.dll
2012-04-24 20:18 - 2012-04-24 20:18 - 01242472 _____ () C:\Program Files\Safari\Apple Application Support\libxml2.dll
2014-09-10 22:08 - 2014-09-10 22:08 - 16825520 _____ () C:\Windows\system32\macromed\Flash\NPSWF32_15_0_0_152.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:862BDB1A
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ServicepointService8 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ServicepointService8 => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TotalMedia BackUp & Recorder Monitor.lnk => C:\Windows\pss\TotalMedia BackUp & Recorder Monitor.lnk.CommonStartup
MSCONFIG\startupreg: Anti-phishing Domain Advisor => "C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: Creative SB Monitoring Utility => RunDll32 sbavmon.dll,SBAVMonitor
MSCONFIG\startupreg: HeadlineAlley_29 Browser Plugin Loader => C:\PROGRA~1\HEADLI~2\bar\1.bin\29brmon.exe
MSCONFIG\startupreg: InboxAce_1g Browser Plugin Loader => C:\PROGRA~1\INBOXA~2\bar\1.bin\1gbrmon.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: TelevisionFanatic Browser Plugin Loader => C:\PROGRA~1\TELEVI~2\bar\1.bin\64brmon.exe
MSCONFIG\startupreg: TkBellExe => "c:\program files\real\realplayer\Update\realsched.exe" -osboot
MSCONFIG\startupreg: VolPanel => "C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe" /r
========================= Accounts: ==========================
Administrator (S-1-5-21-1045307804-3161103378-2353340640-500 -> Administrator - Disabled - Status: Degraded)
Guest (S-1-5-21-1045307804-3161103378-2353340640-501 -> Limited - Disabled - Status: Degraded) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-1045307804-3161103378-2353340640-1002 -> Limited - Enabled - Status: OK)
Thai Nguyen (S-1-5-21-1045307804-3161103378-2353340640-1000 -> Administrator - Enabled - Status: OK) => C:\Users\Thai Nguyen
==================== Faulty Device Manager Devices =============
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/25/2014 11:19:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Faulting module name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Exception code: 0xc0000005
Fault offset: 0x000bcb0a
Faulting process id: 0xdd8
Faulting application start time: 0xsmu.exe0
Faulting application path: smu.exe1
Faulting module path: smu.exe2
Report Id: smu.exe3
Error: (09/25/2014 11:19:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Faulting module name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Exception code: 0xc0000005
Fault offset: 0x000bcb0a
Faulting process id: 0x215c
Faulting application start time: 0xsmu.exe0
Faulting application path: smu.exe1
Faulting module path: smu.exe2
Report Id: smu.exe3
Error: (09/25/2014 10:21:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Faulting module name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Exception code: 0xc0000005
Fault offset: 0x000bcb0a
Faulting process id: 0x10f0
Faulting application start time: 0xsmu.exe0
Faulting application path: smu.exe1
Faulting module path: smu.exe2
Report Id: smu.exe3
Error: (09/25/2014 10:21:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Faulting module name: smu.exe, version: 2.1.0.81, time stamp: 0x5383a0f7
Exception code: 0xc0000005
Fault offset: 0x000bcb0a
Faulting process id: 0x1c58
Faulting application start time: 0xsmu.exe0
Faulting application path: smu.exe1
Faulting module path: smu.exe2
Report Id: smu.exe3
Error: (09/25/2014 10:02:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 11.0.9600.17280, time stamp: 0x53f262ac
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea91c
Exception code: 0xc0000374
Fault offset: 0x000c3873
Faulting process id: 0x11c0
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3
Error: (09/25/2014 10:02:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 11.0.9600.17280, time stamp: 0x53f262ac
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea91c
Exception code: 0xc0000374
Fault offset: 0x000c3873
Faulting process id: 0x157c
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3
Error: (09/25/2014 10:00:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 11.0.9600.17280, time stamp: 0x53f262ac
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea91c
Exception code: 0xc0000374
Fault offset: 0x000c3873
Faulting process id: 0xdac
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3
Error: (09/25/2014 09:59:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 11.0.9600.17280, time stamp: 0x53f262ac
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea91c
Exception code: 0xc0000374
Fault offset: 0x000c3873
Faulting process id: 0x1010
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3
Error: (09/25/2014 09:58:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 11.0.9600.17280, time stamp: 0x53f262ac
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea91c
Exception code: 0xc0000374
Fault offset: 0x000c3873
Faulting process id: 0x1c4c
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3
Error: (09/25/2014 09:58:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 11.0.9600.17280, time stamp: 0x53f262ac
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea91c
Exception code: 0xc0000374
Fault offset: 0x000c3873
Faulting process id: 0x1b44
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3
System errors:
=============
Error: (09/25/2014 11:19:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Search Module Update service terminated unexpectedly. It has done this 3 time(s).
Error: (09/25/2014 10:21:38 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Search Module Update service terminated unexpectedly. It has done this 2 time(s).
Error: (09/25/2014 09:36:12 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Search Module Update service terminated unexpectedly. It has done this 1 time(s).
Error: (09/25/2014 09:29:16 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The CouponDownloaderService service terminated with service-specific error %%-1.
Error: (09/25/2014 09:29:16 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The SupraSavingsService service terminated with service-specific error %%-1.
Error: (09/25/2014 09:29:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
netfilter2
Error: (09/25/2014 09:29:16 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The SupraSavingsService service hung on starting.
Error: (09/25/2014 09:29:16 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The CouponDownloaderService service hung on starting.
Error: (09/25/2014 09:27:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Apple Mobile Device service failed to start due to the following error:
%%1053
Error: (09/25/2014 09:27:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Apple Mobile Device service to connect.
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-05-08 09:16:11.265
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.265
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.265
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.265
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.249
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.249
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.234
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.234
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.218
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys because the set of per-page image hashes could not be found on the system.
Date: 2014-05-08 09:16:11.203
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel® Core™ i5 CPU M 430 @ 2.27GHz
Percentage of memory in use: 56%
Total physical RAM: 3374.1 MB
Available physical RAM: 1465.28 MB
Total Pagefile: 6746.48 MB
Available Pagefile: 3819.07 MB
Total Virtual: 2047.88 MB
Available Virtual: 1919.66 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:240.91 GB) (Free:157.49 GB) NTFS
Drive e: (Storage) (Fixed) (Total:224.75 GB) (Free:223.62 GB) NTFS
Drive j: (2T_Hard Drive) (Fixed) (Total:1863.01 GB) (Free:960.15 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 8B11D73A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=240.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=224.7 GB) - (Type=07 NTFS)
========================================================
Disk: 4 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00029FE9)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== End Of Log ============================
This topic is locked
Scan with Farbar Recovery Scan Tool
Run as Administrator to start the tool.
Sign In
Create Account
