Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Getting a hard drive failure pop up, possible virus? [Solved]


  • This topic is locked This topic is locked

#31
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

To answer your question yes I tried to rescan and got a BSOD. I'll give these new scans a go and see what happens


  • 0

Advertisements


#32
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

here's the BSOD.txt

 

==================================================
Dump File         : 011315-34616-01.dmp
Crash Time        : 1/13/2015 3:34:29 PM
Bug Check String  :
Bug Check Code    : 0x00000109
Parameter 1       : a3a039d8`a2cdc615
Parameter 2       : b3b7465e`f54c020f
Parameter 3       : fffff880`02f705c0
Parameter 4       : 00000000`00000002
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+75bc0
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 6.1.7601.18700 (win7sp1_gdr.141211-1742)
Processor         : x64
Crash Address     : ntoskrnl.exe+75bc0
Stack Address 1   :
Stack Address 2   :
Stack Address 3   :
Computer Name     :
Full Path         : C:\Windows\Minidump\011315-34616-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 7601
Dump File Size    : 332,096
Dump File Time    : 1/13/2015 3:53:32 PM
==================================================

==================================================
Dump File         : 011315-39249-01.dmp
Crash Time        : 1/13/2015 2:37:52 PM
Bug Check String  :
Bug Check Code    : 0x00000109
Parameter 1       : a3a039d8`a1420676
Parameter 2       : b3b7465e`f3c040f0
Parameter 3       : fffff800`04552080
Parameter 4       : 00000000`00000002
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+75bc0
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 6.1.7601.18700 (win7sp1_gdr.141211-1742)
Processor         : x64
Crash Address     : ntoskrnl.exe+75bc0
Stack Address 1   :
Stack Address 2   :
Stack Address 3   :
Computer Name     :
Full Path         : C:\Windows\Minidump\011315-39249-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 7601
Dump File Size    : 336,856
Dump File Time    : 1/13/2015 2:53:40 PM
==================================================


  • 0

#33
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

next the TDSS log

Attached Files


  • 0

#34
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

now the GMER log

Attached Files

  • Attached File  GMER.log   584.75KB   965 downloads

  • 0

#35
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Sorry I've been away so long. I will review all of this in the morning. I've been sick with the flu that's been going around. On the mend now though.


  • 0

#36
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

ah cool, was wondering what was happening. Did give me time to complete the scans though


  • 0

#37
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Ok, those tools did what they were supposed to do. However, none seemed to find anything in the area that I suspected. So, I'm assuming that you're still getting errors?

 

In any case, let's have a look again with OTL and see how that looks. I've added this as a Custom Scan that will give me a little more information. Also, as I'm typing this I decided to add one more scan. Since we've looked with every other tool, let's have a peek with Combofix as well.

 

51a5d669693dd-icon_OTL.png Scan with OTL

Please download OTL by OldTimer and save the file to your desktop.

 

  • Right-click on 51a5d669693dd-icon_OTL.png icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Make sure that Scan All Users, LOP check and Purity check are ticked.
  • For 64-bit systems only - make sure that Include 64-bit option is also ticked.
  • Sections Processes, Modules, Services, Drivers, Standard Registry are set to Use Safelist.
  • Section Extra Registry is also set to Use Safelist.
  • Under the Custom Scans/Fixes bar in the box paste in the following:netsvcs

 

BASESERVICES
%SYSTEMDRIVE%\*.exe
/md5start
services
.*
explorer.exe
winlogon
.exe
Userinit.exe
svchost
.exe
qmgr
.dll
winsock
.*
/md5stop
dir
"%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT

  • Push Run Scan and wait patiently.
  • Two notepad windows will be opened after this run: OTL.txt (maximized) and Extras.txt (minimized).

Please include the content of both logfiles in your next reply.

 

51a5bf3d99e8a-ComboFixlogo16.png Scan with ComboFix

This is a very powerful tool that should be used only if advised by Malware Analyst.
Do not run ComboFix on your own!


Referring to this instruction, please download ComboFix by sUBs and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.



  • Right-click on 51a5bf3d99e8a-ComboFixlogo16.png icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the disclaimer and agree if prompted to install Recovery Console.
  • Do not take any actions while ComboFix goes through your System - it may cause it to stall!
  • This scan may take some time!
  • When finished - it will display a logfile (located also on your main drive, usually C:\ComboFix.txt).

Include that log in your next reply.
icon_idea.gif If you'll encounter any issues with internet connection after running ComboFix, please visit this link.
icon_idea.gif If an error about operation on the key marked for deletion will appear after running the tool, please reboot your machine.

 


  • 0

#38
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

okay here's the OTL log

 

OTL logfile created on: 1/20/2015 3:08:30 PM - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\gamerpc\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.17183)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
7.97 Gb Total Physical Memory | 3.69 Gb Available Physical Memory | 46.34% Memory free
15.93 Gb Paging File | 11.09 Gb Available in Paging File | 69.62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 243.61 Gb Free Space | 26.15% Space Free | Partition Type: NTFS
Drive E: | 402.41 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive J: | 931.48 Gb Total Space | 329.43 Gb Free Space | 35.37% Space Free | Partition Type: NTFS
 
Computer Name: GAMER | User Name: gamerpc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2015/01/20 13:06:17 | 000,059,964 | ---- | M] (Macrovision Europe Ltd.) -- C:\Users\gamerpc\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
PRC - [2015/01/19 10:49:12 | 001,530,048 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
PRC - [2015/01/19 10:49:12 | 000,834,752 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2015/01/19 10:49:10 | 001,942,720 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
PRC - [2015/01/15 12:43:49 | 001,088,800 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
PRC - [2014/12/27 01:28:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\gamerpc\Desktop\OTL.exe
PRC - [2014/12/22 22:08:48 | 009,726,760 | ---- | M] (Visicom Media Inc.) -- C:\Program Files (x86)\ManyCam\ManyCam.exe
PRC - [2014/12/13 17:01:28 | 003,838,800 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2014/12/12 16:47:37 | 000,410,768 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2014/12/12 16:13:07 | 002,531,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2014/12/12 16:13:04 | 001,701,520 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2014/12/02 22:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014/11/21 06:12:46 | 007,229,752 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014/11/11 16:41:23 | 000,081,640 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
PRC - [2014/10/13 17:47:22 | 001,802,048 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
PRC - [2014/09/30 16:00:34 | 000,344,896 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
PRC - [2014/09/24 13:30:42 | 000,277,672 | ---- | M] (Microsoft Corporation) -- C:\Users\gamerpc\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
PRC - [2014/09/01 15:28:52 | 036,202,560 | ---- | M] (ooVoo LLC) -- C:\Program Files (x86)\ooVoo\ooVoo.exe
PRC - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2014/06/05 15:46:56 | 004,213,072 | ---- | M] (Adblock) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.exe
PRC - [2014/03/31 18:11:28 | 000,649,024 | ---- | M] (IOBit) -- C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCAvSvc.exe
PRC - [2014/03/25 17:25:22 | 000,309,704 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2014/02/24 13:59:46 | 002,521,920 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe
PRC - [2014/02/24 03:30:30 | 003,129,560 | ---- | M] (Disc Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
PRC - [2014/01/09 21:26:44 | 001,861,968 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2013/12/16 17:00:16 | 000,886,592 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe
PRC - [2013/11/15 06:24:50 | 000,137,528 | ---- | M] (Motorola Mobility LLC) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
PRC - [2013/11/14 16:18:02 | 000,698,680 | ---- | M] (Motorola Mobility LLC) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
PRC - [2013/09/24 11:49:26 | 029,395,264 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2013/03/15 15:07:56 | 000,395,640 | ---- | M] (Eastman Kodak Company) -- C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
PRC - [2013/01/15 13:07:42 | 000,780,152 | ---- | M] (Eastman Kodak Company) -- C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
PRC - [2012/10/24 20:31:15 | 000,079,360 | ---- | M] (Creative Labs) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
PRC - [2012/10/24 20:28:46 | 005,019,360 | ---- | M] (FNet Co., Ltd.) -- C:\Program Files (x86)\XFastUSB\XFastUsb.exe
PRC - [2012/09/17 19:46:35 | 000,505,872 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
PRC - [2012/09/17 19:46:25 | 000,295,440 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
PRC - [2012/09/17 19:46:23 | 000,078,352 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
PRC - [2012/09/17 19:46:19 | 000,090,640 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
PRC - [2012/09/06 09:50:24 | 000,248,248 | R--- | M] (Western Digital) -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
PRC - [2012/06/28 07:40:52 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
PRC - [2012/05/30 09:18:07 | 004,331,392 | ---- | M] (AOL Inc.) -- C:\Program Files (x86)\AIM\aim.exe
PRC - [2012/05/25 03:25:02 | 006,595,928 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
PRC - [2011/12/16 12:21:10 | 001,687,968 | R--- | M] (Western Digital) -- C:\Program Files (x86)\Western Digital\WD Apps\WDDriveAutoUnlock.exe
PRC - [2011/09/02 16:06:38 | 000,065,657 | ---- | M] (Motorola) -- C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
PRC - [2010/11/05 22:54:22 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010/11/05 22:54:20 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
PRC - [2010/03/07 23:27:49 | 000,041,800 | ---- | M] (AOL Inc.) -- C:\Program Files (x86)\Common Files\AOL\1352139576\ee\aolsoftware.exe
PRC - [2009/12/23 13:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2009/11/06 11:58:38 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2009/07/08 14:32:50 | 001,233,195 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
PRC - [2009/05/04 18:05:04 | 000,241,789 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
PRC - [2009/02/22 19:43:56 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009/01/29 14:20:49 | 000,057,344 | ---- | M] (SlySoft, Inc.) -- C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe
PRC - [1999/12/31 16:00:00 | 000,365,376 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [1999/12/31 16:00:00 | 000,277,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [1999/12/31 16:00:00 | 000,166,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2015/01/20 13:06:23 | 000,592,896 | ---- | M] () -- C:\Users\gamerpc\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0015\~de6248.tmp
MOD - [2015/01/20 13:06:18 | 000,697,884 | ---- | M] () -- C:\Users\gamerpc\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0015\~df394b.tmp
MOD - [2015/01/19 10:49:34 | 002,227,904 | ---- | M] () -- C:\Program Files (x86)\Steam\video.dll
MOD - [2015/01/19 10:49:12 | 000,696,000 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.dll
MOD - [2015/01/15 15:42:26 | 034,641,288 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
MOD - [2015/01/15 15:42:26 | 001,709,960 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll
MOD - [2014/12/01 16:29:50 | 005,002,752 | ---- | M] () -- C:\Program Files (x86)\Steam\v8.dll
MOD - [2014/12/01 16:29:34 | 001,612,800 | ---- | M] () -- C:\Program Files (x86)\Steam\icui18n.dll
MOD - [2014/12/01 16:29:34 | 001,210,368 | ---- | M] () -- C:\Program Files (x86)\Steam\icuuc.dll
MOD - [2014/12/01 13:31:16 | 002,396,672 | ---- | M] () -- C:\Program Files (x86)\Steam\libavcodec-56.dll
MOD - [2014/12/01 13:31:16 | 000,485,888 | ---- | M] () -- C:\Program Files (x86)\Steam\libswscale-3.dll
MOD - [2014/12/01 13:31:16 | 000,479,744 | ---- | M] () -- C:\Program Files (x86)\Steam\libavformat-56.dll
MOD - [2014/12/01 13:31:16 | 000,442,880 | ---- | M] () -- C:\Program Files (x86)\Steam\libavutil-54.dll
MOD - [2014/12/01 13:31:16 | 000,332,800 | ---- | M] () -- C:\Program Files (x86)\Steam\libavresample-2.dll
MOD - [2014/11/20 13:02:29 | 000,316,576 | ---- | M] () -- C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
MOD - [2014/11/13 12:27:31 | 000,475,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\82fb26570c888a04480408d950d9b016\IAStorUtil.ni.dll
MOD - [2014/11/13 05:08:10 | 000,774,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\875c35969785fa170d186e7ca546ac9e\System.Runtime.Remoting.ni.dll
MOD - [2014/11/11 10:47:56 | 000,774,656 | ---- | M] () -- C:\Program Files (x86)\Steam\SDL2.dll
MOD - [2014/10/16 13:11:03 | 011,922,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\b4001d722e320fa42cd87b04b5249b2d\System.Web.ni.dll
MOD - [2014/10/16 04:16:00 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
MOD - [2014/10/16 04:15:29 | 012,435,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1453d9e9a4989833ef3db4b22549ba1a\System.Windows.Forms.ni.dll
MOD - [2014/10/16 04:15:24 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\836e10dfd0811b303553216f5cb092ef\System.Drawing.ni.dll
MOD - [2014/10/16 04:15:19 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\237d509a79aeef6e4635b09450d98f2a\System.Configuration.ni.dll
MOD - [2014/10/16 04:14:49 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d97a5aa0eb7697aca7c6e90ae471af2b\WindowsBase.ni.dll
MOD - [2014/10/16 04:14:47 | 007,991,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
MOD - [2014/10/11 12:05:58 | 001,044,776 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2014/10/06 10:00:00 | 003,502,080 | ---- | M] () -- C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax
MOD - [2014/09/24 13:30:41 | 000,081,056 | ---- | M] () -- C:\Users\gamerpc\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\LoggingPlatform.DLL
MOD - [2014/09/23 03:43:09 | 008,897,696 | ---- | M] () -- C:\Program Files\Microsoft Office 15\root\office15\1033\grooveintlresource.dll
MOD - [2014/09/12 13:34:05 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\f473a3fb0073a13849f5206103f64a99\IAStorCommon.ni.dll
MOD - [2014/09/12 04:03:12 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
MOD - [2014/03/17 04:23:05 | 000,003,132 | ---- | M] () -- C:\Program Files (x86)\DAEMON Tools Pro\MSIMG32.dll
MOD - [2014/01/20 13:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2014/01/09 21:28:18 | 000,100,688 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2014/01/09 21:26:44 | 001,861,968 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
MOD - [2013/05/07 08:08:26 | 000,675,840 | ---- | M] () -- C:\Windows\SysWOW64\ac3filter.ax
MOD - [2013/01/15 18:47:56 | 000,893,248 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\webres.dll
MOD - [2012/11/13 19:23:14 | 000,241,152 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_objdetect220.dll
MOD - [2012/11/13 19:23:14 | 000,201,216 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_video220.dll
MOD - [2012/11/13 19:23:08 | 000,775,680 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_highgui220.dll
MOD - [2012/11/13 19:23:04 | 001,241,088 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_imgproc220.dll
MOD - [2012/11/13 19:22:32 | 002,010,624 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_core220.dll
MOD - [2012/05/30 09:11:47 | 000,176,128 | ---- | M] () -- C:\Program Files (x86)\AIM\nssckbi.dll
MOD - [2012/05/25 03:25:00 | 000,921,600 | ---- | M] () -- C:\Program Files (x86)\Yahoo!\Messenger\yui.dll
MOD - [2012/05/25 03:25:00 | 000,078,336 | ---- | M] () -- C:\Program Files (x86)\Yahoo!\Messenger\pcre.dll
MOD - [2009/04/20 10:55:58 | 000,148,480 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL
MOD - [2009/02/06 17:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2015/01/09 13:19:37 | 001,580,416 | ---- | M] (Echobit LLC) [On_Demand | Stopped] -- C:\Program Files\Echobit\Evolve\EvoSvc.exe -- (EvoSvc)
SRV:64bit: - [2014/12/12 16:13:04 | 001,148,560 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
SRV:64bit: - [2014/12/12 16:13:03 | 019,823,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
SRV:64bit: - [2014/11/12 00:06:52 | 002,449,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe -- (ClickToRunSvc)
SRV:64bit: - [2014/08/22 14:14:34 | 000,368,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2014/08/22 14:14:34 | 000,023,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2014/07/22 15:31:23 | 000,172,344 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE)
SRV:64bit: - [2014/04/17 12:43:47 | 000,027,768 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
SRV:64bit: - [2013/05/26 21:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012/06/19 18:10:34 | 000,634,632 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel®
SRV:64bit: - [2011/12/15 10:40:08 | 001,977,224 | R--- | M] (Western Digital ) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\WDFME.exe -- (WDFMEService)
SRV:64bit: - [2011/12/15 10:40:08 | 001,338,264 | R--- | M] (Western Digital ) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe -- (WDRulesService)
SRV:64bit: - [2011/12/15 10:40:06 | 000,319,384 | R--- | M] (WDC) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe -- (WDDMService)
SRV:64bit: - [2011/08/05 12:53:12 | 000,467,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
SRV:64bit: - [2011/08/05 12:53:12 | 000,306,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm)
SRV:64bit: - [2011/08/05 12:53:06 | 008,277,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
SRV:64bit: - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2015/01/19 10:49:12 | 000,834,752 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2015/01/17 21:51:11 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/01/15 12:43:50 | 002,635,552 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2015/01/14 02:29:27 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/12/13 17:01:28 | 002,530,640 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2014/12/12 16:47:37 | 000,410,768 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2014/12/12 16:13:04 | 001,701,520 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2014/12/02 22:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/12/02 20:13:02 | 000,417,552 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/09/30 16:00:34 | 000,344,896 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
SRV - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014/04/11 23:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2014/04/03 20:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014/03/31 18:11:28 | 000,649,024 | ---- | M] (IOBit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCAvSvc.exe -- (ASCAntivirusSrv)
SRV - [2014/03/20 14:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2014/02/06 14:09:56 | 000,046,184 | R--- | M] (AOL Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\AOL\acs\AOLacsd.exe -- (AOL ACS)
SRV - [2013/12/16 17:00:16 | 000,886,592 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe -- (AdvancedSystemCareService7)
SRV - [2013/11/15 06:24:50 | 000,137,528 | ---- | M] (Motorola Mobility LLC) [Auto | Running] -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe -- (Motorola Device Manager)
SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2013/03/15 15:07:56 | 000,395,640 | ---- | M] (Eastman Kodak Company) [Auto | Running] -- C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe -- (Kodak AiO Network Discovery Service)
SRV - [2013/01/15 13:07:42 | 000,780,152 | ---- | M] (Eastman Kodak Company) [Auto | Running] -- C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe -- (Kodak AiO Status Monitor Service)
SRV - [2012/10/24 20:35:00 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2012/10/24 20:33:14 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2012/10/24 20:31:15 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe -- (Sound Blaster X-Fi MB Licensing Service)
SRV - [2012/09/17 19:46:25 | 000,295,440 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe -- (CyberLink PowerDVD 12 Media Server Service)
SRV - [2012/09/17 19:46:23 | 000,078,352 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe -- (CyberLink PowerDVD 12 Media Server Monitor Service)
SRV - [2012/09/17 19:46:19 | 000,090,640 | ---- | M] (CyberLink Corp.) [Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe -- (CLHNServiceForPowerDVD12)
SRV - [2012/09/06 09:50:24 | 000,248,248 | R--- | M] (Western Digital) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe -- (WDDriveService)
SRV - [2012/01/05 07:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv)
SRV - [2011/09/02 16:06:38 | 000,065,657 | ---- | M] (Motorola) [Auto | Running] -- C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe -- (PST Service)
SRV - [2010/11/05 22:54:22 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010/06/25 09:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/12/23 13:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009/11/06 11:58:38 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009/02/22 19:43:56 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2005/03/09 20:50:18 | 000,018,944 | ---- | M] (http://libusb-win32.sourceforge.net) [Auto | Stopped] -- C:\Windows\SysWOW64\libusbd-nt.exe -- (libusbd)
SRV - [1999/12/31 16:00:00 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [1999/12/31 16:00:00 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [1999/12/31 16:00:00 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2015/01/20 13:40:11 | 000,129,752 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:64bit: - [2015/01/20 13:01:57 | 000,016,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
DRV:64bit: - [2015/01/10 16:38:37 | 000,942,808 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2014/12/14 23:43:40 | 000,035,992 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2014/12/14 20:01:38 | 000,049,304 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcvidrv.sys -- (ManyCam)
DRV:64bit: - [2014/12/12 16:13:03 | 000,019,600 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:64bit: - [2014/12/07 23:59:39 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2014/11/22 02:46:30 | 000,038,032 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2014/11/21 06:14:12 | 000,093,400 | ---- | M] (Malwarebytes Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon)
DRV:64bit: - [2014/11/15 14:04:09 | 000,032,320 | ---- | M] (FNet Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FNETTBOH_305.SYS -- (FNETTBOH_305)
DRV:64bit: - [2014/10/09 09:02:39 | 000,195,728 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2014/07/28 13:52:00 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2014/07/17 17:05:06 | 000,125,584 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2014/06/04 15:17:14 | 000,021,184 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:64bit: - [2014/05/28 18:32:06 | 000,034,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xb1usb.sys -- (xb1usb)
DRV:64bit: - [2014/05/13 11:57:20 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)
DRV:64bit: - [2014/05/02 12:39:12 | 000,100,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
DRV:64bit: - [2014/04/17 12:43:46 | 000,689,840 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2014/01/23 20:26:38 | 000,021,656 | ---- | M] (Echobit, LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evolve.sys -- (EvolveVirtualAdapter)
DRV:64bit: - [2013/10/01 18:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2013/03/19 17:25:36 | 000,031,744 | ---- | M] (Motorola Mobility Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motport.sys -- (motport)
DRV:64bit: - [2013/03/19 17:25:36 | 000,031,744 | ---- | M] (Motorola Mobility Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motmodem.sys -- (motmodem)
DRV:64bit: - [2013/03/19 17:25:28 | 000,023,552 | ---- | M] (Motorola Mobility Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motccgp.sys -- (motccgp)
DRV:64bit: - [2012/10/24 20:28:47 | 000,015,936 | ---- | M] (FNet Co., Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\FNETURPX.SYS -- (FNETURPX)
DRV:64bit: - [2012/09/26 14:55:32 | 000,054,200 | ---- | M] (Thesycon GmbH, Germany) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dsiarhwprog_x64.sys -- (usbio)
DRV:64bit: - [2012/08/23 06:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 06:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012/08/21 12:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/05/12 12:31:00 | 000,121,416 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MijXfilt.sys -- (MotioninJoyXFilter)
DRV:64bit: - [2012/03/08 17:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2012/02/29 22:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/12/07 19:42:28 | 000,074,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2011/07/22 08:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV:64bit: - [2011/07/12 13:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV:64bit: - [2011/03/10 22:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 22:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/12/16 14:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2010/11/20 19:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/05 22:45:48 | 000,438,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/07/01 13:21:50 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc)
DRV:64bit: - [2010/06/25 09:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2010/06/11 13:37:14 | 000,015,368 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AsrAppCharger.sys -- (AsrAppCharger)
DRV:64bit: - [2009/12/30 10:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2009/09/21 01:43:52 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_mdm.sys -- (ss_mdm)
DRV:64bit: - [2009/09/21 01:43:52 | 000,127,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bus.sys -- (ss_bus)
DRV:64bit: - [2009/09/21 01:43:52 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV:64bit: - [2009/07/13 17:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 17:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 17:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 16:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/07/13 16:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:64bit: - [2009/06/10 12:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 12:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 12:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 12:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/03/18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2009/02/24 17:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcdbus.sys -- (mcdbus)
DRV:64bit: - [2008/05/06 15:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:64bit: - [2007/02/15 16:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV:64bit: - [2006/11/29 14:24:49 | 000,024,064 | ---- | M] (America Online, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wanatw64.sys -- (wanatw)
DRV - [2014/12/24 12:44:03 | 000,026,528 | ---- | M] (REALiX™) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
DRV - [2013/11/19 15:10:36 | 000,034,848 | ---- | M] (IObit.com) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys -- (RegFilter)
DRV - [2013/11/19 15:10:36 | 000,023,016 | ---- | M] (IObit.com) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys -- (UrlFilter)
DRV - [2013/03/23 14:48:48 | 000,023,048 | ---- | M] (IObit) [File_System | On_Demand | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys -- (FileMonitor)
DRV - [2012/09/10 22:31:56 | 000,147,704 | ---- | M] (CyberLink Corp.) [2012/10/24 21:37:32] [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl -- ({73526619-C24F-470B-9BED-53D455FBB5C6})
DRV - [2012/06/20 01:35:49 | 000,083,704 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys -- (ntk_PowerDVD12)
DRV - [2011/06/02 10:08:34 | 000,017,864 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys -- (cpudrv64)
DRV - [2010/11/01 06:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2009/07/13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007/02/15 16:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006/12/24 05:15:18 | 000,027,904 | ---- | M] (Compuware Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\xPADFL02.sys -- (XPADFL02)
DRV - [2005/03/09 20:50:16 | 000,033,792 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\libusb0.sys -- (libusb0)
 
 
========== Standard Registry (All) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft..../?LinkId=255141
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft..../?LinkId=255141
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft..../?LinkId=255141
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft..../?LinkId=255141
IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files (x86)\AIM Toolbar\aimtb.dll (AOL Inc.)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKU\.DEFAULT\..\SearchScopes\{B377D427-1F19-4E6D-91E0-9A0E8683E1BA}: "URL" = http://www.google.co...1I7AURU_enUS507
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKU\S-1-5-18\..\SearchScopes\{B377D427-1F19-4E6D-91E0-9A0E8683E1BA}: "URL" = http://www.google.co...1I7AURU_enUS507
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
 
IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
 
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wwe.com/
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\SearchScopes,DefaultScope = {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\SearchScopes\{8F5AFE5A-C311-43C4-8F20-3A79CA4B8907}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\SearchScopes\{AF4567E4-9E84-41CA-AD29-EE3375472E02}: "URL" = http://search.yahoo....&p={searchTerms}
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\SearchScopes\{B55CC1D5-3B5D-42FD-946B-E7AB5B45EED5}: "URL" = http://www.google.co...1I7AURU_enUS507
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.fas...&cc=US&unqvl=55
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..\SearchScopes\DDE0045B74094132960EC24A2BF4E399: "URL" = http://search.yahoo....&p={searchTerms}
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1;localhost;10.*;192.168.*;127.0.0.1:895;127.0.0.1:896;192.168.*.*;<local>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo!"
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\gamerpc\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\gamerpc\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\gamerpc\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\gamerpc\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\gamerpc\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\electronicarts.com/GameFacePlugin: C:\Users\gamerpc\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll (Electronic Arts)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2014/11/15 15:54:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014/12/11 10:05:42 | 000,000,000 | ---D | M]
 
[2014/05/02 03:07:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gamerpc\AppData\Roaming\mozilla\Extensions
[2015/01/10 16:04:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gamerpc\AppData\Roaming\mozilla\Firefox\Profiles\65ur39ez.default-1373611710946\extensions
[2015/01/05 12:24:06 | 000,000,000 | ---D | M] (Ads Removal) -- C:\Users\gamerpc\AppData\Roaming\mozilla\Firefox\Profiles\65ur39ez.default-1373611710946\extensions\[email protected]
[2015/01/10 16:04:23 | 000,000,000 | ---D | M] (Advanced SystemCare Surfing Protection) -- C:\Users\gamerpc\AppData\Roaming\mozilla\Firefox\Profiles\65ur39ez.default-1373611710946\extensions\[email protected]
[2014/12/02 11:18:47 | 000,000,000 | ---D | M] (Advanced SystemCare Surfing Protection) -- C:\Users\gamerpc\AppData\Roaming\mozilla\Firefox\Profiles\65ur39ez.default-1373611710946\extensions\[email protected]
[2015/01/13 14:02:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gamerpc\AppData\Roaming\mozilla\Firefox\Profiles\yogn1qzz.default\extensions
[2014/08/19 10:34:05 | 000,002,451 | ---- | M] () -- C:\Users\gamerpc\AppData\Roaming\mozilla\firefox\profiles\65ur39ez.default-1373611710946\searchplugins\aolsearch.xml
[2014/04/29 20:26:02 | 000,000,792 | ---- | M] () -- C:\Users\gamerpc\AppData\Roaming\mozilla\firefox\profiles\65ur39ez.default-1373611710946\searchplugins\yahoo_ff.xml
[2014/12/14 12:59:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/01/17 21:51:15 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\PROGRAM FILES (X86)\IOBIT APPS TOOLBAR\FF
File not found (No name found) -- C:\USERS\GAMERPC\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\65UR39EZ.DEFAULT-1373611710946\EXTENSIONS\TIDYNETWORK@TIDYNETWORK
[2014/12/02 22:31:20 | 000,227,048 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll
[2014/10/25 17:01:28 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll
[2014/10/25 17:01:30 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll
[2014/10/25 17:01:31 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll
[2014/10/25 17:01:32 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll
[2014/10/25 17:01:33 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll
[2014/10/25 17:01:36 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll
[2012/06/28 07:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
 
========== Chrome  ==========
 
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ackkocjhcalcpgpfjcoinogdejibgbho\1.2.1_1\
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cljcgchbnolheggdgaeclffeagnnmhno\0.993_1\
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejgfoklefkbjadjcgjmnhfbdfjolojnn\0.19.7.1_1\
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbepadcdhpahlikldbochnhfleejiokp\0.19.7.1_1\
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nopeodilnmhhlfageeohjojginlgeljk\2.0_1\
CHR - Extension: No name found = C:\Users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgmjaihnmedpcdkjcgigocogcbffgkbn\1.0.97_0\
 
O1 HOSTS File: ([2015/01/12 13:13:34 | 000,000,035 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll File not found
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\urlredir.dll (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll (Microsoft Corporation)
O2:64bit: - BHO: (Adblock Plus for IE Browser Helper Object) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Ads Removal) - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\urlredir.dll (Microsoft Corporation)
O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\grooveex.dll (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (AOL Messaging Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files (x86)\AIM Toolbar\aimtb.dll (AOL Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\SysNative\spool\drivers\x64\3\EKIJ5000MUI.exe (Eastman Kodak Company)
O4:64bit: - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RunDLLEntry] C:\Windows\SysNative\AmbRunE.DLL (Creative Technology Ltd.)
O4:64bit: - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [WD Quick View] C:\Program Files\Western Digital\WD SmartWare\WDDMStatus.exe (Western Digital Technologies, Inc.)
O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Zune Launcher] C:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CloneCDTray] C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [CTSyncService] C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.EXE File not found
O4 - HKLM..\Run: [EKStatusMonitor] C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe (Eastman Kodak Company)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [HostManager] C:\Program Files (x86)\Common Files\AOL\1352139576\ee\aolsoftware.exe (AOL Inc.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [IObit Malware Fighter] C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (IObit)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [LTCM Client] C:\Program Files (x86)\LTCM Client\ltcmClient.exe (Leader Technologies Inc.)
O4 - HKLM..\Run: [PowerDVD12Agent] C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PowerDVD12DMREngine] C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe (CyberLink)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Apps\WDDriveAutoUnlock.exe (Western Digital)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKLM..\Run: [XFastUSB] C:\Program Files (x86)\XFastUSB\XFastUsb.exe (FNet Co., Ltd.)
O4 - HKU\.DEFAULT..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto File not found
O4 - HKU\S-1-5-18..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto File not found
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [Advanced SystemCare Ultimate] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [AIM] C:\Program Files (x86)\AIM\aim.exe (AOL Inc.)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [DAEMON Tools Pro Agent] C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [EvolveClient] C:\Program Files\Echobit\Evolve\EvolveClient.exe (Echobit LLC)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [Google Update] C:\Users\gamerpc\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [GoogleChromeAutoLaunch_B39D6C0379323E21774615E279B6C2EB] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\ManyCam.exe (Visicom Media Inc.)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe (ooVoo LLC)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [SkyDrive] C:\Users\gamerpc\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [Skype] C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware)
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKLM..\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax",DllRegisterServer File not found
O4 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001..\RunOnce: [Adobe Speed Launcher] 1421787999 File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogOff = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRun = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogOff = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0
O7 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1692155839-1707551626-4126777635-1001\..Trusted Domains: aol.com ([objects] * is out of zone range -  5)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} http://xp.yimg.com/e...nst_current.cab (YInstStarter Class)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.syste...el_4.5.23.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FD7777E4-C973-442F-99B2-C53AE23EC24F}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corp.)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corp.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{4a8281cf-b917-11e3-8e42-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{4a8281cf-b917-11e3-8e42-00038a000015}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{ee71e2ca-6586-11e2-9f76-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{ee71e2ca-6586-11e2-9f76-806e6f6e6963}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
 CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2015/01/20 15:08:15 | 000,000,000 | ---D | C] -- C:\_OTL
[2015/01/15 23:58:33 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\AppData\Local\THQ
[2015/01/15 23:58:16 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2015/01/15 23:58:16 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2015/01/15 23:58:16 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2015/01/15 23:58:16 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2015/01/15 23:58:13 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2015/01/15 23:58:13 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2015/01/15 12:44:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
[2015/01/14 15:07:21 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\AppData\Local\CrashDumps
[2015/01/14 14:18:45 | 004,187,592 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\gamerpc\Desktop\tdsskiller.exe
[2015/01/14 14:15:35 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\Desktop\bluescreenview-x64
[2015/01/14 02:29:09 | 004,877,488 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2015/01/13 14:16:28 | 005,198,336 | ---- | C] (AVAST Software) -- C:\Users\gamerpc\Desktop\aswMBR.exe
[2015/01/13 13:37:45 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2015/01/13 13:22:06 | 005,553,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2015/01/13 13:22:05 | 003,971,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2015/01/13 13:22:05 | 003,916,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2015/01/13 13:22:04 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2015/01/13 13:22:03 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2015/01/13 13:22:03 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2015/01/13 13:21:50 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2015/01/13 13:21:46 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWbPrxy.exe
[2015/01/10 16:38:37 | 000,942,808 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2015/01/10 16:38:37 | 000,073,800 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll
[2015/01/10 16:03:48 | 000,000,000 | ---D | C] -- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
[2015/01/10 16:03:47 | 000,000,000 | ---D | C] -- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
[2015/01/10 16:03:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare Ultimate 7
[2015/01/08 21:00:47 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\AppData\Local\{8983BA02-BEEE-44BF-87FB-041065FFE05B}
[2015/01/07 16:22:32 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2015/01/07 16:07:14 | 001,707,939 | ---- | C] (Thisisu) -- C:\Users\gamerpc\Desktop\JRT.exe
[2015/01/07 14:28:12 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\Desktop\FRST-OlderVersion
[2015/01/06 20:50:55 | 000,000,000 | ---D | C] -- C:\FRST
[2015/01/06 20:49:19 | 002,124,288 | ---- | C] (Farbar) -- C:\Users\gamerpc\Desktop\FRST64.exe
[2015/01/06 17:14:54 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\Desktop\Wii backup
[2015/01/05 05:07:49 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2015/01/04 23:03:50 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2015/01/04 23:03:50 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2015/01/04 23:03:46 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2015/01/04 23:03:24 | 000,000,000 | --SD | C] -- C:\ComboFix
[2015/01/04 23:00:29 | 000,000,000 | ---D | C] -- C:\Qoobox
[2015/01/04 22:59:49 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2015/01/02 00:51:03 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\Desktop\BioShock Infinite Steam Trainer +8 MrAntiFun
[2015/01/01 02:53:35 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\Desktop\S4-2YT
[2015/01/01 01:04:52 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\Desktop\S4-1YT
[2014/12/29 23:49:09 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\AppData\Roaming\Mupen64Plus
[2014/12/27 17:09:33 | 000,620,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe
[2014/12/27 17:00:58 | 001,540,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco64.dll
[2014/12/27 17:00:58 | 000,195,728 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2014/12/27 17:00:58 | 000,030,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2014/12/27 17:00:48 | 032,099,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2014/12/27 17:00:48 | 013,288,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2014/12/27 17:00:48 | 010,770,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2014/12/27 17:00:48 | 000,994,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2014/12/27 17:00:48 | 000,876,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2014/12/27 17:00:48 | 000,353,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2014/12/27 17:00:48 | 000,306,328 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2014/12/27 17:00:48 | 000,178,632 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2014/12/27 17:00:47 | 017,264,312 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2014/12/27 17:00:47 | 013,202,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2014/12/27 17:00:47 | 010,710,160 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2014/12/27 17:00:47 | 003,610,440 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2014/12/27 17:00:47 | 003,248,968 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2014/12/27 17:00:47 | 001,895,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434709.dll
[2014/12/27 17:00:47 | 001,556,624 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434709.dll
[2014/12/27 17:00:47 | 000,968,336 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2014/12/27 17:00:47 | 000,942,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2014/12/27 17:00:47 | 000,928,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2014/12/27 17:00:47 | 000,906,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2014/12/27 17:00:47 | 000,165,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2014/12/27 17:00:33 | 025,460,552 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2014/12/27 17:00:33 | 020,465,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2014/12/27 01:28:16 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\gamerpc\Desktop\OTL.exe
[2014/12/26 18:14:08 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\AppData\Roaming\SUPERAntiSpyware.com
[2014/12/26 18:12:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2014/12/26 18:12:01 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2014/12/26 18:12:01 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2014/12/26 15:53:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2014/12/26 15:52:28 | 000,000,000 | ---D | C] -- C:\Users\gamerpc\mbar
[2014/12/24 19:36:18 | 000,000,000 | ---D | C] -- C:\ManyCam
[2014/12/24 19:34:49 | 000,000,000 | ---D | C] -- C:\Echobit
[2014/12/24 19:32:54 | 000,000,000 | ---D | C] -- C:\acccore
[2014/12/24 12:44:03 | 000,026,528 | ---- | C] (REALiX™) -- C:\Windows\SysWow64\drivers\HWiNFO64A.SYS
[2014/12/23 14:35:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam
[2013/02/23 21:48:08 | 000,140,736 | ---- | C] (Motorola, Inc.) -- C:\Users\gamerpc\Setup.exe
[2012/10/23 21:33:02 | 015,432,864 | ---- | C] (ManyCam LLC) -- C:\Users\gamerpc\ManyCam.exe
[2012/10/23 21:32:58 | 001,973,368 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Users\gamerpc\avg_remover_stf_x86_2012_2125.exe
[2012/10/23 21:32:57 | 030,218,224 | ---- | C] (IObit                                                       ) -- C:\Users\gamerpc\asc-setup.exe
[2012/10/23 21:32:40 | 000,243,360 | ---- | C] (Adobe Systems, Inc.) -- C:\Users\gamerpc\uninstall_flash_player.exe
[1998/04/26 21:00:00 | 000,570,128 | ---- | C] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\DAO350.DLL
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2015/01/20 14:53:00 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfa712be8cef20.job
[2015/01/20 14:53:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cfa712bccbb08c.job
[2015/01/20 14:43:00 | 000,000,916 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1692155839-1707551626-4126777635-1001UA.job
[2015/01/20 14:29:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/01/20 13:40:11 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/01/20 13:19:41 | 000,028,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/01/20 13:19:41 | 000,028,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/01/20 13:04:13 | 000,000,414 | ---- | M] () -- C:\Windows\tasks\SlimDrivers Startup.job
[2015/01/20 13:01:57 | 000,016,152 | ---- | M] () -- C:\Windows\SysNative\drivers\SWDUMon.sys
[2015/01/20 13:00:22 | 000,000,498 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Update Version3 Startup Task.job
[2015/01/20 12:59:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/01/20 12:59:10 | 2121,359,359 | -HS- | M] () -- C:\hiberfil.sys
[2015/01/19 19:43:00 | 000,000,864 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1692155839-1707551626-4126777635-1001Core.job
[2015/01/19 02:22:34 | 000,119,754 | ---- | M] () -- C:\Users\gamerpc\Speks as a human.PNG
[2015/01/18 19:50:04 | 000,024,429 | ---- | M] () -- C:\Users\gamerpc\Tasha, Thalia and Tabbitha.PNG
[2015/01/18 19:50:03 | 000,011,687 | ---- | M] () -- C:\Users\gamerpc\Tyson.PNG
[2015/01/17 17:28:00 | 000,005,776 | ---- | M] () -- C:\Users\gamerpc\coin.PNG
[2015/01/17 13:53:32 | 000,002,155 | ---- | M] () -- C:\Users\Public\Desktop\Driver Booster 2.lnk
[2015/01/17 13:48:47 | 007,095,976 | ---- | M] () -- C:\Users\gamerpc\HowlNoon 101.wmv
[2015/01/17 13:46:44 | 000,444,719 | ---- | M] () -- C:\Users\gamerpc\LACBishopRHCWCAEETTD WBG.png
[2015/01/16 02:43:55 | 000,432,373 | ---- | M] () -- C:\Users\gamerpc\Site banner.PNG
[2015/01/15 18:31:27 | 000,774,842 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2015/01/15 18:31:27 | 000,662,504 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/01/15 18:31:27 | 000,122,114 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/01/15 18:31:11 | 000,774,842 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/01/15 17:33:20 | 000,002,297 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare Ultimate 7.lnk
[2015/01/15 12:44:00 | 000,001,239 | ---- | M] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk
[2015/01/14 23:56:53 | 000,002,109 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/01/14 14:19:17 | 000,380,416 | ---- | M] () -- C:\Users\gamerpc\Desktop\2gzomcdw.exe
[2015/01/14 14:18:45 | 004,187,592 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\gamerpc\Desktop\tdsskiller.exe
[2015/01/14 02:29:27 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/01/14 02:29:27 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/01/14 02:29:11 | 004,877,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2015/01/13 15:53:10 | 1039,165,976 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2015/01/13 14:16:45 | 005,198,336 | ---- | M] (AVAST Software) -- C:\Users\gamerpc\Desktop\aswMBR.exe
[2015/01/13 14:10:39 | 000,037,624 | ---- | M] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/01/13 14:10:19 | 018,467,928 | ---- | M] () -- C:\Users\gamerpc\Desktop\RogueKillerX64.exe
[2015/01/13 13:39:33 | 000,488,969 | ---- | M] () -- C:\Users\gamerpc\imggg725.jpg
[2015/01/13 13:39:33 | 000,098,227 | ---- | M] () -- C:\Users\gamerpc\IMG_13012015_211712.png
[2015/01/12 13:13:34 | 000,000,035 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2015/01/12 00:02:42 | 000,014,824 | ---- | M] () -- C:\Users\gamerpc\giantdiapertinypuppies.png
[2015/01/11 23:45:54 | 004,868,917 | ---- | M] () -- C:\Users\gamerpc\Desktop\Pokemon - Liquid Crystal.ips
[2015/01/10 16:38:37 | 000,942,808 | ---- | M] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2015/01/10 16:38:37 | 000,107,552 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
[2015/01/10 16:38:37 | 000,073,800 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll
[2015/01/10 13:33:54 | 000,151,326 | ---- | M] () -- C:\Users\gamerpc\Lilly LAClayChiveCamFVCOHP NBG.png
[2015/01/09 14:05:54 | 000,341,865 | ---- | M] () -- C:\Users\gamerpc\imggg720.jpg
[2015/01/09 13:54:20 | 000,076,467 | ---- | M] () -- C:\Users\gamerpc\popup error.jpg
[2015/01/08 20:59:40 | 000,017,400 | ---- | M] () -- C:\Users\gamerpc\luckytooktwotonesbootie.png
[2015/01/07 16:07:14 | 001,707,939 | ---- | M] (Thisisu) -- C:\Users\gamerpc\Desktop\JRT.exe
[2015/01/07 15:52:34 | 000,000,008 | RHS- | M] () -- C:\Users\gamerpc\ntuser.pol
[2015/01/07 15:52:33 | 000,000,008 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2015/01/07 14:28:12 | 002,124,288 | ---- | M] (Farbar) -- C:\Users\gamerpc\Desktop\FRST64.exe
[2015/01/01 18:49:16 | 000,000,220 | ---- | M] () -- C:\Users\gamerpc\Desktop\BioShock Infinite.url
[2015/01/01 00:22:54 | 000,000,222 | ---- | M] () -- C:\Users\gamerpc\Desktop\SONIC THE HEDGEHOG 4 Episode II.url
[2015/01/01 00:22:54 | 000,000,222 | ---- | M] () -- C:\Users\gamerpc\Desktop\SONIC THE HEDGEHOG 4 Episode I.url
[2014/12/30 20:36:23 | 000,000,081 | ---- | M] () -- C:\Users\gamerpc\Documents\xbox360.cp
[2014/12/30 13:19:43 | 001,051,994 | ---- | M] () -- C:\Users\gamerpc\Lucky Clayton LRRPLADWHP WBG.png
[2014/12/30 01:31:06 | 000,000,081 | ---- | M] () -- C:\Users\gamerpc\Documents\xbox1.cp
[2014/12/30 01:22:39 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_xb1usb_01011.Wdf
[2014/12/29 00:30:32 | 000,000,635 | ---- | M] () -- C:\Windows\Dc.INI
[2014/12/27 01:28:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\gamerpc\Desktop\OTL.exe
[2014/12/26 18:12:06 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2014/12/26 15:05:06 | 002,173,952 | ---- | M] () -- C:\Users\gamerpc\Desktop\adwcleaner_4.106.exe
[2014/12/24 12:44:03 | 000,026,528 | ---- | M] (REALiX™) -- C:\Windows\SysWow64\drivers\HWiNFO64A.SYS
[2014/12/24 12:43:49 | 000,000,026 | ---- | M] () -- C:\Windows\Zone.Identifier
[2014/12/23 14:35:05 | 000,001,060 | ---- | M] () -- C:\Users\gamerpc\Application Data\Microsoft\Internet Explorer\Quick Launch\ManyCam.lnk
[2014/12/23 14:35:05 | 000,001,036 | ---- | M] () -- C:\Users\Public\Desktop\ManyCam.lnk
[2014/12/22 21:14:46 | 000,616,563 | ---- | M] () -- C:\Users\gamerpc\New Dipbecca banner.PNG
[2014/12/22 21:14:44 | 000,540,579 | ---- | M] () -- C:\Users\gamerpc\New Two-Tone banner.PNG
[2014/12/22 21:02:22 | 000,332,350 | ---- | M] () -- C:\Users\gamerpc\New Mickey Banner.PNG
[2014/12/22 21:02:22 | 000,287,320 | ---- | M] () -- C:\Users\gamerpc\New Lucky banner.PNG
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2015/01/19 02:22:26 | 000,119,754 | ---- | C] () -- C:\Users\gamerpc\Speks as a human.PNG
[2015/01/18 19:50:02 | 000,024,429 | ---- | C] () -- C:\Users\gamerpc\Tasha, Thalia and Tabbitha.PNG
[2015/01/18 19:50:02 | 000,011,687 | ---- | C] () -- C:\Users\gamerpc\Tyson.PNG
[2015/01/17 17:27:59 | 000,005,776 | ---- | C] () -- C:\Users\gamerpc\coin.PNG
[2015/01/17 13:47:30 | 007,095,976 | ---- | C] () -- C:\Users\gamerpc\HowlNoon 101.wmv
[2015/01/17 13:46:35 | 000,444,719 | ---- | C] () -- C:\Users\gamerpc\LACBishopRHCWCAEETTD WBG.png
[2015/01/16 02:43:00 | 000,432,373 | ---- | C] () -- C:\Users\gamerpc\Site banner.PNG
[2015/01/14 14:19:16 | 000,380,416 | ---- | C] () -- C:\Users\gamerpc\Desktop\2gzomcdw.exe
[2015/01/13 14:53:16 | 1039,165,976 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2015/01/13 14:10:19 | 018,467,928 | ---- | C] () -- C:\Users\gamerpc\Desktop\RogueKillerX64.exe
[2015/01/13 13:39:31 | 000,098,227 | ---- | C] () -- C:\Users\gamerpc\IMG_13012015_211712.png
[2015/01/13 13:39:26 | 000,488,969 | ---- | C] () -- C:\Users\gamerpc\imggg725.jpg
[2015/01/13 13:37:46 | 000,037,624 | ---- | C] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/01/12 00:03:24 | 000,014,824 | ---- | C] () -- C:\Users\gamerpc\giantdiapertinypuppies.png
[2015/01/11 23:45:54 | 004,868,917 | ---- | C] () -- C:\Users\gamerpc\Desktop\Pokemon - Liquid Crystal.ips
[2015/01/10 16:03:45 | 000,002,297 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare Ultimate 7.lnk
[2015/01/10 13:33:51 | 000,151,326 | ---- | C] () -- C:\Users\gamerpc\Lilly LAClayChiveCamFVCOHP NBG.png
[2015/01/09 14:05:48 | 000,341,865 | ---- | C] () -- C:\Users\gamerpc\imggg720.jpg
[2015/01/09 13:54:10 | 000,076,467 | ---- | C] () -- C:\Users\gamerpc\popup error.jpg
[2015/01/08 21:44:27 | 000,017,400 | ---- | C] () -- C:\Users\gamerpc\luckytooktwotonesbootie.png
[2015/01/04 23:03:50 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2015/01/04 23:03:50 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2015/01/04 23:03:50 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2015/01/04 23:03:50 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2015/01/04 23:03:50 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2015/01/01 18:49:16 | 000,000,220 | ---- | C] () -- C:\Users\gamerpc\Desktop\BioShock Infinite.url
[2015/01/01 00:22:54 | 000,000,222 | ---- | C] () -- C:\Users\gamerpc\Desktop\SONIC THE HEDGEHOG 4 Episode II.url
[2015/01/01 00:22:54 | 000,000,222 | ---- | C] () -- C:\Users\gamerpc\Desktop\SONIC THE HEDGEHOG 4 Episode I.url
[2014/12/30 20:36:23 | 000,000,081 | ---- | C] () -- C:\Users\gamerpc\Documents\xbox360.cp
[2014/12/30 13:13:39 | 001,051,994 | ---- | C] () -- C:\Users\gamerpc\Lucky Clayton LRRPLADWHP WBG.png
[2014/12/30 01:31:06 | 000,000,081 | ---- | C] () -- C:\Users\gamerpc\Documents\xbox1.cp
[2014/12/30 01:22:39 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_xb1usb_01011.Wdf
[2014/12/29 14:50:44 | 000,001,239 | ---- | C] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk
[2014/12/29 00:17:30 | 000,000,635 | ---- | C] () -- C:\Windows\Dc.INI
[2014/12/27 17:00:47 | 000,027,983 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2014/12/26 18:12:06 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2014/12/26 15:05:06 | 002,173,952 | ---- | C] () -- C:\Users\gamerpc\Desktop\adwcleaner_4.106.exe
[2014/12/24 12:42:51 | 000,000,026 | ---- | C] () -- C:\Windows\Zone.Identifier
[2014/12/23 14:35:05 | 000,001,060 | ---- | C] () -- C:\Users\gamerpc\Application Data\Microsoft\Internet Explorer\Quick Launch\ManyCam.lnk
[2014/12/23 14:35:05 | 000,001,036 | ---- | C] () -- C:\Users\Public\Desktop\ManyCam.lnk
[2014/12/22 20:52:47 | 000,616,563 | ---- | C] () -- C:\Users\gamerpc\New Dipbecca banner.PNG
[2014/12/22 20:52:47 | 000,540,579 | ---- | C] () -- C:\Users\gamerpc\New Two-Tone banner.PNG
[2014/12/22 20:52:47 | 000,287,320 | ---- | C] () -- C:\Users\gamerpc\New Lucky banner.PNG
[2014/12/22 20:52:46 | 000,332,350 | ---- | C] () -- C:\Users\gamerpc\New Mickey Banner.PNG
[2014/12/20 01:20:25 | 000,009,483 | ---- | C] () -- C:\Users\gamerpc\shawnfeedsbabyrose.png
[2014/12/20 00:04:59 | 000,027,494 | ---- | C] () -- C:\Users\gamerpc\lucktonebeach.png
[2014/12/19 19:04:22 | 000,010,274 | ---- | C] () -- C:\Users\gamerpc\amber.png
[2014/12/19 00:16:04 | 000,017,531 | ---- | C] () -- C:\Users\gamerpc\Hatchet (updated).PNG
[2014/12/18 23:22:05 | 000,051,482 | ---- | C] () -- C:\Users\gamerpc\spaceships.png
[2014/12/18 22:48:37 | 000,144,635 | ---- | C] () -- C:\Users\gamerpc\endopuppet.png
[2014/12/18 17:30:38 | 000,021,357 | ---- | C] () -- C:\Users\gamerpc\thankyoujack.png
[2014/12/18 00:29:07 | 000,126,687 | ---- | C] () -- C:\Users\gamerpc\Family Portrait.jpg
[2014/12/14 20:57:13 | 000,032,726 | ---- | C] () -- C:\Users\gamerpc\dfhghdfthtfjtfjky.png
[2014/12/14 20:51:54 | 000,047,193 | ---- | C] () -- C:\Users\gamerpc\summer.png
[2014/12/13 23:16:14 | 000,010,095 | ---- | C] () -- C:\Users\gamerpc\trinket.png
[2014/12/13 23:12:20 | 000,014,431 | ---- | C] () -- C:\Users\gamerpc\luckyjrssister.png
[2014/12/13 22:59:53 | 000,009,637 | ---- | C] () -- C:\Users\gamerpc\luckyjrsbrother.png
[2014/12/13 22:25:48 | 000,029,302 | ---- | C] () -- C:\Users\gamerpc\luckyjrandgirl.png
[2014/12/13 22:17:57 | 000,013,713 | ---- | C] () -- C:\Users\gamerpc\luckyonca.png
[2014/12/10 00:08:59 | 000,010,052 | ---- | C] () -- C:\Users\gamerpc\licklick.png
[2014/12/09 19:01:38 | 000,248,204 | ---- | C] () -- C:\Users\gamerpc\twotone (3).png
[2014/12/09 18:50:09 | 000,173,674 | ---- | C] () -- C:\Users\gamerpc\luna.png
[2014/12/09 18:24:14 | 000,458,692 | ---- | C] () -- C:\Users\gamerpc\lilvee.png
[2014/12/06 22:44:09 | 000,015,682 | ---- | C] () -- C:\Users\gamerpc\zaniluvslucky.png
[2014/11/29 23:52:38 | 000,050,215 | ---- | C] () -- C:\Users\gamerpc\averypuppychristmas.png
[2014/11/25 10:22:10 | 000,498,038 | ---- | C] () -- C:\Users\gamerpc\imggg678.jpg
[2014/11/25 10:22:05 | 000,372,086 | ---- | C] () -- C:\Users\gamerpc\imggg677.jpg
[2014/11/22 13:42:55 | 000,676,503 | ---- | C] () -- C:\Users\gamerpc\Lucky COPDALTD.png
[2014/11/22 13:42:53 | 000,366,548 | ---- | C] () -- C:\Users\gamerpc\imggg675.jpg
[2014/11/22 13:42:48 | 000,543,456 | ---- | C] () -- C:\Users\gamerpc\imggg676.jpg
[2014/11/19 17:53:40 | 000,021,258 | ---- | C] () -- C:\Users\gamerpc\ezimba12914120174300.gif
[2014/11/19 17:03:12 | 000,007,267 | ---- | C] () -- C:\Users\gamerpc\luckytonekiss.png
[2014/11/19 16:52:11 | 000,007,044 | ---- | C] () -- C:\Users\gamerpc\babylucky.png
[2014/11/19 16:37:09 | 000,070,190 | ---- | C] () -- C:\Users\gamerpc\kionadomino.png
[2014/11/19 00:57:38 | 000,019,810 | ---- | C] () -- C:\Users\gamerpc\Mooch.JPG
[2014/11/17 22:29:47 | 000,653,212 | ---- | C] () -- C:\Users\gamerpc\1416263106_mjbear_twotonebottle.png
[2014/11/17 13:33:00 | 000,019,014 | ---- | C] () -- C:\Users\gamerpc\Two-tone (2).JPG
[2014/11/16 23:31:48 | 000,001,045 | ---- | C] () -- C:\Users\gamerpc\AOL Desktop 9.7.lnk
[2014/11/16 21:49:10 | 000,017,616 | ---- | C] () -- C:\Users\gamerpc\Lucky.JPG
[2014/11/15 23:14:09 | 000,018,107 | ---- | C] () -- C:\Users\gamerpc\galaxy.png
[2014/11/12 23:52:01 | 000,722,648 | ---- | C] () -- C:\Users\gamerpc\christmasdipbecca.gif
[2014/11/11 15:56:04 | 000,625,767 | ---- | C] () -- C:\Users\gamerpc\Banner.fw.png
[2014/11/09 22:31:31 | 000,004,302 | ---- | C] () -- C:\Users\gamerpc\lucktonenuzzle.png
[2014/11/09 22:09:16 | 000,008,952 | ---- | C] () -- C:\Users\gamerpc\lucktonedurp.png
[2014/11/09 14:02:33 | 001,444,515 | ---- | C] () -- C:\Users\gamerpc\Clayton Two-Tone Lucky TTGHPOTTMPTT WBG.png
[2014/11/08 22:12:37 | 000,006,371 | ---- | C] () -- C:\Users\gamerpc\dipstick.png
[2014/11/08 22:02:41 | 000,012,765 | ---- | C] () -- C:\Users\gamerpc\lucktonelineless.png
[2014/11/08 13:08:09 | 001,260,690 | ---- | C] () -- C:\Users\gamerpc\Clayton Two-Tone Lucky TTGHPOTTM WBG.png
[2014/11/07 13:24:33 | 000,027,182 | ---- | C] () -- C:\Users\gamerpc\babies.png
[2014/11/07 13:22:38 | 000,006,611 | ---- | C] () -- C:\Users\gamerpc\shane.png
[2014/11/06 20:52:27 | 000,005,325 | ---- | C] () -- C:\Users\gamerpc\lt.png
[2014/11/06 19:11:56 | 000,054,338 | ---- | C] () -- C:\Users\gamerpc\1526991_10203755840231187_7895809324876950220_n.jpg
[2014/11/06 19:08:37 | 000,010,890 | ---- | C] () -- C:\Users\gamerpc\lucktonekissies.png
[2014/11/05 21:26:55 | 000,010,972 | ---- | C] () -- C:\Users\gamerpc\tinyrosegiantfoody.png
[2014/11/05 00:28:30 | 000,090,242 | ---- | C] () -- C:\Users\gamerpc\Two-Tone Smiling.jpg
[2014/11/03 00:42:59 | 000,071,722 | ---- | C] () -- C:\Users\gamerpc\dr1lh.jpg
[2014/11/02 22:52:46 | 000,002,172 | ---- | C] () -- C:\Users\gamerpc\MT-X - Guide.lnk
[2014/10/31 19:52:13 | 000,683,889 | ---- | C] () -- C:\Users\gamerpc\proportions_guide_by_bittersweetdisease-d41ivgd.jpg
[2014/10/31 14:12:28 | 000,001,072 | ---- | C] () -- C:\Users\gamerpc\Linksys Smart Wi-Fi.lnk
[2014/10/30 23:41:35 | 000,200,295 | ---- | C] () -- C:\Users\gamerpc\1414738493_tucker199_trick_or_treat.png
[2014/10/30 21:07:34 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2014/10/30 21:07:33 | 000,240,128 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2014/10/30 21:07:31 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2014/10/30 21:07:29 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2014/10/28 18:14:44 | 000,041,867 | ---- | C] () -- C:\Users\gamerpc\Mickey Banner.GIF
[2014/10/28 15:43:11 | 000,066,274 | ---- | C] () -- C:\Users\gamerpc\chica.jpg
[2014/10/27 23:16:42 | 000,113,523 | ---- | C] () -- C:\Users\gamerpc\Goddess's Pups 2.jpg
[2014/10/27 17:13:42 | 000,271,688 | ---- | C] () -- C:\Users\gamerpc\Pepper's litter; Jaccob.jpg
[2014/10/27 17:13:42 | 000,152,387 | ---- | C] () -- C:\Users\gamerpc\Pepper's litter; Amy.jpg
[2014/10/27 16:55:37 | 000,022,460 | ---- | C] () -- C:\Users\gamerpc\lineartpups.png
[2014/10/27 16:22:06 | 000,009,019 | ---- | C] () -- C:\Users\gamerpc\Lucky.png
[2014/10/27 16:22:03 | 000,012,583 | ---- | C] () -- C:\Users\gamerpc\Pella.GIF
[2014/10/26 19:21:56 | 000,033,377 | ---- | C] () -- C:\Users\gamerpc\mickey_mouse_and_friends-1099.jpg
[2014/10/26 18:51:10 | 000,089,720 | ---- | C] () -- C:\Users\gamerpc\Halloween Pepper.GIF
[2014/10/25 01:16:16 | 000,128,785 | ---- | C] () -- C:\Users\gamerpc\1414215564.sugarmable_paddedpalacech2.pdf
[2014/10/24 20:53:21 | 000,107,190 | ---- | C] () -- C:\Users\gamerpc\aRT.GIF
[2014/10/24 00:08:15 | 000,013,417 | ---- | C] () -- C:\Users\gamerpc\Bunker 2.GIF
[2014/10/23 23:47:39 | 000,047,877 | ---- | C] () -- C:\Users\gamerpc\Bunker.JPG
[2014/10/23 10:50:22 | 000,432,849 | ---- | C] () -- C:\Users\gamerpc\imggg654.jpg
[2014/10/22 23:34:24 | 000,022,274 | ---- | C] () -- C:\Users\gamerpc\Pepper and her collar.JPG
[2014/10/21 01:08:08 | 000,026,233 | ---- | C] () -- C:\Users\gamerpc\Two tone.JPG
[2014/10/21 00:15:32 | 000,046,970 | ---- | C] () -- C:\Users\gamerpc\Pepe as a human sheet.JPG
[2014/10/19 21:46:43 | 000,027,984 | ---- | C] () -- C:\Users\gamerpc\Pepper as a human 2.JPG
[2014/10/19 17:04:21 | 000,164,080 | ---- | C] () -- C:\Users\gamerpc\1413752024_yuppup_i98980.png
[2014/10/17 22:11:29 | 000,097,902 | ---- | C] () -- C:\Users\gamerpc\Pepper birthday outfite.JPG
[2014/10/14 22:26:57 | 000,007,232 | ---- | C] () -- C:\Users\gamerpc\Specks.GIF
[2014/10/14 22:25:53 | 000,006,641 | ---- | C] () -- C:\Users\gamerpc\Missy.GIF
[2014/10/14 14:51:59 | 000,095,073 | ---- | C] () -- C:\Users\gamerpc\Pepper redesign 2.GIF
[2014/10/13 21:56:12 | 000,093,789 | ---- | C] () -- C:\Users\gamerpc\pepper redesign.GIF
[2014/10/13 12:21:24 | 002,961,270 | ---- | C] () -- C:\Users\gamerpc\Pongo Roger Haunted Mansion.bmp
[2014/10/13 12:21:20 | 001,957,674 | ---- | C] () -- C:\Users\gamerpc\Haunted Mansion StretchCruellaBadduns.bmp
[2014/10/13 10:53:29 | 000,356,766 | ---- | C] () -- C:\Users\gamerpc\NChive Plump WClay NBG.png
[2014/10/11 11:23:23 | 000,112,406 | ---- | C] () -- C:\Users\gamerpc\PatchIRMPR.JPG
[2014/10/11 11:23:22 | 000,121,650 | ---- | C] () -- C:\Users\gamerpc\PatchIROMPR.JPG
[2014/10/10 08:38:46 | 000,025,267 | ---- | C] () -- C:\Users\gamerpc\1412940804_diegesis_puzzle1 solution.jpg
[2014/10/10 08:31:31 | 000,192,622 | ---- | C] () -- C:\Users\gamerpc\1412940804_diegesis_puzzle1.jpg
[2014/10/08 17:13:02 | 000,117,737 | ---- | C] () -- C:\Users\gamerpc\Two tone banner.GIF
[2014/10/08 17:13:02 | 000,037,568 | ---- | C] () -- C:\Users\gamerpc\Lucky banner.JPG
[2014/10/08 13:12:11 | 000,054,347 | ---- | C] () -- C:\Users\gamerpc\Dipbecca.JPG
[2014/10/07 22:48:53 | 000,061,072 | ---- | C] () -- C:\Users\gamerpc\Capture.JPG
[2014/10/07 22:48:07 | 000,182,261 | ---- | C] () -- C:\Users\gamerpc\WIN_20141008_173158.JPG
[2014/10/07 18:55:05 | 000,037,620 | ---- | C] () -- C:\Users\gamerpc\css.png
[2014/10/07 18:49:45 | 001,324,718 | ---- | C] () -- C:\Users\gamerpc\screen.png
[2014/10/04 10:36:27 | 000,182,332 | ---- | C] () -- C:\Users\gamerpc\NChive Plump NBG.png
[2014/10/03 22:56:58 | 000,098,694 | ---- | C] () -- C:\Users\gamerpc\rosecolors.png
[2014/10/03 12:29:18 | 001,891,563 | ---- | C] () -- C:\Users\gamerpc\Scorch Cadpig Concept Design Talk WBG (2).png
[2014/10/02 12:11:35 | 001,325,172 | ---- | C] () -- C:\Users\gamerpc\Phoenix Clayton Shelby NOSCECC WBG.png
[2014/10/02 10:34:07 | 000,398,064 | ---- | C] () -- C:\Users\gamerpc\imggg643.jpg
[2014/10/02 10:34:07 | 000,347,798 | ---- | C] () -- C:\Users\gamerpc\imggg644 (2).jpg
[2014/10/02 10:34:02 | 000,707,822 | ---- | C] () -- C:\Users\gamerpc\imggg646 (2).jpg
[2014/10/01 10:26:45 | 000,347,798 | ---- | C] () -- C:\Users\gamerpc\imggg644.jpg
[2014/10/01 10:26:44 | 000,707,822 | ---- | C] () -- C:\Users\gamerpc\imggg646.jpg
[2014/09/28 22:02:48 | 000,008,191 | ---- | C] () -- C:\Users\gamerpc\kessie.png
[2014/09/27 12:36:30 | 000,065,528 | ---- | C] () -- C:\Users\gamerpc\IMG_27092014_163549.png
[2014/09/26 11:55:58 | 000,082,555 | ---- | C] () -- C:\Users\gamerpc\Hi.png
[2014/09/24 23:05:52 | 000,022,784 | ---- | C] () -- C:\Users\gamerpc\lionrobots.png
[2014/09/23 21:42:07 | 000,000,132 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\Adobe Targa Format CS6 Prefs
[2014/09/23 21:16:32 | 000,001,536 | ---- | C] () -- C:\Users\gamerpc\babytones2.gif
[2014/09/23 12:15:33 | 001,780,363 | ---- | C] () -- C:\Users\gamerpc\LarTwo-Tone Wizzer Dipstick CATLTT.png
[2014/09/21 13:51:16 | 000,016,144 | ---- | C] () -- C:\Users\gamerpc\augustpulse.png
[2014/09/21 13:37:37 | 000,014,263 | ---- | C] () -- C:\Users\gamerpc\lucktone (3).png
[2014/09/20 23:19:42 | 000,117,146 | ---- | C] () -- C:\Users\gamerpc\1410991419.natsu-cat_base_set.png.jpg
[2014/09/20 22:22:33 | 000,228,545 | ---- | C] () -- C:\Users\gamerpc\1411277889_erin-cloverfox_crawling_fox.jpg
[2014/09/19 21:59:39 | 000,765,085 | ---- | C] () -- C:\Users\gamerpc\luckymimicspicasso.png
[2014/09/16 11:59:26 | 004,907,520 | ---- | C] () -- C:\Users\gamerpc\P1040822.JPG
[2014/09/16 11:59:26 | 004,551,168 | ---- | C] () -- C:\Users\gamerpc\P1040821.JPG
[2014/09/16 11:57:31 | 002,216,409 | ---- | C] () -- C:\Users\gamerpc\P1050068.JPG
[2014/09/16 11:57:22 | 002,372,487 | ---- | C] () -- C:\Users\gamerpc\P1050067.JPG
[2014/09/13 16:33:21 | 000,008,843 | ---- | C] () -- C:\Users\gamerpc\winterrose.png
[2014/09/13 16:25:16 | 000,011,883 | ---- | C] () -- C:\Users\gamerpc\fallhalloweenrose.png
[2014/09/13 16:25:09 | 000,006,438 | ---- | C] () -- C:\Users\gamerpc\devilvillepuppy_by_rosevee-d7yebm5.png
[2014/09/13 16:20:20 | 000,034,633 | ---- | C] () -- C:\Users\gamerpc\Funny Tigers.jpg
[2014/09/12 12:21:05 | 001,891,563 | ---- | C] () -- C:\Users\gamerpc\Scorch Cadpig Concept Design Talk WBG.png
[2014/09/12 00:51:30 | 000,009,745 | ---- | C] () -- C:\Users\gamerpc\bones.png
[2014/09/11 10:27:41 | 000,523,209 | ---- | C] () -- C:\Users\gamerpc\Scorch Cadpig Concept Design Talk NBG.png
[2014/09/11 00:09:01 | 000,206,749 | ---- | C] () -- C:\Users\gamerpc\piccy.jpg
[2014/09/09 00:27:23 | 000,143,190 | ---- | C] () -- C:\Users\gamerpc\Cadpig.jpg
[2014/09/05 23:44:21 | 000,010,197 | ---- | C] () -- C:\Users\gamerpc\twotonepaci.png
[2014/09/05 22:38:37 | 000,029,953 | ---- | C] () -- C:\Users\gamerpc\rosedal.png
[2014/09/05 22:02:32 | 000,633,665 | ---- | C] () -- C:\Users\gamerpc\cedric.png
[2014/09/05 00:30:48 | 000,024,171 | ---- | C] () -- C:\Users\gamerpc\pulse (3).png
[2014/09/05 00:24:26 | 000,032,681 | ---- | C] () -- C:\Users\gamerpc\lucky2.png
[2014/09/04 21:57:34 | 000,002,422 | ---- | C] () -- C:\Users\gamerpc\pulseav.png
[2014/09/04 21:54:39 | 000,011,050 | ---- | C] () -- C:\Users\gamerpc\pulse (2).png
[2014/09/04 21:42:21 | 000,002,478 | ---- | C] () -- C:\Users\gamerpc\august.png
[2014/09/04 20:23:32 | 000,017,759 | ---- | C] () -- C:\Users\gamerpc\1409889556_tailbiter_puppy.png
[2014/09/04 12:00:10 | 000,007,076 | ---- | C] () -- C:\Users\gamerpc\moshi.png
[2014/09/04 12:00:08 | 000,165,389 | ---- | C] () -- C:\Users\gamerpc\August.jpg
[2014/09/04 12:00:05 | 000,032,157 | ---- | C] () -- C:\Users\gamerpc\Air 3.png
[2014/09/04 11:43:42 | 000,432,467 | ---- | C] () -- C:\Users\gamerpc\imggg609.jpg
[2014/09/03 22:23:50 | 000,022,547 | ---- | C] () -- C:\Users\gamerpc\squishy.png
[2014/09/03 12:04:53 | 004,241,920 | ---- | C] () -- C:\Users\gamerpc\P1050909.JPG
[2014/09/03 11:52:34 | 002,655,946 | ---- | C] () -- C:\Users\gamerpc\P1130421.JPG
[2014/09/03 01:35:45 | 000,010,201 | ---- | C] () -- C:\Users\gamerpc\tthugsrose.png
[2014/09/03 01:16:33 | 000,006,348 | ---- | C] () -- C:\Users\gamerpc\rosegray.png
[2014/09/02 22:36:02 | 000,036,256 | ---- | C] () -- C:\Users\gamerpc\hotrod.png
[2014/09/01 22:03:10 | 000,389,862 | ---- | C] () -- C:\Users\gamerpc\bustaleu.png
[2014/09/01 20:17:17 | 000,010,565 | ---- | C] () -- C:\Users\gamerpc\Lucky and Two-Tone.png
[2014/08/31 23:12:05 | 000,196,084 | ---- | C] () -- C:\Users\gamerpc\NBG Shane FAIS.png
[2014/08/31 22:51:31 | 000,389,582 | ---- | C] () -- C:\Users\gamerpc\iagotac.png
[2014/08/30 22:03:57 | 000,012,847 | ---- | C] () -- C:\Users\gamerpc\girlpup.png
[2014/08/30 21:50:58 | 000,018,129 | ---- | C] () -- C:\Users\gamerpc\luckyjr.png
[2014/08/30 21:15:08 | 000,432,754 | ---- | C] () -- C:\Users\gamerpc\twotonebreaksrebecca.png
[2014/08/30 01:42:08 | 000,083,666 | ---- | C] () -- C:\Users\gamerpc\Fluffy.GIF
[2014/08/30 01:30:32 | 000,129,718 | ---- | C] () -- C:\Users\gamerpc\Andrea as mlp.PNG
[2014/08/30 01:22:34 | 000,009,112 | ---- | C] () -- C:\Users\gamerpc\blackbird (2).png
[2014/08/29 22:41:41 | 000,092,090 | ---- | C] () -- C:\Users\gamerpc\My baby pepe.gif
[2014/08/29 22:41:33 | 000,028,140 | ---- | C] () -- C:\Users\gamerpc\Timon.GIF
[2014/08/29 22:10:27 | 000,006,115 | ---- | C] () -- C:\Users\gamerpc\LuckTone (2).png
[2014/08/29 20:02:47 | 002,961,209 | ---- | C] () -- C:\Users\gamerpc\2014 Map.pdf
[2014/08/29 02:35:00 | 000,100,184 | ---- | C] () -- C:\Users\gamerpc\101 dal lucky.MHT
[2014/08/29 02:29:25 | 000,144,250 | ---- | C] () -- C:\Users\gamerpc\Pepper.MHT
[2014/08/28 23:31:30 | 000,009,112 | ---- | C] () -- C:\Users\gamerpc\blackbird.png
[2014/08/28 23:22:06 | 000,011,050 | ---- | C] () -- C:\Users\gamerpc\pulse.png
[2014/08/28 23:10:21 | 000,011,725 | ---- | C] () -- C:\Users\gamerpc\spyder.png
[2014/08/28 12:46:56 | 000,534,494 | ---- | C] () -- C:\Users\gamerpc\Kiara Cropped.png
[2014/08/27 14:46:56 | 000,084,820 | ---- | C] () -- C:\Users\gamerpc\Kovu's son.GIF
[2014/08/27 14:45:17 | 000,099,855 | ---- | C] () -- C:\Users\gamerpc\Kovu's daughter.GIF
[2014/08/27 13:55:41 | 000,006,651 | ---- | C] () -- C:\Users\gamerpc\Pulse and August.png
[2014/08/26 23:06:26 | 000,165,389 | ---- | C] () -- C:\Users\gamerpc\Picture0827140303_1.jpg
[2014/08/22 11:10:21 | 001,092,531 | ---- | C] () -- C:\Users\gamerpc\Lucky Fat Two-Tone BFWGC.png
[2014/08/19 17:57:56 | 000,014,950 | ---- | C] () -- C:\Users\gamerpc\plushieguard.png
[2014/08/14 12:27:56 | 001,433,814 | ---- | C] () -- C:\Users\gamerpc\Kit Library ReacFBC.png
[2014/08/05 15:50:48 | 000,201,263 | ---- | C] () -- C:\Users\gamerpc\101 Dalmatians Gift Toy Part 2.jpg
[2014/08/05 15:50:29 | 000,263,483 | ---- | C] () -- C:\Users\gamerpc\101 Dalmatians Gift Toy Part 1.jpg
[2014/08/05 15:50:25 | 000,299,736 | ---- | C] () -- C:\Users\gamerpc\Tiny Toons Flip Car.jpg
[2014/08/04 12:04:54 | 000,437,511 | ---- | C] () -- C:\Users\gamerpc\imggg587.jpg
[2014/08/04 12:04:54 | 000,420,524 | ---- | C] () -- C:\Users\gamerpc\imggg588.jpg
[2014/08/04 12:04:50 | 000,578,757 | ---- | C] () -- C:\Users\gamerpc\imggg589.jpg
[2014/08/02 23:57:13 | 000,004,439 | ---- | C] () -- C:\Users\gamerpc\new fic 2.rtf
[2014/08/01 19:54:20 | 000,003,526 | ---- | C] () -- C:\Users\gamerpc\rockford.aup
[2014/08/01 19:54:07 | 000,597,262 | ---- | C] () -- C:\Users\gamerpc\rockford Files.mp3
[2014/07/30 12:18:01 | 003,492,980 | ---- | C] () -- C:\Users\gamerpc\P1130460.JPG
[2014/07/30 12:17:02 | 005,166,592 | ---- | C] () -- C:\Users\gamerpc\P1060460.JPG
[2014/07/30 11:42:56 | 000,699,112 | ---- | C] () -- C:\Users\gamerpc\Giant Fat YoshiFox City.png
[2014/07/30 11:42:55 | 001,914,476 | ---- | C] () -- C:\Users\gamerpc\Napoleon Chive.png
[2014/07/29 12:28:13 | 000,692,531 | ---- | C] () -- C:\Users\gamerpc\PaGentleman Fly Arne.png
[2014/07/29 12:28:13 | 000,619,105 | ---- | C] () -- C:\Users\gamerpc\imggg584.jpg
[2014/07/29 12:28:13 | 000,524,372 | ---- | C] () -- C:\Users\gamerpc\imggg582.jpg
[2014/07/29 12:28:13 | 000,467,803 | ---- | C] () -- C:\Users\gamerpc\imggg580.jpg
[2014/07/15 12:35:02 | 000,544,409 | ---- | C] () -- C:\Users\gamerpc\imggg563.jpg
[2014/07/12 13:51:02 | 000,001,975 | ---- | C] () -- C:\Users\gamerpc\babytwotone.png
[2014/07/09 01:49:35 | 000,030,208 | -H-- | C] () -- C:\Users\gamerpc\AppData\Roaming\RBMD5500.dll
[2014/07/08 13:34:17 | 000,107,520 | ---- | C] () -- C:\Windows\SysWow64\zlib1.dll
[2014/07/08 13:03:46 | 000,000,087 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\com.gendou.ff6_ram_editor.prefs
[2014/07/04 12:56:14 | 000,239,765 | ---- | C] () -- C:\Users\gamerpc\LRA Cadpig.png
[2014/06/28 21:21:56 | 000,009,187 | ---- | C] () -- C:\Users\gamerpc\tt's eyes only.rtf
[2014/06/28 00:59:10 | 000,087,277 | ---- | C] () -- C:\Users\gamerpc\1781968_537289966384499_2097271599_n.png
[2014/06/26 20:26:29 | 000,512,678 | ---- | C] () -- C:\Users\gamerpc\babydalsandwizzer.png
[2014/06/23 23:33:07 | 030,006,263 | ---- | C] () -- C:\Users\gamerpc\Singularity_1-8-5-5617_x86-64_Setup.exe
[2014/06/23 14:07:05 | 000,564,947 | ---- | C] () -- C:\Users\gamerpc\102B2790.JPG
[2014/06/23 14:07:05 | 000,541,225 | ---- | C] () -- C:\Users\gamerpc\102B2800.JPG
[2014/06/22 01:11:39 | 002,891,908 | ---- | C] () -- C:\Users\gamerpc\ButtonMash Soundboard.swf
[2014/06/20 19:02:51 | 000,000,962 | ---- | C] () -- C:\Users\gamerpc\mIRC.lnk
[2014/06/19 10:15:58 | 000,275,041 | ---- | C] () -- C:\Users\gamerpc\IMG_19062014_141528.png
[2014/06/19 10:15:35 | 000,000,024 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\temp.ini
[2014/06/17 15:31:20 | 000,006,199 | ---- | C] () -- C:\Users\gamerpc\charm.png
[2014/06/16 12:24:31 | 000,221,493 | ---- | C] () -- C:\Users\gamerpc\imggg525.jpg
[2014/06/15 16:34:46 | 000,238,564 | ---- | C] () -- C:\Users\gamerpc\IMG_15062014_202847.png
[2014/06/15 16:34:41 | 000,263,355 | ---- | C] () -- C:\Users\gamerpc\IMG_15062014_203124.png
[2014/06/14 10:19:38 | 000,707,449 | ---- | C] () -- C:\Users\gamerpc\WizStar Space Ranger.png
[2014/06/13 21:00:06 | 000,015,000 | ---- | C] () -- C:\Users\gamerpc\mXDD-Z6fRV0oxZf11O8-j5Q.jpg
[2014/06/13 11:06:52 | 001,695,085 | ---- | C] () -- C:\Users\gamerpc\Patch HBSFTCFK.png
[2014/06/13 11:06:52 | 001,163,574 | ---- | C] () -- C:\Users\gamerpc\Two-Tone Jewel Oddbal PLA Edit.bmp
[2014/06/13 11:06:52 | 000,499,213 | ---- | C] () -- C:\Users\gamerpc\Patch SSTMBAK.png
[2014/06/13 11:06:52 | 000,053,602 | ---- | C] () -- C:\Users\gamerpc\Patch Rolly WTTGTGTW.jpg
[2014/06/13 11:06:52 | 000,036,699 | ---- | C] () -- C:\Users\gamerpc\Lil Lightning No.jpg
[2014/06/13 11:06:52 | 000,035,537 | ---- | C] () -- C:\Users\gamerpc\Thunderbolt GAVUAL.jpg
[2014/06/13 11:06:52 | 000,029,605 | ---- | C] () -- C:\Users\gamerpc\Patch LACII.jpg
[2014/06/13 11:06:52 | 000,028,783 | ---- | C] () -- C:\Users\gamerpc\Thunderbolt Lightning IShow.jpg
[2014/06/13 11:06:52 | 000,026,122 | ---- | C] () -- C:\Users\gamerpc\WISVTD Cadpig.jpg
[2014/06/13 11:06:52 | 000,024,978 | ---- | C] () -- C:\Users\gamerpc\Duchess Prince WTAPWI.jpg
[2014/06/13 11:06:52 | 000,020,198 | ---- | C] () -- C:\Users\gamerpc\Lucky ATLHM.jpg
[2014/06/13 11:06:52 | 000,018,783 | ---- | C] () -- C:\Users\gamerpc\Lucky SPM.jpg
[2014/06/13 11:06:51 | 000,051,236 | ---- | C] () -- C:\Users\gamerpc\Patch EAWTBIATD.jpg
[2014/06/13 11:06:51 | 000,028,737 | ---- | C] () -- C:\Users\gamerpc\Lucky Cadpig Rolly Spot SATBFOCRA.jpg
[2014/06/13 11:06:51 | 000,022,035 | ---- | C] () -- C:\Users\gamerpc\Lucky GTT.jpg
[2014/06/13 11:06:51 | 000,019,540 | ---- | C] () -- C:\Users\gamerpc\Lucky YGF.jpg
[2014/06/13 10:44:44 | 000,670,038 | ---- | C] () -- C:\Users\gamerpc\imggg503.jpg
[2014/06/13 10:44:44 | 000,348,191 | ---- | C] () -- C:\Users\gamerpc\imggg504.jpg
[2014/06/13 10:44:43 | 000,502,530 | ---- | C] () -- C:\Users\gamerpc\imggg502.jpg
[2014/06/13 10:44:43 | 000,283,060 | ---- | C] () -- C:\Users\gamerpc\imggg501.jpg
[2014/06/13 10:44:43 | 000,145,152 | ---- | C] () -- C:\Users\gamerpc\imggg500.jpg
[2014/06/13 10:44:40 | 001,671,129 | ---- | C] () -- C:\Users\gamerpc\MammothPuff Tiffa Meer BeachBall .png
[2014/06/13 10:44:39 | 001,016,880 | ---- | C] () -- C:\Users\gamerpc\Giant Nuke Chub WRHouse.png
[2014/06/08 18:45:53 | 000,000,008 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014/06/06 17:24:01 | 000,562,391 | ---- | C] () -- C:\Users\gamerpc\IMG_06062014_212433.png
[2014/06/06 17:05:07 | 000,227,996 | ---- | C] () -- C:\Users\gamerpc\CadpigILiketoSleepOnMySide (2).jpg
[2014/05/08 08:47:17 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2014/05/05 23:59:59 | 000,000,032 | ---- | C] () -- C:\Windows\Launcher.INI
[2014/05/02 12:37:16 | 000,319,604 | ---- | C] () -- C:\Users\gamerpc\102_2783.JPG
[2014/04/24 00:25:49 | 000,190,450 | ---- | C] () -- C:\Users\gamerpc\bugmenot_Movie_tape.jpg
[2014/04/23 23:51:03 | 000,013,907 | ---- | C] () -- C:\Users\gamerpc\bugmenot_Movie_tape.png
[2014/04/23 23:22:42 | 000,041,408 | ---- | C] () -- C:\Users\gamerpc\dalmationsmain.jpg
[2014/04/18 12:05:40 | 000,600,177 | ---- | C] () -- C:\Users\gamerpc\imggg459 (2).jpg
[2014/04/18 12:05:37 | 000,631,704 | ---- | C] () -- C:\Users\gamerpc\FoodyLAWRSH BGG.png
[2014/04/18 11:53:56 | 000,047,102 | ---- | C] () -- C:\Users\gamerpc\HNI_0003.JPG
[2014/04/18 11:53:56 | 000,045,814 | ---- | C] () -- C:\Users\gamerpc\HNI_0001.JPG
[2014/04/14 12:53:52 | 000,600,177 | ---- | C] () -- C:\Users\gamerpc\imggg459.jpg
[2014/04/14 12:53:52 | 000,528,664 | ---- | C] () -- C:\Users\gamerpc\imggg449.jpg
[2014/04/14 12:53:52 | 000,512,380 | ---- | C] () -- C:\Users\gamerpc\imggg458.jpg
[2014/04/14 12:53:52 | 000,495,389 | ---- | C] () -- C:\Users\gamerpc\imggg453.jpg
[2014/04/14 12:12:46 | 007,700,385 | ---- | C] () -- C:\Users\gamerpc\image048.jpg
[2014/04/14 12:12:46 | 000,531,511 | ---- | C] () -- C:\Users\gamerpc\After the biggest dinner XD bis.jpg
[2014/04/10 11:49:59 | 000,552,833 | ---- | C] () -- C:\Users\gamerpc\bigfluffypillow.png
[2014/04/10 02:33:22 | 000,338,961 | ---- | C] () -- C:\Users\gamerpc\TwoTone Horny.png
[2014/04/08 12:49:11 | 000,568,084 | ---- | C] () -- C:\Users\gamerpc\rosesbaby.png
[2014/04/08 12:49:08 | 000,506,737 | ---- | C] () -- C:\Users\gamerpc\whosesleepingonmybelly.png
[2014/04/08 12:00:45 | 000,521,449 | ---- | C] () -- C:\Users\gamerpc\foodyandrose.jpg
[2014/04/07 19:33:56 | 000,010,264 | ---- | C] () -- C:\Users\gamerpc\killian.png
[2014/04/05 22:02:28 | 000,011,080 | ---- | C] () -- C:\Users\gamerpc\rustyjunk.png
[2014/04/05 21:46:20 | 000,013,816 | ---- | C] () -- C:\Users\gamerpc\preferreddesigns.png
[2014/03/29 12:57:21 | 000,040,070 | ---- | C] () -- C:\Users\gamerpc\HNI_0005.JPG
[2014/03/29 11:59:31 | 000,053,242 | ---- | C] () -- C:\Users\gamerpc\HNI_0004.JPG
[2014/03/28 13:01:19 | 000,256,705 | ---- | C] () -- C:\Users\gamerpc\imggg438.jpg
[2014/03/27 22:32:38 | 001,921,016 | ---- | C] () -- C:\Users\gamerpc\100_1420.jpg
[2014/03/27 22:29:18 | 002,102,720 | ---- | C] () -- C:\Users\gamerpc\101 red pillow 2.jpg
[2014/03/27 22:29:15 | 002,153,058 | ---- | C] () -- C:\Users\gamerpc\101 red pillow 1.jpg
[2014/03/27 22:26:47 | 002,077,384 | ---- | C] () -- C:\Users\gamerpc\get spotted pillow 2.jpg
[2014/03/27 22:26:44 | 002,420,358 | ---- | C] () -- C:\Users\gamerpc\get spotted pillow 1.jpg
[2014/03/27 22:18:22 | 002,048,194 | ---- | C] () -- C:\Users\gamerpc\101 bed pic 2 (1).jpg
[2014/03/27 22:18:20 | 001,959,649 | ---- | C] () -- C:\Users\gamerpc\101 bed pic 2 (2).jpg
[2014/03/27 22:03:57 | 000,000,085 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\WB.CFG
[2014/03/26 19:01:49 | 000,371,955 | ---- | C] () -- C:\Users\gamerpc\IMG_26032014_225104.png
[2014/03/26 19:01:46 | 000,471,816 | ---- | C] () -- C:\Users\gamerpc\IMG_26032014_224929.png
[2014/03/26 18:02:11 | 000,444,253 | ---- | C] () -- C:\Users\gamerpc\IMG_26032014_215156.png
[2014/03/26 18:02:07 | 000,415,821 | ---- | C] () -- C:\Users\gamerpc\IMG_26032014_212821.png
[2014/03/26 13:47:02 | 000,256,061 | ---- | C] () -- C:\Users\gamerpc\imggg435.jpg
[2014/03/25 12:14:40 | 001,006,193 | ---- | C] () -- C:\Users\gamerpc\RefeForKendra.png
[2014/03/19 13:04:30 | 000,570,119 | ---- | C] () -- C:\Users\gamerpc\CadpigILiketoSleepOnMySide.jpg
[2014/03/19 13:04:18 | 003,631,572 | ---- | C] () -- C:\Users\gamerpc\KiLightning WBGSRZI.png
[2014/03/16 23:13:00 | 000,070,699 | ---- | C] () -- C:\Users\gamerpc\rosewitweirdeyes copy.png
[2014/03/16 20:07:30 | 000,020,213 | ---- | C] () -- C:\Users\gamerpc\wannabe.png
[2014/03/16 11:29:37 | 000,313,728 | ---- | C] () -- C:\Users\gamerpc\imggg428.jpg
[2014/03/16 11:17:53 | 000,613,795 | ---- | C] () -- C:\Users\gamerpc\imggg427.jpg
[2014/03/15 14:04:32 | 000,000,385 | ---- | C] () -- C:\Windows\SMB2ed.ini
[2014/03/14 13:14:03 | 002,355,515 | ---- | C] () -- C:\Users\gamerpc\Giant Shane Blake FAIS.png
[2014/03/12 22:40:09 | 000,408,376 | ---- | C] () -- C:\Users\gamerpc\1.png
[2014/03/10 12:08:35 | 000,527,248 | ---- | C] () -- C:\Users\gamerpc\imggg422.jpg
[2014/03/08 12:45:27 | 000,359,727 | ---- | C] () -- C:\Users\gamerpc\imggg421.jpg
[2014/03/07 15:20:07 | 000,000,055 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\mbam.context.scan
[2014/03/05 12:45:07 | 000,563,583 | ---- | C] () -- C:\Users\gamerpc\imggg416.jpg
[2014/03/05 12:45:07 | 000,274,969 | ---- | C] () -- C:\Users\gamerpc\imggg415.jpg
[2014/03/05 12:45:04 | 000,568,738 | ---- | C] () -- C:\Users\gamerpc\imggg419.jpg
[2014/03/05 12:45:04 | 000,405,982 | ---- | C] () -- C:\Users\gamerpc\imggg418.jpg
[2014/03/01 18:22:46 | 000,085,595 | ---- | C] () -- C:\Users\gamerpc\The Assassination of Twilight Sparkle.html
[2014/02/28 23:55:56 | 000,000,056 | ---- | C] () -- C:\Windows\kgt2k.INI
[2014/02/24 22:41:31 | 000,033,792 | ---- | C] () -- C:\Windows\SysWow64\drivers\libusb0.sys
[2014/02/19 13:20:57 | 000,121,666 | ---- | C] () -- C:\Users\gamerpc\toon_1389894643709.silensphere_twotonelucky.jpg
[2014/02/10 02:41:48 | 000,158,894 | ---- | C] () -- C:\Users\gamerpc\TT x Lucky.png
[2014/02/09 18:28:52 | 000,126,198 | ---- | C] () -- C:\Users\gamerpc\TwoTone Pose.png
[2014/02/07 12:38:05 | 031,757,531 | ---- | C] () -- C:\Users\gamerpc\HIWTBITF2.wmv
[2014/02/01 13:04:33 | 001,471,948 | ---- | C] () -- C:\Users\gamerpc\imggg369.jpg
[2014/02/01 13:04:33 | 000,342,815 | ---- | C] () -- C:\Users\gamerpc\imggg370.jpg
[2014/02/01 13:04:33 | 000,187,126 | ---- | C] () -- C:\Users\gamerpc\imggg371.jpg
[2014/01/29 22:54:04 | 000,004,374 | ---- | C] () -- C:\Users\gamerpc\1391059654.luckybolt20_changing_room_for_two.rtf
[2014/01/24 16:40:27 | 000,001,641 | ---- | C] () -- C:\Users\gamerpc\1390608577.rogeykun_0the_wraith_of_mamoo.rtf
[2014/01/22 12:13:36 | 001,049,770 | ---- | C] () -- C:\Users\gamerpc\Saturn Abby ThunderMountain.png
[2014/01/06 22:58:24 | 000,007,862 | ---- | C] () -- C:\Users\gamerpc\invertedpup.png
[2014/01/06 22:44:21 | 000,181,626 | ---- | C] () -- C:\Users\gamerpc\twotonewithoutblack.png
[2014/01/06 20:19:01 | 017,243,873 | ---- | C] () -- C:\Users\gamerpc\lucktonecallmemaybe_0001.wmv
[2014/01/04 00:10:14 | 000,081,811 | ---- | C] () -- C:\Users\gamerpc\second gen pups.jpg
[2014/01/03 23:01:29 | 000,041,403 | ---- | C] () -- C:\Users\gamerpc\gggg.png
[2013/12/28 13:24:52 | 000,088,731 | ---- | C] () -- C:\Users\gamerpc\IMG_28122013_203943.png
[2013/12/21 22:34:16 | 000,234,938 | ---- | C] () -- C:\Users\gamerpc\Picture1221132233_1.jpg
[2013/12/10 17:45:11 | 000,546,507 | ---- | C] () -- C:\Users\gamerpc\0Renrisgift.png
[2013/12/10 17:42:56 | 000,664,385 | ---- | C] () -- C:\Users\gamerpc\0Aslipshot&johari.png
[2013/12/06 09:39:23 | 036,067,339 | ---- | C] () -- C:\Program Files (x86)\AOL Desktop 9.7a.rar
[2013/12/02 18:55:06 | 000,713,547 | ---- | C] () -- C:\Users\gamerpc\twotone (2).jpg
[2013/11/30 17:36:04 | 000,014,730 | ---- | C] () -- C:\Users\gamerpc\Spikeschange.rtf
[2013/11/22 21:04:09 | 000,055,232 | ---- | C] () -- C:\Users\gamerpc\ssssss.png
[2013/11/20 13:53:02 | 000,691,549 | ---- | C] () -- C:\Users\gamerpc\Rgydanpractice0001.png
[2013/11/16 12:42:19 | 000,324,686 | ---- | C] () -- C:\Users\gamerpc\imggg276.jpg
[2013/11/13 12:15:13 | 003,615,138 | ---- | C] () -- C:\Users\gamerpc\Growlie Pudge and Bishachu.png
[2013/11/08 12:11:30 | 000,000,008 | RHS- | C] () -- C:\Users\gamerpc\ntuser.pol
[2013/11/03 21:49:40 | 000,003,584 | ---- | C] () -- C:\Users\gamerpc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/11/02 22:12:52 | 002,278,099 | ---- | C] () -- C:\Users\gamerpc\Meeting Tara Strong at the Comikaze Expo.wmv
[2013/11/02 15:01:00 | 000,019,790 | ---- | C] () -- C:\Users\gamerpc\Agumon v Totodile.jpg
[2013/11/02 12:24:10 | 000,472,160 | ---- | C] () -- C:\Users\gamerpc\Clayton Riff Belchic.png
[2013/11/02 12:24:06 | 000,219,526 | ---- | C] () -- C:\Users\gamerpc\imggg250.jpg
[2013/11/02 12:24:01 | 000,236,145 | ---- | C] () -- C:\Users\gamerpc\EpsilonWithScanner.png
[2013/10/30 19:42:08 | 018,257,438 | ---- | C] () -- C:\Users\gamerpc\20131030_092510.mp4
[2013/10/29 10:02:25 | 000,506,456 | ---- | C] () -- C:\Users\gamerpc\TTIYardSaleBox.png
[2013/10/28 05:50:26 | 000,132,160 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2013/10/26 11:48:32 | 000,004,131 | ---- | C] () -- C:\ProgramData\ihfeumzb.qzk
[2013/10/25 21:38:34 | 000,002,507 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\script.bat
[2013/10/25 16:56:21 | 001,281,622 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\evt.exe
[2013/10/25 12:02:36 | 025,442,711 | ---- | C] () -- C:\Users\gamerpc\101DReferences.wmv
[2013/10/23 19:58:58 | 000,004,683 | ---- | C] () -- C:\Users\gamerpc\Revenge of the Bitty Bat.rtf
[2013/10/16 22:51:32 | 000,402,195 | ---- | C] () -- C:\Users\gamerpc\twotonelucky2.jpg
[2013/10/16 22:45:54 | 000,000,041 | -HS- | C] () -- C:\ProgramData\.zreglib
[2013/10/16 20:35:34 | 000,183,923 | ---- | C] () -- C:\Users\gamerpc\twotoneluckypart1.jpg
[2013/10/13 12:07:25 | 000,356,431 | ---- | C] () -- C:\Users\gamerpc\imggg213.jpg
[2013/10/08 14:02:42 | 000,207,438 | ---- | C] () -- C:\Users\gamerpc\Two-Tone.jpg
[2013/10/08 14:02:42 | 000,046,329 | ---- | C] () -- C:\Users\gamerpc\Two-Tone2.jpg
[2013/09/29 22:20:28 | 000,774,842 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/09/27 11:57:07 | 002,073,654 | ---- | C] () -- C:\Users\gamerpc\ToykDisHalDal3.bmp
[2013/09/27 11:57:07 | 001,843,254 | ---- | C] () -- C:\Users\gamerpc\ToykDisHalDal2.bmp
[2013/09/27 11:57:07 | 001,843,254 | ---- | C] () -- C:\Users\gamerpc\ToykDisHalDal1.bmp
[2013/09/27 10:43:51 | 007,885,242 | ---- | C] () -- C:\Users\gamerpc\DW Outfir.png
[2013/09/27 10:43:43 | 004,280,593 | ---- | C] () -- C:\Users\gamerpc\P1020496.JPG
[2013/09/26 11:05:24 | 000,272,403 | ---- | C] () -- C:\Users\gamerpc\imggg193.jpg
[2013/09/17 16:54:47 | 001,836,132 | ---- | C] () -- C:\Users\gamerpc\20130917_164350.jpg
[2013/09/12 14:35:17 | 000,430,554 | ---- | C] () -- C:\Users\gamerpc\twotone (2).png
[2013/09/11 17:37:59 | 000,240,966 | ---- | C] () -- C:\Users\gamerpc\twotone.jpg
[2013/09/07 12:21:12 | 000,452,152 | ---- | C] () -- C:\Users\gamerpc\imggg136.jpg
[2013/09/07 12:21:12 | 000,419,088 | ---- | C] () -- C:\Users\gamerpc\imggg135.jpg
[2013/09/07 12:21:12 | 000,405,486 | ---- | C] () -- C:\Users\gamerpc\imggg159.jpg
[2013/09/07 12:21:12 | 000,308,578 | ---- | C] () -- C:\Users\gamerpc\imggg145.jpg
[2013/09/07 12:21:08 | 000,238,396 | ---- | C] () -- C:\Users\gamerpc\imggg161.jpg
[2013/08/28 17:21:35 | 000,269,292 | ---- | C] () -- C:\Users\gamerpc\Templeferal.png
[2013/08/27 17:37:14 | 000,075,884 | ---- | C] () -- C:\Users\gamerpc\IMG_27082013_213705.png
[2013/08/24 12:44:19 | 000,000,394 | ---- | C] () -- C:\Users\gamerpc\defogger_reenable
[2013/08/23 11:34:31 | 001,498,827 | ---- | C] () -- C:\Users\gamerpc\imggg109.jpg
[2013/08/22 23:34:18 | 000,040,958 | ---- | C] () -- C:\Users\gamerpc\padded rear.png
[2013/08/21 21:00:54 | 000,061,839 | ---- | C] () -- C:\Users\gamerpc\I love my vrrrrrr.png
[2013/08/21 00:27:30 | 000,153,404 | ---- | C] () -- C:\Users\gamerpc\IMG_21082013_032131.png
[2013/08/21 00:27:27 | 000,120,972 | ---- | C] () -- C:\Users\gamerpc\IMG_21082013_031941.png
[2013/08/20 23:27:42 | 000,081,163 | ---- | C] () -- C:\Users\gamerpc\Pawpers.png
[2013/08/20 13:06:58 | 000,169,724 | ---- | C] () -- C:\Users\gamerpc\MikaPichu.png
[2013/08/19 17:59:13 | 000,407,770 | ---- | C] () -- C:\Users\gamerpc\Sierrabuneary0001.png
[2013/08/19 17:58:59 | 001,150,683 | ---- | C] () -- C:\Users\gamerpc\Slivesfamily0001.png
[2013/08/19 17:58:52 | 000,865,844 | ---- | C] () -- C:\Users\gamerpc\FollowuptoFilly0001.png
[2013/08/19 17:58:44 | 000,445,718 | ---- | C] () -- C:\Users\gamerpc\scans0001.png
[2013/08/16 12:05:56 | 000,206,869 | ---- | C] () -- C:\Users\gamerpc\imggg089.jpg
[2013/08/14 12:29:41 | 000,273,773 | ---- | C] () -- C:\Users\gamerpc\Two-Tone Ton WOC.png
[2013/08/07 23:45:04 | 000,065,841 | ---- | C] () -- C:\Users\gamerpc\Untitled.png
[2013/08/06 23:41:01 | 000,099,836 | ---- | C] () -- C:\Users\gamerpc\NAGTY.png
[2013/08/06 23:10:23 | 000,039,670 | ---- | C] () -- C:\Users\gamerpc\pup.png
[2013/07/23 21:09:36 | 000,124,687 | ---- | C] () -- C:\Users\gamerpc\Rogeymousboycom.png
[2013/07/23 19:58:26 | 000,176,550 | ---- | C] () -- C:\Users\gamerpc\0rogeybeeboyrooshirtcom.png
[2013/07/22 17:36:12 | 000,573,985 | ---- | C] () -- C:\Users\gamerpc\Newart0005.png
[2013/07/20 19:28:10 | 000,128,075 | ---- | C] () -- C:\Users\gamerpc\Terriermondiapied0001.png
[2013/07/20 17:36:59 | 000,004,404 | ---- | C] () -- C:\Users\gamerpc\Calliou Dads Secret.rtf
[2013/07/18 15:59:14 | 000,128,211 | ---- | C] () -- C:\Users\gamerpc\Lucky and Rainbow Dash.jpg
[2013/07/17 18:39:05 | 000,305,451 | ---- | C] () -- C:\Users\gamerpc\Twotonehypnotrade0001(1).png
[2013/07/17 18:13:46 | 000,286,661 | ---- | C] () -- C:\Users\gamerpc\Twotonehypnotrade0001 (2).png
[2013/07/15 17:52:23 | 000,981,125 | ---- | C] () -- C:\Users\gamerpc\Twotonehypnotrade0001.png
[2013/07/15 12:27:20 | 001,194,862 | ---- | C] () -- C:\Users\gamerpc\Kit Axel France.png
[2013/07/15 11:39:56 | 000,357,937 | ---- | C] () -- C:\Users\gamerpc\imggg048.jpg
[2013/07/13 11:28:13 | 000,484,253 | ---- | C] () -- C:\Users\gamerpc\imggg040.jpg
[2013/07/13 11:28:13 | 000,388,673 | ---- | C] () -- C:\Users\gamerpc\imggg043.jpg
[2013/07/13 11:28:13 | 000,345,630 | ---- | C] () -- C:\Users\gamerpc\imggg045.jpg
[2013/07/13 11:28:13 | 000,294,168 | ---- | C] () -- C:\Users\gamerpc\imggg044.jpg
[2013/07/13 11:28:13 | 000,208,930 | ---- | C] () -- C:\Users\gamerpc\imggg039.jpg
[2013/07/13 11:28:13 | 000,175,471 | ---- | C] () -- C:\Users\gamerpc\imggg041.jpg
[2013/07/13 11:28:13 | 000,166,151 | ---- | C] () -- C:\Users\gamerpc\imggg042.jpg
[2013/07/10 16:07:53 | 000,005,644 | ---- | C] () -- C:\Users\gamerpc\Grounded1.rtf
[2013/07/09 01:22:43 | 000,890,613 | ---- | C] () -- C:\Users\gamerpc\twotone.png
[2013/07/06 12:36:32 | 000,407,061 | ---- | C] () -- C:\Users\gamerpc\imggg027.jpg
[2013/07/05 23:31:01 | 000,903,030 | ---- | C] () -- C:\Users\gamerpc\FREE PUPPY TEMPLATE (2).psd
[2013/07/05 23:20:47 | 000,194,300 | ---- | C] () -- C:\Users\gamerpc\BABY PETS.psd
[2013/07/03 12:49:09 | 000,218,710 | ---- | C] () -- C:\Users\gamerpc\imggg014.jpg
[2013/06/30 02:09:05 | 000,242,615 | ---- | C] () -- C:\Users\gamerpc\1372583273_zee-zee_twotone_sketch.jpg
[2013/06/28 12:03:12 | 000,361,260 | ---- | C] () -- C:\Users\gamerpc\ClayTruFB.png
[2013/06/28 12:03:12 | 000,307,914 | ---- | C] () -- C:\Users\gamerpc\SmirkinBear.png
[2013/06/28 12:03:12 | 000,196,776 | ---- | C] () -- C:\Users\gamerpc\VCusiousBishop.png
[2013/06/28 02:23:04 | 000,002,360 | ---- | C] () -- C:\Users\gamerpc\.kdiff3rc
[2013/06/26 00:35:21 | 000,360,467 | ---- | C] () -- C:\Users\gamerpc\Lucktone.png
[2013/06/21 11:10:29 | 000,496,682 | ---- | C] () -- C:\Users\gamerpc\imggg001.jpg
[2013/06/21 11:10:29 | 000,495,072 | ---- | C] () -- C:\Users\gamerpc\imgg997.jpg
[2013/06/21 11:10:29 | 000,316,960 | ---- | C] () -- C:\Users\gamerpc\imgg986.jpg
[2013/06/21 09:50:01 | 000,194,673 | ---- | C] () -- C:\Users\gamerpc\imggg009.jpg
[2013/06/19 21:12:33 | 000,045,853 | ---- | C] () -- C:\Users\gamerpc\fabulous TT.jpg
[2013/06/18 23:36:37 | 000,020,388 | ---- | C] () -- C:\Users\gamerpc\yoshiknight.jpg
[2013/06/18 11:35:18 | 004,990,464 | ---- | C] () -- C:\Users\gamerpc\P1010419.JPG
[2013/06/10 12:59:24 | 000,122,098 | ---- | C] () -- C:\Users\gamerpc\DFLPA.jpg
[2013/06/08 11:11:15 | 000,442,870 | ---- | C] () -- C:\Users\gamerpc\Two-TonIALEA.png
[2013/06/08 01:51:40 | 000,031,373 | ---- | C] () -- C:\Users\gamerpc\pregnant Bubbles.jpg
[2013/06/04 11:01:20 | 000,411,355 | ---- | C] () -- C:\Users\gamerpc\imgg830 (2).jpg
[2013/06/04 11:01:20 | 000,361,145 | ---- | C] () -- C:\Users\gamerpc\imgg950 (2).jpg
[2013/06/04 11:01:20 | 000,133,343 | ---- | C] () -- C:\Users\gamerpc\lucky_is_fat_and_happy_by_footballlover-d64yx8y.png
[2013/06/02 12:17:36 | 000,361,145 | ---- | C] () -- C:\Users\gamerpc\imgg950.jpg
[2013/05/31 15:08:08 | 019,500,317 | ---- | C] () -- C:\Users\gamerpc\BASE.psd
[2013/05/30 23:59:00 | 001,410,840 | ---- | C] () -- C:\Users\gamerpc\1369985657.runt_astoryforgem.rtf
[2013/05/30 02:06:24 | 000,066,923 | ---- | C] () -- C:\Users\gamerpc\kyu's kuriban.jpg
[2013/05/23 11:02:20 | 000,001,151 | ---- | C] () -- C:\Users\gamerpc\WD SmartWare.lnk
[2013/05/23 11:02:07 | 000,001,176 | ---- | C] () -- C:\Users\gamerpc\WD Security.lnk
[2013/05/23 11:01:54 | 000,001,099 | ---- | C] () -- C:\Users\gamerpc\WD Drive Utilities.lnk
[2013/05/22 19:43:48 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2013/05/22 19:43:48 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2013/05/22 19:43:48 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2013/05/22 19:43:48 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2013/05/20 20:48:33 | 000,911,446 | ---- | C] () -- C:\Users\gamerpc\bday.jpg
[2013/05/13 22:22:40 | 000,079,694 | ---- | C] () -- C:\Users\gamerpc\babies.jpg
[2013/05/08 15:22:41 | 010,497,997 | ---- | C] () -- C:\Users\gamerpc\Hey Love - The Younghearts.flv
[2013/05/05 21:30:37 | 000,000,079 | ---- | C] () -- C:\Windows\XP300.ini
[2013/04/11 10:48:04 | 002,107,551 | ---- | C] () -- C:\Users\gamerpc\Mooch Gang StyleBG.png
[2013/04/06 11:49:26 | 056,204,410 | ---- | C] () -- C:\Users\gamerpc\DLKFTT.wmv
[2013/04/06 11:25:31 | 000,394,761 | ---- | C] () -- C:\Users\gamerpc\imgg864.jpg
[2013/03/31 11:59:12 | 000,178,369 | ---- | C] () -- C:\Users\gamerpc\IMG_31032013_202914.png
[2013/03/28 11:15:06 | 000,430,280 | ---- | C] () -- C:\Users\gamerpc\imgg815.jpg
[2013/03/28 11:15:06 | 000,411,355 | ---- | C] () -- C:\Users\gamerpc\imgg830.jpg
[2013/03/28 11:15:06 | 000,362,178 | ---- | C] () -- C:\Users\gamerpc\imgg814.jpg
[2013/03/10 02:01:20 | 000,152,394 | ---- | C] () -- C:\Users\gamerpc\1362299754.pidgopidgey_twotone.png.jpg
[2013/02/23 21:48:08 | 000,000,054 | ---- | C] () -- C:\Users\gamerpc\AUTORUN.INF
[2013/02/18 14:40:53 | 000,663,569 | ---- | C] () -- C:\Users\gamerpc\DSC00037.JPG
[2013/02/05 23:35:42 | 000,000,164 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\default.rss
[2013/02/02 12:06:42 | 000,054,732 | ---- | C] () -- C:\Users\gamerpc\Two-Ton to get Males RP.rtf
[2013/02/02 11:21:08 | 000,461,897 | ---- | C] () -- C:\Users\gamerpc\Two-Tone Smirk.png
[2013/01/09 22:07:05 | 000,801,935 | ---- | C] () -- C:\Users\gamerpc\Paddedfenny.png
[2012/12/16 01:28:23 | 001,546,964 | ---- | C] () -- C:\Users\gamerpc\twotone 12_2012.psd
[2012/12/12 02:07:49 | 000,000,132 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\Adobe GIF Format CS6 Prefs
[2012/11/19 00:49:25 | 000,220,737 | ---- | C] () -- C:\Users\gamerpc\Doctor Who The Heroes of Time.jpg
[2012/11/17 16:47:04 | 000,000,132 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2012/11/13 02:19:45 | 000,000,132 | ---- | C] () -- C:\Users\gamerpc\AppData\Roaming\Adobe BMP Format CS6 Prefs
[2012/11/11 00:48:49 | 000,000,135 | ---- | C] () -- C:\Users\gamerpc\DB581CF5.pnach
[2012/10/23 21:33:05 | 001,039,211 | ---- | C] () -- C:\Users\gamerpc\TT and my new_007.png
[2012/10/23 21:33:05 | 000,541,559 | ---- | C] () -- C:\Users\gamerpc\TT and my new_006.png
[2012/10/23 21:33:04 | 003,162,583 | ---- | C] () -- C:\Users\gamerpc\Simpsons - Garden of Eden.flv
[2012/10/23 21:33:04 | 003,023,232 | ---- | C] () -- C:\Users\gamerpc\Terminator Theme.mp3
[2012/10/23 21:33:04 | 002,931,179 | ---- | C] () -- C:\Users\gamerpc\The Brian Kendrick - Man With A Plan [Full].mp3
[2012/10/23 21:33:04 | 001,142,980 | ---- | C] () -- C:\Users\gamerpc\Scan0001.tif
[2012/10/23 21:33:04 | 001,040,772 | ---- | C] () -- C:\Users\gamerpc\TT and my new_005.png
[2012/10/23 21:33:04 | 001,024,654 | ---- | C] () -- C:\Users\gamerpc\TT and my new_002.png
[2012/10/23 21:33:04 | 000,989,946 | ---- | C] () -- C:\Users\gamerpc\TT and my new_001.png
[2012/10/23 21:33:04 | 000,984,485 | ---- | C] () -- C:\Users\gamerpc\TT and my new_004.png
[2012/10/23 21:33:04 | 000,971,336 | ---- | C] () -- C:\Users\gamerpc\SoMuchWork.wmv
[2012/10/23 21:33:04 | 000,737,247 | ---- | C] () -- C:\Users\gamerpc\TT and my new_003.png
[2012/10/23 21:33:04 | 000,590,923 | ---- | C] () -- C:\Users\gamerpc\Tacticageniuspool.jpg
[2012/10/23 21:33:04 | 000,283,626 | ---- | C] () -- C:\Users\gamerpc\template.jpg
[2012/10/23 21:33:04 | 000,270,860 | ---- | C] () -- C:\Users\gamerpc\sierra forms.png
[2012/10/23 21:33:04 | 000,260,146 | ---- | C] () -- C:\Users\gamerpc\Scallop_Stamp_Template_by_plztikphishphood.psd
[2012/10/23 21:33:04 | 000,245,778 | ---- | C] () -- C:\Users\gamerpc\SL error.jpg
[2012/10/23 21:33:04 | 000,120,264 | ---- | C] () -- C:\Users\gamerpc\Riverrecolor.jpg
[2012/10/23 21:33:04 | 000,067,018 | ---- | C] () -- C:\Users\gamerpc\segway-rough-riders-imperial-guard-warhammer-40k-segway-roug-demotivational-poster-1255553637.jpg
[2012/10/23 21:33:04 | 000,027,200 | ---- | C] () -- C:\Users\gamerpc\sally.jpg
[2012/10/23 21:33:04 | 000,018,503 | ---- | C] () -- C:\Users\gamerpc\TKSCREST.jpg
[2012/10/23 21:33:04 | 000,005,624 | ---- | C] () -- C:\Users\gamerpc\sandworm texture.jpg
[2012/10/23 21:33:04 | 000,004,027 | ---- | C] () -- C:\Users\gamerpc\RP for today.rtf
[2012/10/23 21:33:03 | 007,036,992 | ---- | C] () -- C:\Users\gamerpc\nWo theme (voodoo child w_ voices).mp3
[2012/10/23 21:33:03 | 001,032,326 | ---- | C] () -- C:\Users\gamerpc\nWo Theme - Hulk Hogan TNA Theme w-Quotes_19477679.mp3
[2012/10/23 21:33:03 | 000,738,033 | ---- | C] () -- C:\Users\gamerpc\mom 438.jpg
[2012/10/23 21:33:03 | 000,539,687 | ---- | C] () -- C:\Users\gamerpc\plush Two-tone with bottle.JPG
[2012/10/23 21:33:03 | 000,405,054 | ---- | C] () -- C:\Users\gamerpc\pee wee mug shot.bmp
[2012/10/23 21:33:03 | 000,280,739 | ---- | C] () -- C:\Users\gamerpc\pretty_kitty_by_toddlergirl-d397r7f.png
[2012/10/23 21:33:03 | 000,129,493 | ---- | C] () -- C:\Users\gamerpc\PICE0BC.tmp.jpg
[2012/10/23 21:33:03 | 000,070,015 | ---- | C] () -- C:\Users\gamerpc\Peach Boss Goddess.jpg
[2012/10/23 21:33:03 | 000,066,764 | ---- | C] () -- C:\Users\gamerpc\Picture 27.jpg
[2012/10/23 21:33:03 | 000,029,665 | ---- | C] () -- C:\Users\gamerpc\nachof-10.jpg
[2012/10/23 21:33:03 | 000,025,645 | ---- | C] () -- C:\Users\gamerpc\Picture 10.jpg
[2012/10/23 21:33:03 | 000,002,616 | ---- | C] () -- C:\Users\gamerpc\Nero StartSmart Essentials.lnk
[2012/10/23 21:33:03 | 000,002,175 | ---- | C] () -- C:\Users\gamerpc\Norton Internet Security.lnk
[2012/10/23 21:33:03 | 000,000,624 | ---- | C] () -- C:\Users\gamerpc\Mutation Mod.lnk
[2012/10/23 21:33:03 | 000,000,512 | ---- | C] () -- C:\Users\gamerpc\MBR.dat
[2012/10/23 21:33:03 | 000,000,179 | ---- | C] () -- C:\Users\gamerpc\PIXELA Product Registration.url
[2012/10/23 21:33:02 | 008,481,615 | ---- | C] () -- C:\Users\gamerpc\mara_jade.zip
[2012/10/23 21:33:02 | 004,996,669 | ---- | C] () -- C:\Users\gamerpc\Legacy.mp3
[2012/10/23 21:33:02 | 002,992,128 | ---- | C] () -- C:\Users\gamerpc\Jerishow's Newest Theme 2009 BEST QUALITY.mp3
[2012/10/23 21:33:02 | 001,525,339 | ---- | C] () -- C:\Users\gamerpc\IMAG0449.jpg
[2012/10/23 21:33:02 | 000,663,651 | ---- | C] () -- C:\Users\gamerpc\khorneberzerkers.png
[2012/10/23 21:33:02 | 000,235,899 | ---- | C] () -- C:\Users\gamerpc\m_1281890420297_fluff-kevlar_fkevlar_aryteweb.jpg
[2012/10/23 21:33:02 | 000,130,082 | ---- | C] () -- C:\Users\gamerpc\m_1284928089033_W_CANISLUPUS.jpg
[2012/10/23 21:33:02 | 000,082,123 | ---- | C] () -- C:\Users\gamerpc\Joker1.jpg
[2012/10/23 21:33:02 | 000,018,460 | ---- | C] () -- C:\Users\gamerpc\KARISCREST.jpg
[2012/10/23 21:33:02 | 000,007,326 | ---- | C] () -- C:\Users\gamerpc\lucky-char.jpg
[2012/10/23 21:33:02 | 000,000,692 | ---- | C] () -- C:\Users\gamerpc\L4D2 Updater.lnk
[2012/10/23 21:33:01 | 004,258,368 | ---- | C] () -- C:\Users\gamerpc\Hulk Hogan Entrance Video.mp3
[2012/10/23 21:33:01 | 001,923,244 | ---- | C] () -- C:\Users\gamerpc\IMAG0026.jpg
[2012/10/23 21:33:01 | 001,649,591 | ---- | C] () -- C:\Users\gamerpc\IMAG0028.jpg
[2012/10/23 21:33:01 | 001,643,789 | ---- | C] () -- C:\Users\gamerpc\IMAG0027.jpg
[2012/10/23 21:33:00 | 022,730,332 | ---- | C] () -- C:\Users\gamerpc\Hitler Original Bunker Scene No Subtitles.avi
[2012/10/23 21:33:00 | 002,886,982 | ---- | C] () -- C:\Users\gamerpc\For Two-Tone.bmp
[2012/10/23 21:33:00 | 000,728,934 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_009.png
[2012/10/23 21:33:00 | 000,706,288 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_013.png
[2012/10/23 21:33:00 | 000,671,988 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_011.png
[2012/10/23 21:33:00 | 000,638,994 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_012.png
[2012/10/23 21:33:00 | 000,503,753 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_010.png
[2012/10/23 21:33:00 | 000,475,100 | ---- | C] () -- C:\Users\gamerpc\fuangrymarine.jpg
[2012/10/23 21:33:00 | 000,454,306 | ---- | C] () -- C:\Users\gamerpc\diaper buster 1.png
[2012/10/23 21:33:00 | 000,360,946 | ---- | C] () -- C:\Users\gamerpc\cwps-1099843-1.jpg
[2012/10/23 21:33:00 | 000,218,857 | ---- | C] () -- C:\Users\gamerpc\DSW.jpg
[2012/10/23 21:33:00 | 000,162,488 | ---- | C] () -- C:\Users\gamerpc\George of the Jungle2.wav
[2012/10/23 21:33:00 | 000,162,488 | ---- | C] () -- C:\Users\gamerpc\George of the Jungle.wav2.wav
[2012/10/23 21:33:00 | 000,162,488 | ---- | C] () -- C:\Users\gamerpc\George of the Jungle.wav
[2012/10/23 21:33:00 | 000,151,190 | ---- | C] () -- C:\Users\gamerpc\FalloutNewVegasSOTTglitch.jpg
[2012/10/23 21:33:00 | 000,065,536 | ---- | C] () -- C:\Users\gamerpc\f261e365-0eb3-49cc-a7a4-388fb1eeeb0f.jpg
[2012/10/23 21:33:00 | 000,056,392 | ---- | C] () -- C:\Users\gamerpc\ECP_00010.jpg
[2012/10/23 21:33:00 | 000,051,934 | ---- | C] () -- C:\Users\gamerpc\ECP_00002.jpg
[2012/10/23 21:33:00 | 000,050,421 | ---- | C] () -- C:\Users\gamerpc\ECP_00003.jpg
[2012/10/23 21:33:00 | 000,048,925 | ---- | C] () -- C:\Users\gamerpc\ECP_00004.jpg
[2012/10/23 21:33:00 | 000,035,876 | ---- | C] () -- C:\Users\gamerpc\CP RP.rtf
[2012/10/23 21:33:00 | 000,000,176 | ---- | C] () -- C:\Users\gamerpc\Everio MediaBrowser Homepage.url
[2012/10/23 21:32:59 | 000,770,414 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_008.png
[2012/10/23 21:32:59 | 000,745,688 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_006.png
[2012/10/23 21:32:59 | 000,699,558 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_002.png
[2012/10/23 21:32:59 | 000,695,738 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_003.png
[2012/10/23 21:32:59 | 000,687,334 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_004.png
[2012/10/23 21:32:59 | 000,626,365 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_005.png
[2012/10/23 21:32:59 | 000,594,443 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_001.png
[2012/10/23 21:32:59 | 000,380,206 | ---- | C] () -- C:\Users\gamerpc\Breaking the law.flv
[2012/10/23 21:32:59 | 000,334,133 | ---- | C] () -- C:\Users\gamerpc\cfc and Twotone 2_007.png
[2012/10/23 21:32:59 | 000,270,336 | ---- | C] () -- C:\Users\gamerpc\Cadpig_goes_bad.wps
[2012/10/23 21:32:59 | 000,083,417 | ---- | C] () -- C:\Users\gamerpc\Bolter.jpg
[2012/10/23 21:32:59 | 000,065,146 | ---- | C] () -- C:\Users\gamerpc\Buster in his pajama top.jpg
[2012/10/23 21:32:59 | 000,043,712 | ---- | C] () -- C:\Users\gamerpc\brian-lawler-mugshot.jpg
[2012/10/23 21:32:58 | 009,403,779 | ---- | C] () -- C:\Users\gamerpc\bnb - Tornado.flv
[2012/10/23 21:32:58 | 004,386,885 | ---- | C] () -- C:\Users\gamerpc\autosave.fxs
[2012/10/23 21:32:58 | 001,632,470 | ---- | C] () -- C:\Users\gamerpc\AVGInstLog.cab
[2012/10/23 21:32:58 | 000,236,336 | ---- | C] () -- C:\Users\gamerpc\Babs playing in her panties.png
[2012/10/23 21:32:58 | 000,231,703 | ---- | C] () -- C:\Users\gamerpc\Battle of the Universes II Banner.jpg
[2012/10/23 21:32:58 | 000,069,275 | ---- | C] () -- C:\Users\gamerpc\autograph.jpg
[2012/10/23 21:32:58 | 000,061,621 | ---- | C] () -- C:\Users\gamerpc\Babs in her pajama top.jpg
[2012/10/23 21:32:58 | 000,051,151 | ---- | C] () -- C:\Users\gamerpc\bff.jpg
[2012/10/23 21:32:57 | 004,305,600 | ---- | C] () -- C:\Users\gamerpc\Angry Video Game Nerd Full Theme Song.mp3
[2012/10/23 21:32:57 | 001,440,054 | ---- | C] () -- C:\Users\gamerpc\alex.bmp
[2012/10/23 21:32:57 | 000,101,917 | ---- | C] () -- C:\Users\gamerpc\1259637709948.jpg
[2012/10/23 21:32:57 | 000,050,329 | ---- | C] () -- C:\Users\gamerpc\1259637858517.png
[2012/10/23 21:32:56 | 002,713,862 | ---- | C] () -- C:\Users\gamerpc\1279523769_arumontwolf_1279489370_constantine_auromwolf.png
[2012/10/23 21:32:56 | 001,131,946 | ---- | C] () -- C:\Users\gamerpc\108_2508.JPG
[2012/10/23 21:32:56 | 000,888,184 | ---- | C] () -- C:\Users\gamerpc\108_2517.JPG
[2012/10/23 21:32:56 | 000,762,761 | ---- | C] () -- C:\Users\gamerpc\108_2518.JPG
[2012/10/23 21:32:56 | 000,725,701 | ---- | C] () -- C:\Users\gamerpc\104_2340.JPG
[2012/10/23 21:32:56 | 000,559,296 | ---- | C] () -- C:\Users\gamerpc\108_2519.JPG
[2012/10/23 21:32:56 | 000,450,821 | ---- | C] () -- C:\Users\gamerpc\101 Dalmatians Style1.png
[2012/10/23 21:32:56 | 000,365,675 | ---- | C] () -- C:\Users\gamerpc\101 Dalmatians Banner 1.png
[2012/10/23 21:32:56 | 000,058,335 | ---- | C] () -- C:\Users\gamerpc\1581j5l.gif
[2012/10/23 21:32:56 | 000,044,681 | ---- | C] () -- C:\Users\gamerpc\60474_Tactical_facepalm.jpg
[2012/10/23 21:32:56 | 000,032,768 | ---- | C] () -- C:\Users\gamerpc\67fcc669-29fd-4962-b862-0236bf649d88.jpg
[2012/10/23 21:32:56 | 000,016,298 | ---- | C] () -- C:\Users\gamerpc\1303432436.inflationcouplingist_101.rtf
[2012/10/23 21:32:56 | 000,005,395 | ---- | C] () -- C:\Users\gamerpc\1288751380.luckybolt20_thebigcrossover.rtf
[2012/10/23 21:32:41 | 005,120,640 | ---- | C] () -- C:\Users\gamerpc\WWE Kurt Angle theme (You suck choir).mp3
[2012/10/23 21:32:41 | 002,869,528 | ---- | C] () -- C:\Users\gamerpc\Zach Gowen.wmv
[2012/10/23 21:32:41 | 002,192,034 | ---- | C] () -- C:\Users\gamerpc\Wonkatastic.gif
[2012/10/23 21:32:41 | 001,110,929 | ---- | C] () -- C:\Users\gamerpc\Ychan - r - wolf - wolf 6.jpg
[2012/10/23 21:32:41 | 000,281,818 | ---- | C] () -- C:\Users\gamerpc\whomper2-065.jpg
[2012/10/23 21:32:41 | 000,246,761 | ---- | C] () -- C:\Users\gamerpc\WWE & UFC Titles.rar
[2012/10/23 21:32:41 | 000,202,017 | ---- | C] () -- C:\Users\gamerpc\Ychan - r - wolf - 81529.jpg
[2012/10/23 21:32:41 | 000,163,898 | ---- | C] () -- C:\Users\gamerpc\wof 100K win.jpg
[2012/10/23 21:32:41 | 000,008,528 | ---- | C] () -- C:\Users\gamerpc\wrongcollarcolor[1].jpg
[2012/10/23 21:32:41 | 000,000,931 | ---- | C] () -- C:\Users\gamerpc\WinRAR.lnk
[2012/10/23 21:32:40 | 001,687,242 | ---- | C] () -- C:\Users\gamerpc\TTandtheTARDIS_001.png
[2012/10/23 21:32:40 | 000,028,046 | ---- | C] () -- C:\Users\gamerpc\Two Tone Badge.JPG
[2012/10/23 21:32:40 | 000,004,611 | ---- | C] () -- C:\Users\gamerpc\TwoTone paci icon.JPG
[2012/10/23 21:32:40 | 000,000,802 | ---- | C] () -- C:\Users\gamerpc\TunesUp20.lnk
[2012/10/22 22:37:25 | 059,089,634 | ---- | C] () -- C:\Users\gamerpc\Monday Night Bowling video 1.3gp
 
========== ZeroAccess Check ==========
 
[2009/07/13 20:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/06/24 18:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 17:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 17:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 19:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 17:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2013/06/23 17:22:11 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\.minecraft
[2012/10/25 04:12:38 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\DAEMON Tools Pro
[2013/09/29 21:05:41 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\dll-files.com
[2013/09/29 21:05:41 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\Epson
[2014/12/24 05:03:52 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\IObit
[2013/09/29 21:05:41 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\Leader Technologies
[2013/09/29 21:05:45 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\Motorola Mobility
[2014/12/24 05:03:55 | 000,000,000 | ---D | M] -- C:\Users\Alex Valencia\AppData\Roaming\ProductData
[2013/09/27 14:11:50 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\10746
[2013/09/29 21:12:06 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\acccore
[2014/10/25 12:42:53 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Audacity
[2013/11/02 21:28:53 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\AVG2014
[2014/01/06 14:57:52 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\bsnes
[2014/11/29 21:09:13 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\com.amazon.music.uploader
[2013/09/29 21:12:09 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\DAEMON Tools Lite
[2014/12/18 23:28:42 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\DAEMON Tools Pro
[2013/09/29 21:12:12 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\deluge
[2013/09/29 21:12:12 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\DVDFab9
[2014/10/14 19:30:55 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Electronic Arts
[2014/01/06 15:10:18 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Emulation
[2013/09/29 21:12:13 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Epson
[2014/02/05 00:57:32 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Firestorm
[2014/05/14 16:48:50 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Firestorm_x64
[2013/09/29 21:12:48 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\fltk.org
[2013/09/29 21:12:48 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\FO3Edit
[2014/11/02 01:05:15 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\GameCompanion
[2014/04/02 00:19:15 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\HardTime
[2013/09/29 21:12:48 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\ImgBurn
[2014/10/16 16:41:52 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Injustice
[2014/12/02 11:19:23 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\IObit
[2012/10/22 21:37:17 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\join.me
[2013/09/29 21:12:48 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Leader Technologies
[2013/09/29 21:12:48 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Leadertech
[2013/09/29 21:12:48 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\LOVE
[2014/03/27 13:06:37 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\ManyCam
[2014/08/24 12:39:36 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\MKKE
[2014/02/24 22:50:35 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\MotioninJoy
[2013/12/03 12:27:51 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Motorola
[2013/09/29 21:13:05 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Motorola Mobility
[2014/12/29 23:53:34 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Mupen64Plus
[2013/09/29 21:13:07 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\NCH Swift Sound
[2013/09/29 21:13:11 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\ooVoo Details
[2013/09/29 21:13:11 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\OpenOffice
[2013/09/29 21:13:13 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\OpenOffice.org
[2013/11/16 17:15:44 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\openvr
[2014/04/16 14:38:07 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Oracle
[2013/09/29 21:13:16 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\PDAppFlex
[2014/12/09 12:18:13 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\ProductData
[2013/09/29 21:13:16 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Publish Providers
[2014/01/06 15:08:27 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\purify
[2013/09/29 21:13:16 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Samsung
[2013/09/29 21:13:16 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\SBG-SVG
[2013/09/29 21:13:17 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Screaming Bee
[2013/11/27 22:32:19 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\SecondLife
[2014/11/13 04:07:13 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\SoftGrid Client
[2014/01/24 21:23:17 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Sony
[2013/09/29 21:14:14 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\SYSTEMAX Software Development
[2013/09/29 21:14:14 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Temp
[2012/11/29 22:44:15 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\TP
[2013/09/29 21:14:14 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\TuneUp Software
[2013/09/29 21:14:15 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\VitySoft
[2014/09/15 01:54:05 | 000,000,000 | ---D | M] -- C:\Users\gamerpc\AppData\Roaming\Wayforward Technologies
[2013/09/29 21:27:25 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Amazon
[2014/08/02 08:56:04 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Audacity
[2012/10/25 05:32:32 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\DAEMON Tools Pro
[2013/09/29 21:27:29 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\dll-files.com
[2013/09/29 21:27:29 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\DVDVideoSoft
[2013/09/29 21:27:29 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Epson
[2014/05/09 21:55:44 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\HardTime
[2014/12/03 15:27:56 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\IObit
[2013/09/29 21:27:30 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Leader Technologies
[2013/09/29 21:27:42 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Motorola
[2013/09/29 21:27:42 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Motorola Mobility
[2013/12/14 07:42:25 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\OpenOffice
[2013/09/29 21:27:45 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\OpenOffice.org
[2014/08/24 12:39:39 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\ProductData
[2012/10/25 05:58:21 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Publish Providers
[2013/09/29 21:27:48 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\SoftGrid Client
[2014/01/24 10:18:18 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Sony
[2013/09/29 21:27:57 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Sony Creative Software Inc
[2013/09/29 21:27:57 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2013/09/29 21:27:57 | 000,000,000 | ---D | M] -- C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Temp
[2012/11/08 13:50:30 | 000,000,000 | ---D | M] -- C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\DAEMON Tools Pro
[2013/09/29 21:25:51 | 000,000,000 | ---D | M] -- C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\dll-files.com
[2013/09/29 21:25:52 | 000,000,000 | ---D | M] -- C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Epson
[2015/01/05 08:21:22 | 000,000,000 | ---D | M] -- C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\IObit
[2013/09/29 21:25:52 | 000,000,000 | ---D | M] -- C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Leader Technologies
[2013/09/29 21:25:53 | 000,000,000 | ---D | M] -- C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Motorola Mobility
[2014/06/12 19:18:05 | 000,000,000 | ---D | M] -- C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\ProductData
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
========== Base Services ==========
SRV:64bit: - [2009/07/13 17:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:64bit: - [2013/02/26 21:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:64bit: - [2009/07/13 17:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:64bit: - [2010/11/20 19:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:64bit: - [2010/11/20 19:24:00 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:64bit: - [2014/04/11 18:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
SRV:64bit: - [2009/07/13 17:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2009/07/13 17:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:64bit: - [2012/07/04 14:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:64bit: - [2013/07/08 21:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV - [2013/07/08 20:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
SRV:64bit: - [2010/11/20 19:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:64bit: - [2010/11/20 19:24:00 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2010/11/20 19:24:09 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2011/03/02 22:24:16 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:64bit: - [2009/07/13 17:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
SRV:64bit: - [2009/07/13 17:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2009/07/13 17:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:64bit: - [2009/07/13 17:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:64bit: - [2010/11/20 19:23:48 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
SRV:64bit: - [2014/08/22 14:14:34 | 000,023,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2014/08/22 14:14:34 | 000,368,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2009/07/13 17:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:64bit: - [2009/07/13 17:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:64bit: - [2009/07/13 17:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:64bit: - [2009/07/13 17:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
SRV - [2009/07/13 17:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
SRV:64bit: - [2014/12/05 20:17:27 | 000,303,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:64bit: - [2009/07/13 17:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:64bit: - [2011/05/24 03:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:64bit: - [2012/02/10 22:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
SRV:64bit: - [2014/04/11 18:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
No service found with a name of EMDMgmt
SRV:64bit: - [2009/07/13 17:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:64bit: - [2010/11/20 19:24:17 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:64bit: - [2010/11/20 19:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:64bit: - [2010/11/20 19:24:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:64bit: - [2014/04/11 18:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:64bit: - [2009/07/13 17:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:64bit: - [2010/11/20 19:23:48 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:64bit: - [2010/11/20 19:23:55 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2010/11/20 19:24:03 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:64bit: - [2010/11/20 19:24:16 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:64bit: - [2010/11/20 19:24:32 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2010/11/20 19:24:00 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:64bit: - [2009/07/13 17:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2014/12/18 19:06:55 | 000,210,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:64bit: - [2010/11/20 19:23:55 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:64bit: - [2014/10/02 18:11:51 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
SRV:64bit: - [2014/10/02 18:11:51 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2010/11/20 19:25:06 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:64bit: - [2013/05/26 21:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010/11/20 19:23:55 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
SRV:64bit: - [2010/11/20 19:24:28 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:64bit: - [2010/11/20 19:24:48 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:64bit: - [2010/11/20 19:24:15 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
SRV - [2010/11/20 19:24:28 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
SRV:64bit: - [2009/07/13 17:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:64bit: - [2014/05/14 08:23:46 | 002,477,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:64bit: - [2010/11/20 19:24:09 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:64bit: - [2009/07/13 17:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
SRV:64bit: - [2010/11/20 19:24:32 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
 
< %SYSTEMDRIVE%\*.exe >
 
< MD5 for: EXPLORER.EXE  >
[2011/02/25 21:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011/02/24 22:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/02/24 22:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/25 22:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 19:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/02/24 21:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/02/24 21:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/20 19:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
 
< MD5 for: QMGR.DLL  >
[2010/11/20 19:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\SysNative\qmgr.dll
[2010/11/20 19:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\winsxs\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_81b6ca5c101195cd\qmgr.dll
 
< MD5 for: SERVICES  >
[2009/06/10 13:00:26 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\$INPLACE.~TR\Machine\DATA\Windows\System32\drivers\etc\services
[2009/06/10 13:00:26 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services
 
< MD5 for: SERVICES.CFG  >
[2012/07/27 12:51:34 | 000,586,083 | ---- | M] () MD5=6DE4EA437EC1FE6DB27CADB0A7EA8DC2 -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg
[2012/09/23 19:43:36 | 000,603,848 | R--- | M] () MD5=81B120EAEE296F0E54F66C16C5A21367 -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744BA0000000010\11.0.0\services.cfg
[2014/12/02 22:31:22 | 000,559,635 | ---- | M] () MD5=AFFD91B51B9B97B2E93DA3216E291977 -- C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Services\Services.cfg
 
< MD5 for: SERVICES.EXE  >
[2009/07/13 17:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009/07/13 17:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
 
< MD5 for: SERVICES.EXE.MUI  >
[2011/04/12 00:17:17 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\SysNative\en-US\services.exe.mui
[2011/04/12 00:17:17 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui
 
< MD5 for: SERVICES.INI  >
[2013/11/26 17:29:15 | 000,003,369 | ---- | M] () MD5=36025B5779F4FCE72213BC269606A9D5 -- C:\ProgramData\IObit\Advanced SystemCare V7\services.ini
[2013/11/26 17:29:15 | 000,003,369 | ---- | M] () MD5=36025B5779F4FCE72213BC269606A9D5 -- C:\Users\All Users\IObit\Advanced SystemCare V7\services.ini
 
< MD5 for: SERVICES.LNK  >
[2009/07/13 20:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 20:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
 
< MD5 for: SERVICES.MOF  >
[2009/06/10 12:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof
[2009/06/10 12:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof
 
< MD5 for: SERVICES.MSC  >
[2011/04/12 00:17:16 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\en-US\services.msc
[2009/06/10 12:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\services.msc
[2011/04/12 00:17:18 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\en-US\services.msc
[2009/06/10 13:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\services.msc
[2011/04/12 00:17:16 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/10 12:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2011/04/12 00:17:18 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 13:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc
 
< MD5 for: SERVICES.PTXML  >
[2009/07/13 12:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/13 12:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml
 
< MD5 for: SERVICES.RDB  >
[2013/09/17 04:56:16 | 000,186,248 | ---- | M] () MD5=3190DA6D96EAE3A354AE533BA0D35D5F -- C:\Program Files (x86)\OpenOffice 4\program\services.rdb
 
< MD5 for: SVCHOST.EXE  >
[2009/07/13 17:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/13 17:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2014/11/21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe
[2009/07/13 17:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/13 17:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
 
< MD5 for: USERINIT.EXE  >
[2010/11/20 19:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/20 19:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/20 19:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/20 19:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010/11/20 19:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2014/11/21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe
[2014/03/04 03:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 01:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/07/16 18:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014/07/16 18:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/15 19:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe
 
<  dir "%systemdrive%\*" /S /A:L /C >
 Volume in drive C is Windows
 Volume Serial Number is 389A-4197
 Directory of C:\
07/13/2009  09:08 PM    <JUNCTION>     Documents and Settings [C:\Users]
               0 File(s)              0 bytes
 Directory of C:\ProgramData
07/13/2009  09:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/13/2009  09:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/13/2009  09:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/13/2009  09:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/13/2009  09:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/13/2009  09:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Oracle\Java\javapath
11/21/2014  03:39 AM    <SYMLINK>      java.exe [C:\Program Files (x86)\Java\jre1.8.0_25\bin\java.exe]
11/21/2014  03:39 AM    <SYMLINK>      javaw.exe [C:\Program Files (x86)\Java\jre1.8.0_25\bin\javaw.exe]
11/21/2014  03:39 AM    <SYMLINK>      javaws.exe [C:\Program Files (x86)\Java\jre1.8.0_25\bin\javaws.exe]
               3 File(s)              0 bytes
 Directory of C:\Users
07/13/2009  09:08 PM    <SYMLINKD>     All Users [C:\ProgramData]
07/13/2009  09:08 PM    <JUNCTION>     Default User [C:\Users\Default]
               0 File(s)              0 bytes
 Directory of C:\Users\Alex Valencia
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\Alex Valencia\AppData\Roaming]
09/29/2013  08:26 PM    <JUNCTION>     Cookies [C:\Users\Alex Valencia\AppData\Roaming\Microsoft\Windows\Cookies]
09/29/2013  08:26 PM    <JUNCTION>     Local Settings [C:\Users\Alex Valencia\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     My Documents [C:\Users\Alex Valencia\Documents]
09/29/2013  08:26 PM    <JUNCTION>     NetHood [C:\Users\Alex Valencia\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     PrintHood [C:\Users\Alex Valencia\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     Recent [C:\Users\Alex Valencia\AppData\Roaming\Microsoft\Windows\Recent]
09/29/2013  08:26 PM    <JUNCTION>     SendTo [C:\Users\Alex Valencia\AppData\Roaming\Microsoft\Windows\SendTo]
09/29/2013  08:26 PM    <JUNCTION>     Start Menu [C:\Users\Alex Valencia\AppData\Roaming\Microsoft\Windows\Start Menu]
09/29/2013  08:26 PM    <JUNCTION>     Templates [C:\Users\Alex Valencia\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Alex Valencia\AppData\Local
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\Alex Valencia\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     History [C:\Users\Alex Valencia\AppData\Local\Microsoft\Windows\History]
09/29/2013  08:26 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Alex Valencia\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Alex Valencia\Documents
09/29/2013  08:26 PM    <JUNCTION>     My Music [C:\Users\Alex Valencia\Music]
09/29/2013  08:26 PM    <JUNCTION>     My Pictures [C:\Users\Alex Valencia\Pictures]
09/29/2013  08:26 PM    <JUNCTION>     My Videos [C:\Users\Alex Valencia\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users
07/13/2009  09:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/13/2009  09:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/13/2009  09:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/13/2009  09:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/13/2009  09:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/13/2009  09:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Oracle\Java\javapath
11/21/2014  03:39 AM    <SYMLINK>      java.exe [C:\Program Files (x86)\Java\jre1.8.0_25\bin\java.exe]
11/21/2014  03:39 AM    <SYMLINK>      javaw.exe [C:\Program Files (x86)\Java\jre1.8.0_25\bin\javaw.exe]
11/21/2014  03:39 AM    <SYMLINK>      javaws.exe [C:\Program Files (x86)\Java\jre1.8.0_25\bin\javaws.exe]
               3 File(s)              0 bytes
 Directory of C:\Users\Default
07/13/2009  09:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Roaming]
07/13/2009  09:08 PM    <JUNCTION>     Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/13/2009  09:08 PM    <JUNCTION>     Local Settings [C:\Users\Default\AppData\Local]
07/13/2009  09:08 PM    <JUNCTION>     My Documents [C:\Users\Default\Documents]
07/13/2009  09:08 PM    <JUNCTION>     NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/13/2009  09:08 PM    <JUNCTION>     PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/13/2009  09:08 PM    <JUNCTION>     Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/13/2009  09:08 PM    <JUNCTION>     SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/13/2009  09:08 PM    <JUNCTION>     Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/13/2009  09:08 PM    <JUNCTION>     Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local
07/13/2009  09:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/13/2009  09:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/13/2009  09:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Documents
07/13/2009  09:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/13/2009  09:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/13/2009  09:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\gamerpc
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\gamerpc\AppData\Roaming]
09/29/2013  08:26 PM    <JUNCTION>     Cookies [C:\Users\gamerpc\AppData\Roaming\Microsoft\Windows\Cookies]
09/29/2013  08:26 PM    <JUNCTION>     Local Settings [C:\Users\gamerpc\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     My Documents [C:\Users\gamerpc\Documents]
09/29/2013  08:26 PM    <JUNCTION>     NetHood [C:\Users\gamerpc\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     PrintHood [C:\Users\gamerpc\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     Recent [C:\Users\gamerpc\AppData\Roaming\Microsoft\Windows\Recent]
09/29/2013  08:26 PM    <JUNCTION>     SendTo [C:\Users\gamerpc\AppData\Roaming\Microsoft\Windows\SendTo]
09/29/2013  08:26 PM    <JUNCTION>     Start Menu [C:\Users\gamerpc\AppData\Roaming\Microsoft\Windows\Start Menu]
09/29/2013  08:26 PM    <JUNCTION>     Templates [C:\Users\gamerpc\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\gamerpc\AppData\Local
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\gamerpc\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     History [C:\Users\gamerpc\AppData\Local\Microsoft\Windows\History]
09/29/2013  08:26 PM    <JUNCTION>     Temporary Internet Files [C:\Users\gamerpc\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\gamerpc\Documents
09/29/2013  08:26 PM    <JUNCTION>     My Music [C:\Users\gamerpc\Music]
09/29/2013  08:26 PM    <JUNCTION>     My Pictures [C:\Users\gamerpc\Pictures]
09/29/2013  08:26 PM    <JUNCTION>     My Videos [C:\Users\gamerpc\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Mario Valencia.NWOFAN-PC
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming]
09/29/2013  08:26 PM    <JUNCTION>     Cookies [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Cookies]
09/29/2013  08:26 PM    <JUNCTION>     Local Settings [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     My Documents [C:\Users\Mario Valencia.NWOFAN-PC\Documents]
09/29/2013  08:26 PM    <JUNCTION>     NetHood [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     PrintHood [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     Recent [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Recent]
09/29/2013  08:26 PM    <JUNCTION>     SendTo [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\SendTo]
09/29/2013  08:26 PM    <JUNCTION>     Start Menu [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Start Menu]
09/29/2013  08:26 PM    <JUNCTION>     Templates [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Mario Valencia.NWOFAN-PC\AppData\Local
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     History [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Local\Microsoft\Windows\History]
09/29/2013  08:26 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Mario Valencia.NWOFAN-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Mario Valencia.NWOFAN-PC\Documents
09/29/2013  08:26 PM    <JUNCTION>     My Music [C:\Users\Mario Valencia.NWOFAN-PC\Music]
09/29/2013  08:26 PM    <JUNCTION>     My Pictures [C:\Users\Mario Valencia.NWOFAN-PC\Pictures]
09/29/2013  08:26 PM    <JUNCTION>     My Videos [C:\Users\Mario Valencia.NWOFAN-PC\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Public\Documents
07/13/2009  09:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/13/2009  09:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/13/2009  09:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Veronica Valencia.NWOFAN-PC
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming]
09/29/2013  08:26 PM    <JUNCTION>     Cookies [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Cookies]
09/29/2013  08:26 PM    <JUNCTION>     Local Settings [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     My Documents [C:\Users\Veronica Valencia.NWOFAN-PC\Documents]
09/29/2013  08:26 PM    <JUNCTION>     NetHood [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     PrintHood [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/29/2013  08:26 PM    <JUNCTION>     Recent [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Recent]
09/29/2013  08:26 PM    <JUNCTION>     SendTo [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\SendTo]
09/29/2013  08:26 PM    <JUNCTION>     Start Menu [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Start Menu]
09/29/2013  08:26 PM    <JUNCTION>     Templates [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Local
09/29/2013  08:26 PM    <JUNCTION>     Application Data [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Local]
09/29/2013  08:26 PM    <JUNCTION>     History [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Local\Microsoft\Windows\History]
09/29/2013  08:26 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Veronica Valencia.NWOFAN-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Veronica Valencia.NWOFAN-PC\Documents
09/29/2013  08:26 PM    <JUNCTION>     My Music [C:\Users\Veronica Valencia.NWOFAN-PC\Music]
09/29/2013  08:26 PM    <JUNCTION>     My Pictures [C:\Users\Veronica Valencia.NWOFAN-PC\Pictures]
09/29/2013  08:26 PM    <JUNCTION>     My Videos [C:\Users\Veronica Valencia.NWOFAN-PC\Videos]
               0 File(s)              0 bytes
     Total Files Listed:
               6 File(s)              0 bytes
              98 Dir(s)  261,212,131,328 bytes free
 
========== Files - Unicode (All) ==========
[2013/07/01 20:05:02 | 000,000,000 | ---- | M] ()(C:\Windows\SysWow64\?v?olotserviceruntime.log) -- C:\Windows\SysWow64\ⷰv봈olotserviceruntime.log
[2013/07/01 20:05:02 | 000,000,000 | ---- | C] ()(C:\Windows\SysWow64\?v?olotserviceruntime.log) -- C:\Windows\SysWow64\ⷰv봈olotserviceruntime.log
[2013/04/12 11:06:18 | 000,000,000 | ---- | M] ()(C:\Windows\SysWow64\????lotserviceruntime.log) -- C:\Windows\SysWow64\굸lotserviceruntime.log
[2013/04/12 11:06:18 | 000,000,000 | ---- | C] ()(C:\Windows\SysWow64\????lotserviceruntime.log) -- C:\Windows\SysWow64\굸lotserviceruntime.log
[2013/02/28 08:12:28 | 000,000,000 | ---- | M] ()(C:\Windows\SysWow64\?l?llotserviceruntime.log) -- C:\Windows\SysWow64\귨l굈llotserviceruntime.log
[2013/02/28 08:12:28 | 000,000,000 | ---- | C] ()(C:\Windows\SysWow64\?l?llotserviceruntime.log) -- C:\Windows\SysWow64\귨l굈llotserviceruntime.log
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:56E2E879
@Alternate Data Stream - 143 bytes -> C:\Users\gamerpc\AppData\Roaming\default.rss:OECustomProperty

< End of report >


  • 0

#39
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

and the Extras log

 

OTL Extras logfile created on: 1/20/2015 3:08:30 PM - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\gamerpc\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.17183)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
7.97 Gb Total Physical Memory | 3.69 Gb Available Physical Memory | 46.34% Memory free
15.93 Gb Paging File | 11.09 Gb Available in Paging File | 69.62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 243.61 Gb Free Space | 26.15% Space Free | Partition Type: NTFS
Drive E: | 402.41 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive J: | 931.48 Gb Total Space | 329.43 Gb Free Space | 35.37% Space Free | Partition Type: NTFS
 
Computer Name: GAMER | User Name: gamerpc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
 
[HKEY_USERS\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02708B39-B8F6-44A3-934F-B010FB6DF112}" = lport=7000 | protocol=6 | dir=in | name=windows easy transfer tcp port |
"{0D9A539F-A3BF-453A-9F43-D95A76BDFD9E}" = lport=5353 | protocol=17 | dir=in | name=bonjour port 5353 |
"{1252CC31-05E4-4017-A870-68AC32335C22}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{136CB8DC-EF6A-43A0-9A3E-8B20D378ADBA}" = lport=9322 | protocol=6 | dir=in | name=ekdiscovery |
"{1D30D8F5-83BD-4447-A51A-93DDA92E546E}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe |
"{1FB1AD81-E74D-4045-AB4E-4713D17E8EE2}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{2B42F20C-EE79-49CB-9981-7A16D8429839}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{39554DBB-8692-4759-9E27-BB6A1C99BD43}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3B050FE1-A8F9-4A3D-9095-874B390A4647}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3BB11E41-E5E8-4506-B2D4-29FF630F37A0}" = lport=9091 | protocol=6 | dir=in | name=oxy-remote |
"{4DEEC3A4-09F9-487A-A1EA-4C1A5FB3B72F}" = lport=5353 | protocol=17 | dir=in | name=bonjour port 5353 |
"{5554B992-A995-4413-8A9B-A711C48E3829}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{919A46FD-9170-42EB-930D-2B5914AACE45}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{91E47475-4EF6-42CF-81F8-0834CCB9EA58}" = lport=2869 | protocol=6 | dir=in | app=system |
"{970DB6F4-970C-4930-B7C4-A0C68EA0240C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A79B8A18-488F-439E-BAA5-80EFA440DC04}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{B15AE750-8245-49D7-939A-584E73620510}" = lport=9322 | protocol=6 | dir=in | name=ekdiscovery |
"{B3CEC663-8C54-4982-BA5E-736F47EE5831}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{BDD2C05F-1724-40DE-8597-603C3E7733BD}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe |
"{BFDFB3E1-3AFE-4E6E-AB34-6185167B0198}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{C3E5B504-2485-4B57-88F1-328D3801B702}" = lport=9322 | protocol=6 | dir=in | name=ekdiscovery |
"{C9ED27C9-7968-4156-B6C7-3CCE63563A8F}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{D9286993-EC28-4475-9CE1-EF1E12922789}" = lport=5353 | protocol=17 | dir=in | name=bonjour port 5353 |
"{E06FE943-5CE7-4C4C-86A6-5DB31FA86251}" = lport=10243 | protocol=6 | dir=in | app=system |
"{E197A562-2918-4ECF-A043-B11F515B09E9}" = lport=7000 | protocol=17 | dir=in | name=windows easy transfer udp port |
"{EB14DEF1-541F-48A5-AAAF-EF7A050FC6B4}" = rport=10243 | protocol=6 | dir=out | app=system |
"{ECEA81AE-EC6D-4D94-B60A-E363D5558E19}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{ED084299-E303-4F18-8CE0-3D60C46F03CF}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{F62E8C7F-246D-4512-9E7B-842B54786535}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01D4E8B8-8C0F-4375-8B17-402F102ABFA2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{02F64A33-039A-4D47-A2A8-E919ED4E762F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{03869B11-B70C-4030-9475-CAC8D866A43C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{04B3510A-AFB6-4DCE-9A11-75B54FAC9A60}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ducktales remastered\executable\ducktales.exe |
"{05230BC2-D98C-4185-B53A-5FF3F67BB103}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{05E3F94F-D932-497C-87BF-98A394B19F77}" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.7b\waol.exe |
"{062EDC73-D473-42DE-BAE7-F9A932E762B7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{06EBE2F4-7D19-4339-9BDF-2220438D20F9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{074F5A28-C218-42CE-BEB0-E6177392F18B}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\1352139576\ee\aolsoftware.exe |
"{07E9151B-9503-4DFA-AD37-4047DCA9F744}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mkke.exe |
"{0A761E8A-EF57-45E3-80B9-16880AA55FBD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{0A852C40-C178-4AF9-BD40-8FD5197625DD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{0BA3D7C2-95C0-4527-A675-B603822894C4}" = protocol=17 | dir=in | app=c:\users\gamerpc\desktop\bionic_commando_pc_trainer_downloader.exe |
"{0DD416A2-9EB5-4FBA-91BD-2C1F7540F2FE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{0E085AC7-BFA9-485A-BADA-94766792CAE7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\creationkit.exe |
"{0E65D876-0788-4929-ACF1-3C5DD8F93C5F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando\bionic_commando.exe |
"{1056106D-AC2D-49AB-9127-84F7F3410C00}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\acs\aoldial.exe |
"{117FF583-58BC-4A2F-A89A-FB2ABA605407}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{12FEEE18-2366-490E-80AB-130F02F71DDD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{138ED3E4-7C5C-4AC5-BE1A-8B2E5AB61550}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\system information\sinf.exe |
"{147D538D-0C64-49A8-92D2-748221C92F9B}" = protocol=6 | dir=out | app=j:\left 4 dead 2\left4dead2.exe |
"{148D6FB6-61C9-427E-8D9D-484F3D0D04B6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{157E1F8C-BC1C-4904-876D-465D2809ABD2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{1B134A04-A5FA-488A-83B4-237CCCF1CCF2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{1B9EC9B9-F5A8-491F-87C6-A69C34A4FBA8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{1BC678DC-9066-495D-A9E6-578EC2CC0B21}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{1C648B74-FDD3-4D1A-AD1F-68423960D204}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{1D953904-0157-4232-9AC9-89A5BF1E1F73}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{1FA44E46-5B5A-436E-B76E-522776E78F32}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1FB3D419-3D1D-4A14-8457-47477B16F393}" = protocol=58 | dir=out | [email protected],-503 |
"{2154CE8C-6B96-4577-A15F-F97F3E06B116}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\dosbox\dosbox.exe |
"{21F821B1-28A0-4BCC-8F34-5E3ED77F5D0D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{221FB2BE-15F9-457E-B86B-068800504E1C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 ep 1\soniclauncher.exe |
"{22D7FAFE-A1E0-4EB5-A051-2A6EA7098B25}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\1352139576\ee\aolsoftware.exe |
"{23A9B0F6-DDC4-42DA-9634-17AE716A3DBB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{24B7133F-DCFB-46C8-BF05-E380FB75033E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando rearmed\bcr.exe |
"{264342FB-2901-4D23-8319-19EE9BD37124}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\acs\aolacsd.exe |
"{27192D38-C14A-414B-9596-3BC59E93E075}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{279D7C2B-20C1-418E-BF13-2C346ED6427C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row iv\saintsrowiv.exe |
"{285DE31F-8A65-4957-9AF2-E20256FB43A2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{288E05D2-B6FD-4C6B-B328-BBF1664BC3E4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{28C38C32-D539-48C9-9665-9DC3AEF5FECE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{29983754-0CE2-4E0C-839A-B408F8F1EE14}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 4\bin32\bio4.exe |
"{2B37CB47-F43A-47C1-91C2-CF78161AF947}" = protocol=17 | dir=in | app=c:\programdata\emailnotifier\emailnotifier.exe |
"{2B3BF020-2AC5-4BB3-B009-3E32A8A8DC2A}" = protocol=6 | dir=in | app=c:\program files (x86)\simplefiles\simplefiles.exe |
"{2B5B9968-250A-4946-BF44-FFE223B1F7C3}" = protocol=17 | dir=in | app=c:\program files (x86)\mystarttb\toolbarcleaner.exe |
"{2BBE486A-3EAC-4392-B6E3-99EE2C285C12}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{2DD23F46-1A64-4751-B933-8A6308C5BBC7}" = protocol=17 | dir=in | app=c:\users\gamerpc\appdata\local\oxy\application\bin\oxy-downloader.exe |
"{2EF6D329-2C90-4B10-B4C1-08C741EF6C5B}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\acs\aolacsd.exe |
"{33000C36-ABC5-4908-BCCF-DF37A19BB367}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\launcher.exe |
"{33D37F4E-4A03-46C6-B74B-AEC3FAA932F6}" = protocol=6 | dir=in | app=c:\program files (x86)\kodak\aio\center\kodak.statistics.exe |
"{33EB1164-82EE-4877-9BEB-427F522F00BE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{3428723F-9F34-4A27-BCB0-8D07889C7A89}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{3455F24F-7AC2-47F3-B68A-21024E03F202}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{3687BDC0-655E-4813-904D-51EFE4058899}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{372A28F1-763F-4C5B-A766-C68830B8BF89}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{37CDE59A-9E4E-421F-8A1D-FE926FF30837}" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.7c\aolbrowser\aolbrowser.exe |
"{38032206-C823-4FF7-808E-160CC8F01AFC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{3837E750-8302-4E8F-AFC6-B6C150D9CBC0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{39044B0C-3C22-4395-BE88-BC2FCDC049B4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{39220FDB-430D-4B18-B97F-CBE163B1C77C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{39E720EC-5F80-4E43-B7F2-A2759449CA3D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{3A584DE0-DE55-4B85-BE6B-570327680EC2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{3A5DC7E8-D532-4BDB-A754-9C2D9EB8C5E5}" = protocol=17 | dir=in | app=c:\windows\system32\migwiz\migwiz.exe |
"{3F0A1488-8265-43F4-A5C2-7EE2C7107232}" = protocol=6 | dir=in | app=c:\program files (x86)\kodak\aio\center\networkprinterdiscovery.exe |
"{3F5A703D-11F1-47D7-B4BB-467AD4724E4F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injustice.exe |
"{3F9A3F7B-261B-41A3-B97F-56E2A792C3A8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{40C709FE-B15E-4B09-A766-4F204095E03E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\oblivion\oblivionlauncher.exe |
"{42A82D1C-B2B1-4765-8DCA-4FAEBE49B640}" = protocol=17 | dir=in | app=c:\program files (x86)\kodak\aio\center\kodak.statistics.exe |
"{42ED6F0D-B903-4FCD-A2FD-203EF67912AC}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\acs\aoldial.exe |
"{43D8166B-BEFB-41FE-BCCA-79B8E1D5CEBB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe |
"{44D9E9E8-AFCE-4091-B0DB-3D064871DCB4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{463DF40D-4FEB-4EE5-AF78-4D5AEBB4FA20}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injustice.exe |
"{48C634E8-3A5D-4FF6-8DE3-905C500FA6DC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{48EFF68B-7EDC-4C16-B6F2-02FF266562F1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{494C09E5-2A6D-4263-9D84-5A3D3B9DBF31}" = protocol=6 | dir=in | app=c:\users\gamerpc\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{4BE601A9-5167-4E6A-8706-D45F98324FCE}" = protocol=6 | dir=out | app=j:\left 4 dead 2\left4dead2.dll |
"{4C9A76B8-8631-4FB1-BD1E-9ED2D1705AA6}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mkke.exe |
"{4CFA1D1A-507A-4470-BA5C-D0F62C4AB13E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ducktales remastered\executable\ducktales.exe |
"{4D00B460-1FC2-479F-B0CF-3B5D2EF91F96}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando rearmed\bcr.exe |
"{4DDE6A13-8204-4548-902C-509A9063DDA4}" = protocol=6 | dir=in | app=c:\program files (x86)\simplefiles\downloader.exe |
"{4F24BF74-29CF-47B9-810F-5158626A67D6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{50CE675D-A9C0-49CF-8CEE-7BF2585A2950}" = protocol=17 | dir=in | app=c:\program files (x86)\simplefiles\downloader.exe |
"{5105F640-7C47-4525-A038-479604CCC863}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{51427827-3967-4FEC-B81A-16A0E2DC7C6C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{5206E7A8-AA84-46BC-9A41-3FD01944601A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\oblivion\oblivionlauncher.exe |
"{533D3D60-23E5-4238-852B-69937CED8AB3}" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.7c\aolbrowser\aolbrowser.exe |
"{537A860E-4C02-4842-AA75-9872E528F617}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe |
"{53DD986A-4039-40E5-8366-753937B930DB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{53F57D73-4AEA-4EB3-A145-357279749D38}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{56063907-268D-48C5-BBC8-9F56DF94DAF9}" = protocol=17 | dir=in | app=c:\program files (x86)\kodak\aio\center\aiohomecenter.exe |
"{57EDE7BD-4AA6-409E-873E-655335C3EB6E}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{584B46BA-A611-4BD6-B165-8D5CFD51CC70}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{590D8F9B-1D45-4854-A73D-89BE9BF1D8B2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injusticelauncher.exe |
"{59F05BCD-BED9-4A8A-B997-FC5202673C32}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{5A0A7238-7D56-4328-82DC-AB971695C38D}" = protocol=6 | dir=in | app=c:\windows\syswow64\arfc\wrtc.exe |
"{5A827330-4A5E-418D-9650-066BB57A784E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{5B28E3A5-CCAA-4356-8297-CC7F75DF52C0}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{5B748851-82F4-41FE-AC21-0966B0D83376}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{5BB3BA67-A60A-418F-BF79-CD3965183781}" = dir=in | app=c:\program files\echobit\evolve\evosvc.exe |
"{5C461BED-1CD3-4549-9C6E-4145DB20D35E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy vii\ff7_launcher.exe |
"{5C6F1537-544C-48D0-81AB-AF39A4196A14}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{5DF6F87E-5F16-4B6B-A104-3A19FFEADCA5}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{5EA55A3A-A164-4B9E-B823-746C77A56E59}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{5EECBCEC-CCEB-42A5-9C8B-0901750C8BD1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 ep 1\soniclauncher.exe |
"{5F10CDF0-A511-40C7-A66D-7A8126649CE9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5FDAA8E7-4AEC-46A8-B1EF-1F817E6E5F53}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 - ep 2\launcher.exe |
"{608C07CF-6F0A-457A-985C-E8973A9CADBE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{60C7905F-884E-40C1-BAC1-E1432F192A89}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{61149E74-67B7-49AA-863A-37959287953D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{63F718AE-DE91-4176-94FE-C48CE9299F51}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{647A6403-1D13-4D29-988E-E1153BA669AC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{64F18158-F2C8-434C-A905-B991CC23CDAD}" = protocol=6 | dir=out | app=system |
"{651AAE7F-EE98-46B6-A7DA-41DFE09C8922}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{6767FF8A-CB69-4EA5-8AF4-553A1DC98963}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy vii\ff7_launcher.exe |
"{67BA7DAB-2625-46CF-920E-178AD9E21D42}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6818841F-E2D8-4151-8C6A-DBDB52A5F498}" = protocol=17 | dir=in | app=c:\program files (x86)\manycam\manycam.exe |
"{693755C6-14E6-43FC-BC11-53A356F1BCC6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{6B00D889-FEFD-4981-9D9F-54C0DE4246C4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{6ED259E1-8FB6-45CC-98F9-3F7F2FFD9810}" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.7d\waol.exe |
"{6F0180D7-DD81-4407-A9E2-B134E4FE934D}" = protocol=17 | dir=in | app=c:\program files (x86)\simplefiles\simplefiles.exe |
"{6F2B9599-884C-4532-A4CC-3AF2A34C7309}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{7047E112-1428-4C3E-AE61-8B734B61ED0A}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{706E0B9D-402A-450B-AF55-47A23FDC33C4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{70728F80-362D-4136-94A0-76D2D0FDA1AC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{716F542C-7257-4D86-941C-C08C3BB3EF37}" = protocol=17 | dir=in | app=c:\program files (x86)\kodak\aio\center\networkprinterdiscovery.exe |
"{75E5EA8B-D0B3-4EE7-8CD3-00975DCF9B2D}" = protocol=6 | dir=in | app=c:\programdata\kodak\installer\setup.exe |
"{7817A235-1605-4EDD-A7CE-A1DAD66112F4}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{78ECE044-21B4-4685-9548-C9026D8AA7AE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{7917CB51-D22E-42E8-BD56-21049B95E9C6}" = protocol=17 | dir=in | app=c:\users\gamerpc\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{79E9453B-D460-406E-A047-CCAE0730DE66}" = protocol=6 | dir=in | app=c:\users\gamerpc\appdata\local\oxy\application\bin\oxy-downloader.exe |
"{79F04F12-0827-4C27-82AD-2498D9809CD3}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{7A59A52A-F735-4ADD-9517-F7FF20997E6C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{7A78DF68-5040-461B-A670-20EBA5D4F26C}" = protocol=6 | dir=in | app=c:\windows\system32\migwiz\migwiz.exe |
"{7AE5D294-03FC-4F71-9362-15979F011D85}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injusticelauncher.exe |
"{7B116926-5BB8-4057-9FB3-3EF9F327FC04}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{7D6F5613-C806-47AA-B825-ACE23536337F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\launcher.exe |
"{801CE8FF-E5EF-479F-ABEB-D57A6885D9A0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{80EEF386-F707-411E-88BB-E043AD489DCA}" = dir=in | app=c:\users\gamerpc\appdata\local\microsoft\skydrive\skydrive.exe |
"{8150C34F-32ED-41B7-AB22-3D1EBA69A6DD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{827F5DD7-1850-494D-AC98-1388069ED8EB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8304DCBB-853E-46E5-883C-C848D441BACF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe |
"{841B2763-B6BE-4F49-B090-B29C3C9A8F8D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{84735D93-D652-4DB6-A315-17CA16522E38}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\bin\sdklauncher.exe |
"{85829669-62C4-40FE-8FBA-3A38E84A2E6B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{85B85261-20F2-41A3-B625-E5A6BF4BA434}" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.7d\aolbrowser.exe |
"{8610CB23-E662-425E-B788-7E85AB511B2E}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe |
"{877A5B94-C5B3-4971-B5ED-1E2C4A685448}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{87F615F1-F5DE-42CF-B85C-9FC8CCD101FC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{8803CF81-F90E-494A-B8AF-11472940E9C9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando\bionic_commando.exe |
"{8C38AD7D-59F3-481A-B9BB-5FAEF8F286FC}" = protocol=17 | dir=in | app=c:\windows\syswow64\arfc\wrtc.exe |
"{8F409015-0212-4DD2-AE21-AA4417246E14}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{8FC75436-F231-47FB-AAE6-84DCEB40A893}" = protocol=6 | dir=in | app=c:\program files (x86)\mystarttb\toolbarcleaner.exe |
"{9407A709-A3FF-4EAC-8093-585B266B29E9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{9478442F-3B8D-45F1-9DCD-764CFEA2FAD7}" = protocol=17 | dir=in | app=c:\program files (x86)\manycam\bin\manycam.exe |
"{948BC45B-2E11-4339-8967-272A381CBCD2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{95DDB2AA-9011-4B3F-8E6A-85053EACC6E0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{95EF36F3-5CF4-45ED-97AB-1F07643ED7CE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{9832A871-307F-48F6-8ED6-D76C9552D5DA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{9911B860-94F8-4501-8F5B-66749E5D1149}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{99474046-1B65-4DD8-98CF-1A0DCC20D9E9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{9949E837-6305-4212-99B8-84318EA4E5D6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{A01E95B7-D057-4F3C-A3BD-ADD928815521}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{A192A086-2904-4E7A-819D-B471BBE1C7F4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{A21C9227-B484-4BF1-B01E-22EA1D56F295}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{A2E5A4C7-2048-4DE9-A9D3-4927DF39F84E}" = protocol=6 | dir=in | app=c:\program files (x86)\kodak\aio\firmware\kodakaioupdater.exe |
"{A36B7F03-970B-400C-AF5F-B12D15BE2913}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{A37AAC94-F3BF-457F-973F-8D84D7268BD9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{A3E82CDA-5BDA-44AE-8828-809F0AB8A5C4}" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.7c\waol.exe |
"{A4157F47-DEF0-4F2E-934B-D58D2E7C0A84}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{A4F69282-80D3-4E8A-A43C-610667DDA7D8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{A574564D-065E-4D7A-A603-477F77D7BEA4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{A8EBAD9F-1C87-4885-8BDD-03DFB501B74D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{A9BE4FE7-C5D5-4CE4-B0F3-2DA38A42141F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{AA99CF66-9994-4217-8E9B-11D0B7DF8651}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{AACFC218-22D7-4178-936A-324CEC940264}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{AAE38A65-0C9E-4525-A9D6-B0E2EEB978F4}" = protocol=6 | dir=in | app=c:\program files (x86)\kodak\aio\center\aiohomecenter.exe |
"{AC463D3A-2089-4CBC-824F-F8258063A82C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{ADAE7CAF-5CAB-4B7A-B70C-08163D6F1AC3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{AFC2AE11-2BAF-4AF2-A647-E5D91F46793E}" = protocol=17 | dir=in | app=c:\programdata\kodak\installer\setup.exe |
"{B0593137-6A0E-459F-85D1-81EADDF85655}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{B1D4DC73-7D6D-4D6C-88D0-5990A59E17DB}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{B37FC2F5-DE32-4359-8F60-926A3EF46247}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{B3FAAB71-C8C0-475E-8BDC-74B4DD1E7899}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\dosbox\dosbox.exe |
"{B459723D-A4D2-4296-AE7B-2E9623EA394A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mklauncher.exe |
"{B6A096CB-B56A-46F3-8FC3-5CA818960692}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{B7F56E0B-5FBE-4963-B106-49588FA51876}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe |
"{B831F940-B1AE-4CFD-B3B3-41E7D54D55A5}" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.7d\aolbrowser.exe |
"{B9845CD1-8366-41B2-A94E-961A43B57400}" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.7c\waol.exe |
"{BA942A99-ADFC-43F8-BDEA-66CC799F9D13}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{BCF6CA49-083A-4BFC-85C6-84F4EA4E4A19}" = dir=in | app=c:\users\mario valencia.nwofan-pc\appdata\local\microsoft\skydrive\skydrive.exe |
"{BE6280DC-B91E-449E-BA3D-6C2F0EBA1961}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{C0F9AE98-F7E6-468E-B066-E9733E1A6180}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{C1E33B0B-545D-44CD-BAD4-C2104D06CB28}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{C202D074-E564-4D39-8753-68C7D15932CB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{C3A0B55B-A685-4EC7-A3C7-C1A78846F5FB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{C5A16CFA-FB0B-4FE8-AC75-ADA95014ABD8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{C5B9ABFD-B362-43E7-9C77-93818ADE57D9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy iv\ff4_launcher.exe |
"{C5FD9FB2-6A7D-4675-B758-C82712B3C0FB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{C638994A-A719-4E02-BE50-95C293AE7848}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{C63E6084-AE36-4627-8F79-497643912F36}" = protocol=17 | dir=in | app=c:\program files (x86)\kodak\aio\firmware\kodakaioupdater.exe |
"{C6DD0B9B-38FB-4489-BD13-BC81C88A5937}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\morrowind\morrowind launcher.exe |
"{C747B546-AC2A-4B28-95D3-1C4B278409A8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{C7836BDE-DD1C-4BAE-AD25-DA51D9656725}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{C7EF120F-4B14-499C-94EF-C75F8025F2A0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout 3 goty\falloutlauncher.exe |
"{C8039467-840F-4E8F-B7A7-A71AC9198426}" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.7b\aolbrowser\aolbrowser.exe |
"{C81D1A6E-3331-485B-AC46-604043AC940F}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{C93AD31A-20CB-45E7-95C5-75B5F196B55E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row iv\saintsrowiv.exe |
"{CA3FF2D3-61C8-449C-AE15-9083E98979AB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{CAAA5B9A-84D8-48EF-8B31-1201E959F17E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\bin\sdklauncher.exe |
"{CAB90B31-D0C3-411C-AA31-587219CE002E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout 3 goty\falloutlauncher.exe |
"{CCB314A2-EF5C-4332-9621-053593FC30D5}" = protocol=58 | dir=in | app=system |
"{CCBCF31B-BB02-40FD-BF31-9C3C4E6334EC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{CD95C8C5-A9A1-403E-8336-0E543018042A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{CDDC459A-05E1-4F7E-BD08-45BFBCC2FFBA}" = protocol=6 | dir=in | app=c:\program files (x86)\manycam\manycam.exe |
"{CF16E8A6-D8A2-4F10-AB96-8E2A929289A2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{CFB53867-DDD3-4761-8B1B-C0F835BA0A21}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{D0162ACA-DF85-46DF-AAE4-4F48FC71A8C5}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{D0258EB3-6BC9-4030-B829-09E3DD23688C}" = protocol=6 | dir=in | app=c:\programdata\emailnotifier\emailnotifier.exe |
"{D42E0659-DCBC-43EC-B60B-6F055F365AE4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D47A86EA-F10D-4CF0-A3E1-617650D08A85}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{D49DDE8B-317A-47D1-9368-505E991196F8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\creationkit.exe |
"{D551E5C4-37B4-4087-9018-C52B5685CD56}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{D5615795-7556-487F-97C8-5BED0DDCA544}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{D5A85ED3-E6A0-4481-A8FC-3ADB71974F2B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\game_launcher.exe |
"{D5D45652-EEA2-4A9E-8194-685A4D0A3179}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{D5EB0F46-B6E3-431B-96BD-3CC8E2D75796}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{DA44FC68-A5A7-4220-AB8F-00500A9522CF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{DA7AD87A-D087-496D-A5FB-1BFB65BE3324}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe |
"{DFA90AA7-81E1-46E4-8D0C-3AB15CE7B185}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{E0228434-9830-4CE6-9D66-0C922AD41608}" = protocol=6 | dir=in | app=c:\users\gamerpc\desktop\bionic_commando_pc_trainer_downloader.exe |
"{E0836E48-4CB3-4BB3-9E3F-23DCEB1F1DA8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{E206AD0F-907E-4F6D-8465-D054D9B983C6}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{E20F1F06-D0C7-4208-8DA2-C5FA6B02DFEA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{E242E114-AB21-453B-B775-F5083ED5FFBB}" = protocol=6 | dir=in | app=c:\program files (x86)\manycam\bin\manycam.exe |
"{E3A272DD-4FAB-4D30-988E-A2A2B8708108}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{E417EE2B-B707-489F-B6DF-D62B89EE4C75}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy iv\ff4_launcher.exe |
"{E4B17853-47E6-425F-9A85-81856BDC5D70}" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.7b\aolbrowser\aolbrowser.exe |
"{E589903F-797C-45CE-B153-54C48121152A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{E6B253B7-A297-4FC1-84AA-ED78FF5E9E8C}" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.7b\waol.exe |
"{E78BA640-9F74-4B54-B21D-A7F40EBE59DC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{E7E54F89-635D-4405-9493-FF1F370E0C25}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{E81BEF10-D5A2-42BF-92D9-D07F5152C603}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{E8846A4E-5628-45D0-AF00-5C22796DC131}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{E94425FC-95A1-48D0-9955-759C9DF72CCE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{EB3023FB-D92A-4DA3-8D89-2109B6C92745}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EBBDBC1D-F13E-4BB0-AD22-D0DA3E803E89}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{EBCB101E-ABCC-4732-820E-34CDE6895C24}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\morrowind\morrowind launcher.exe |
"{EBEADD22-A71E-4098-9DC8-A953843C66DF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{EC5F5528-F736-4950-AD52-552892D6F488}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mklauncher.exe |
"{EE2E13F0-EBE7-4802-AFF7-32BFA43DCC35}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{EEC3B906-589C-4DA9-9611-C2A90206B392}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{EEE767E2-3EEB-43BC-AB8E-675DEDEAD4D4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{F143FF02-5334-45B3-A6F6-C9400115D05A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{F3CB751F-D2A3-4AA1-8716-58E055AD360E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{F4582BE6-4926-4290-8E09-08A36BCE9AC6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{F519F068-2C67-4E1C-8FE2-D32738350AFF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 - ep 2\launcher.exe |
"{F51AA450-01B2-4F02-B4D1-531990BEDAAB}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{F5391E3C-B454-4EA9-B382-9BCB87DE3F06}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{F5572D57-6ED2-4FC9-A188-9C0A01B5E241}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 4\bin32\bio4.exe |
"{F5EFFC74-95F1-47FA-84F3-10E239A43ED7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{F5F852C5-5B18-40FC-A9A5-433FC1FC047D}" = dir=in | app=c:\program files\echobit\evolve\evolveclient.exe |
"{F7177BA9-DE93-4624-8F8D-8F0C5E695BC3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{F885E747-2C5F-4052-ACD6-4D665860E67C}" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.7d\waol.exe |
"{F8E8F595-9DB7-4D75-8215-05202BDBEA4E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{FC02A994-0CA8-4682-A7E2-10F5A7847FED}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\game_launcher.exe |
"{FC486BCF-DCF6-471D-9811-C0807B4C6669}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{FCC1085E-59A9-4A5E-9D66-363A5A42999F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\system information\sinf.exe |
"{FD6D27DE-51A2-410C-AF43-C259EFA11513}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{FEE710E1-AF2E-4354-A5C2-A377FD027C02}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{FF0669BA-D630-406E-9F59-03452FDFE50E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe |
"{FF24415B-BA2B-4735-BFAD-B7D28D1F9315}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{FF785FAE-C0F3-44ED-A3BC-56C3793421D6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{02FCEE94-51FF-4321-BD33-EC3445962730}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe |
"TCP Query User{08856DE5-F830-4B75-84F9-54B9F50D7DD1}C:\program files\firestorm\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\firestorm\slvoice.exe |
"TCP Query User{155A4151-E0F8-4C0C-A83D-2329A14D65A3}C:\program files (x86)\steam\steam.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"TCP Query User{15ECFDB2-2240-4F3D-8558-CD9C4664FDBB}C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{1601DCB5-C840-479B-8677-61FC62E1CF3F}C:\program files (x86)\the elder scrolls v skyrim\creationkit.exe" = protocol=6 | dir=in | app=c:\program files (x86)\the elder scrolls v skyrim\creationkit.exe |
"TCP Query User{19D8DC2E-ACF9-43B1-B8F5-B91C212A5747}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe |
"TCP Query User{1D668AEC-8D8B-44F6-AFFA-618CBB9BB39D}C:\program files (x86)\firestorm-beta\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\firestorm-beta\slvoice.exe |
"TCP Query User{205D9D37-4C18-482A-B27C-A14A239D14C8}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{2909DFA5-F5F5-4C65-B9C2-B94F41481C60}C:\program files (x86)\aim\aim.exe" = protocol=6 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"TCP Query User{2A3C6586-DBC5-4F8D-B236-60C571B02764}C:\program files (x86)\lucasarts\star wars jedi knight jedi academy\gamedata\jamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\lucasarts\star wars jedi knight jedi academy\gamedata\jamp.exe |
"TCP Query User{2A53E695-6647-4DF2-B3D5-569009C06B2F}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe |
"TCP Query User{41467D75-E620-40D4-B6CF-81292F5740C9}C:\program files\java\jre1.8.0_20\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.8.0_20\bin\javaw.exe |
"TCP Query User{50960A78-22A4-49D6-B106-EF888D8E2F97}C:\program files (x86)\steam\steam.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"TCP Query User{52727732-B968-4EF6-9E6E-50CB463FC15F}J:\left 4 dead 2\left4dead2.gex" = protocol=6 | dir=in | app=j:\left 4 dead 2\left4dead2.gex |
"TCP Query User{59920217-7C98-4B23-AF0D-062EE0AB179A}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{645880E7-0A11-4122-A01D-E8F4E5337517}C:\program files\yabause 0.9.13\yabause.exe" = protocol=6 | dir=in | app=c:\program files\yabause 0.9.13\yabause.exe |
"TCP Query User{6C9A30A3-F250-4932-935A-7284D6566ADE}C:\program files\firestorm\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\firestorm\slvoice.exe |
"TCP Query User{6CEE50A3-9DFD-4A4C-90AA-C7B0D765E7BF}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"TCP Query User{6F7CCF9B-AC57-426B-9555-8B0790BEA5B7}C:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe" = protocol=6 | dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe |
"TCP Query User{7560AE26-2A31-4862-B049-0F2490D9F00E}C:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe |
"TCP Query User{7AD0DD82-0763-403E-ADE9-E065326DAC75}C:\users\gamerpc\appdata\local\catalinagroup\citrio\application\chrome.exe" = protocol=6 | dir=in | app=c:\users\gamerpc\appdata\local\catalinagroup\citrio\application\chrome.exe |
"TCP Query User{7B7D97E7-43BE-4C17-81F5-3DF05A62D6BD}C:\program files (x86)\secondlifeviewer\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\secondlifeviewer\slvoice.exe |
"TCP Query User{7C0A2354-30AA-4A95-B4E6-48EF5E35D8A0}C:\program files (x86)\aim\aim.exe" = protocol=6 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"TCP Query User{885329A9-3294-4AB1-B4AF-3708513E572D}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{8D867AAA-9303-4726-B61D-B6F0961C2163}C:\users\gamerpc\desktop\dolphin-2.0.win64\dolphin.exe" = protocol=6 | dir=in | app=c:\users\gamerpc\desktop\dolphin-2.0.win64\dolphin.exe |
"TCP Query User{914D6D70-72D1-4533-AF5A-AFD874365CA4}C:\program files\singularity\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\singularity\slvoice.exe |
"TCP Query User{9CD515B3-0C1C-43F9-98E4-A1E8838B597F}C:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe" = protocol=6 | dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe |
"TCP Query User{9DC7D331-EE42-4996-AA19-ADA08C89F848}C:\program files (x86)\firestorm-release\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\firestorm-release\slvoice.exe |
"TCP Query User{A05DA93E-4812-4C12-B567-D6AF2ED61F6C}C:\program files\dolphin\dolphin.exe" = protocol=6 | dir=in | app=c:\program files\dolphin\dolphin.exe |
"TCP Query User{A1774BF1-81F9-457F-959C-C6690C452FFE}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{B02B844B-48E0-4973-832E-9A7E9F6F07D5}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{B2082E10-E818-49BE-8DF4-650E68B96DB9}C:\users\gamerpc\desktop\emulators\dolphin-x64\dolphin.exe" = protocol=6 | dir=in | app=c:\users\gamerpc\desktop\emulators\dolphin-x64\dolphin.exe |
"TCP Query User{B7113EFB-1B78-453F-8932-8CCC4194CA7D}J:\left 4 dead 2\left4dead2.gex" = protocol=6 | dir=in | app=j:\left 4 dead 2\left4dead2.gex |
"TCP Query User{C744747F-458C-4204-8259-5F92C1869B19}C:\users\gamerpc\desktop\dukenukem3d.highresolution.modern\eduke32.exe" = protocol=6 | dir=in | app=c:\users\gamerpc\desktop\dukenukem3d.highresolution.modern\eduke32.exe |
"TCP Query User{C87F7D4F-30D4-48B2-B7EC-62C820EDFD06}J:\left 4 dead 2\left4dead2.exe" = protocol=6 | dir=in | app=j:\left 4 dead 2\left4dead2.exe |
"TCP Query User{D3CD5FB2-DC35-4633-86E2-52B589AB3289}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"TCP Query User{D7A5B32A-6EEF-4483-9143-BF45D6AE3F6F}C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe" = protocol=6 | dir=in | app=c:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe |
"TCP Query User{DDF40951-D630-4F1A-85BB-EB3B0DB72EEA}C:\program files (x86)\singularity\slvoice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\singularity\slvoice.exe |
"TCP Query User{E266BD7E-1D79-4F4F-8EDE-54AF98DA99EB}C:\users\gamerpc\desktop\emulators\tribute_edition\telepone\telepone.exe" = protocol=6 | dir=in | app=c:\users\gamerpc\desktop\emulators\tribute_edition\telepone\telepone.exe |
"TCP Query User{E531A6BA-FA2C-4BE2-822B-404094E6AF84}C:\program files\firestorm-releasex64\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\firestorm-releasex64\slvoice.exe |
"TCP Query User{FB487F64-E84F-454D-9D2C-D2A2F8A2EF2A}C:\users\gamerpc\desktop\emulators\yabause-0.9.13-win64\yabause.exe" = protocol=6 | dir=in | app=c:\users\gamerpc\desktop\emulators\yabause-0.9.13-win64\yabause.exe |
"UDP Query User{050527B8-0F31-45B0-976C-F45FE9455C6E}C:\program files (x86)\firestorm-release\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\firestorm-release\slvoice.exe |
"UDP Query User{05377383-D6ED-4E6E-B42A-451B390F0730}C:\program files\firestorm\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\firestorm\slvoice.exe |
"UDP Query User{0EB16A4C-EFC7-41DE-AF3C-C0B8014CA064}J:\left 4 dead 2\left4dead2.gex" = protocol=17 | dir=in | app=j:\left 4 dead 2\left4dead2.gex |
"UDP Query User{11A0A20D-9744-4635-B0B4-4C15D8DBB9F5}C:\program files\firestorm-releasex64\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\firestorm-releasex64\slvoice.exe |
"UDP Query User{146B5002-9A02-42F9-B553-505F7F36DDDE}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{148A4CC6-382E-4270-A26D-0182857CD191}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{200AF3E7-9DA5-4BA4-B578-2DCE67566112}C:\program files\dolphin\dolphin.exe" = protocol=17 | dir=in | app=c:\program files\dolphin\dolphin.exe |
"UDP Query User{32CA1068-727D-44BB-9B59-95D2326A6CA0}J:\left 4 dead 2\left4dead2.gex" = protocol=17 | dir=in | app=j:\left 4 dead 2\left4dead2.gex |
"UDP Query User{3BD86C98-8117-481A-8446-A3183332DC8E}C:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe" = protocol=17 | dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe |
"UDP Query User{4219DC33-AA54-4F45-9782-FF88BF5A77D3}C:\program files (x86)\steam\steam.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"UDP Query User{440870CC-7A8D-4111-B664-94742DC2950A}C:\users\gamerpc\desktop\emulators\dolphin-x64\dolphin.exe" = protocol=17 | dir=in | app=c:\users\gamerpc\desktop\emulators\dolphin-x64\dolphin.exe |
"UDP Query User{53ABCD3E-F2CC-4449-AA76-3342FA394466}C:\program files (x86)\aim\aim.exe" = protocol=17 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"UDP Query User{5596EC1A-B37A-48C2-BA45-C17327906E2D}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"UDP Query User{59E111C1-BBBB-41F5-83B9-714D990F10C8}C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"UDP Query User{5C0A045F-371C-4B86-BEE8-DD2FF179A7FA}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe |
"UDP Query User{64AE9F19-BA94-493A-8834-EE22DAA608EE}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"UDP Query User{6655BF9A-E8CC-489C-A319-4DA73B5338EB}C:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe |
"UDP Query User{6C8C5983-9BF9-4C66-A101-E2BC4ADBAAC4}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe |
"UDP Query User{740F12EC-43AB-4C3F-BC30-4DF4345A7E4E}C:\users\gamerpc\desktop\dukenukem3d.highresolution.modern\eduke32.exe" = protocol=17 | dir=in | app=c:\users\gamerpc\desktop\dukenukem3d.highresolution.modern\eduke32.exe |
"UDP Query User{814B12A9-24B7-4499-A7B3-34A707DB098E}C:\users\gamerpc\desktop\dolphin-2.0.win64\dolphin.exe" = protocol=17 | dir=in | app=c:\users\gamerpc\desktop\dolphin-2.0.win64\dolphin.exe |
"UDP Query User{82EFB695-2F47-4C67-B9E0-20F88013F42D}C:\program files (x86)\firestorm-beta\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\firestorm-beta\slvoice.exe |
"UDP Query User{85B01025-44B0-480D-9A92-E707D792BDEF}C:\users\gamerpc\desktop\emulators\tribute_edition\telepone\telepone.exe" = protocol=17 | dir=in | app=c:\users\gamerpc\desktop\emulators\tribute_edition\telepone\telepone.exe |
"UDP Query User{9696B25A-3210-4454-84FD-08B78680FFD0}C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe" = protocol=17 | dir=in | app=c:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe |
"UDP Query User{9886C402-D39C-4004-BD61-93E0C79556E1}C:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe" = protocol=17 | dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\kernel\dmr\powerdvd12dmrengine.exe |
"UDP Query User{9A2BACF7-7EF8-440A-A2C0-09DA5F26B650}C:\users\gamerpc\appdata\local\catalinagroup\citrio\application\chrome.exe" = protocol=17 | dir=in | app=c:\users\gamerpc\appdata\local\catalinagroup\citrio\application\chrome.exe |
"UDP Query User{9CBDA25D-2954-473C-B01C-3372996C25E0}J:\left 4 dead 2\left4dead2.exe" = protocol=17 | dir=in | app=j:\left 4 dead 2\left4dead2.exe |
"UDP Query User{9DD5687A-73DA-4E54-8ED8-10862FDFBD9D}C:\users\gamerpc\desktop\emulators\yabause-0.9.13-win64\yabause.exe" = protocol=17 | dir=in | app=c:\users\gamerpc\desktop\emulators\yabause-0.9.13-win64\yabause.exe |
"UDP Query User{9EFABAF1-5DE8-48F7-9CD3-D7DBA1519135}C:\program files (x86)\lucasarts\star wars jedi knight jedi academy\gamedata\jamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\lucasarts\star wars jedi knight jedi academy\gamedata\jamp.exe |
"UDP Query User{AB21488D-F40D-410B-AEE6-BDEC7C0E88A1}C:\program files\singularity\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\singularity\slvoice.exe |
"UDP Query User{B14BCA38-EA27-4DFB-B464-ABC97E5F0569}C:\program files (x86)\steam\steam.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"UDP Query User{BE2B40E7-C8B8-4DDA-B931-BA0DD7847DD1}C:\program files\firestorm\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\firestorm\slvoice.exe |
"UDP Query User{C4E7790E-9100-4052-BBC1-0969C6B598EA}C:\program files (x86)\secondlifeviewer\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\secondlifeviewer\slvoice.exe |
"UDP Query User{D477FE1D-6664-4299-8495-40A84AF8B118}C:\program files (x86)\the elder scrolls v skyrim\creationkit.exe" = protocol=17 | dir=in | app=c:\program files (x86)\the elder scrolls v skyrim\creationkit.exe |
"UDP Query User{DA9E5A5E-2710-4208-8739-BC165BDA1E19}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"UDP Query User{DAA615B1-25CD-455B-B06D-5A169CCAAE6B}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{E0F96DB0-50F2-4F0F-9800-B36B8975964F}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe |
"UDP Query User{E8A53E0C-9EAF-4189-9044-E28D4466A9C9}C:\program files\yabause 0.9.13\yabause.exe" = protocol=17 | dir=in | app=c:\program files\yabause 0.9.13\yabause.exe |
"UDP Query User{F11B6EFC-F1C3-4AF7-822D-E2D2F8B5576D}C:\program files\java\jre1.8.0_20\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.8.0_20\bin\javaw.exe |
"UDP Query User{F81954C1-2251-4180-83CD-92A794E55A98}C:\program files (x86)\singularity\slvoice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\singularity\slvoice.exe |
"UDP Query User{FC66AB40-86B7-41E5-ACD8-BDDD55D796BE}C:\program files (x86)\aim\aim.exe" = protocol=17 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"UDP Query User{FE440048-6628-4D9F-9BA2-4427988EA28B}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{02A5BD31-16AC-45DF-BE9F-A3167BC4AFB2}" = Windows Live Family Safety
"{0645A454-AD44-4F0D-99CF-6B762735AD1F}" = aioprnt
"{07EEE598-5F21-4B57-B40B-46592625B3D9}" = Zune Language Pack (PTB)
"{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}" = Windows Live Family Safety
"{15E04ECF-7C70-11E3-82D1-F04DA23A5C58}" = MSVCRT Redists
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{21B133D6-5979-47F0-BE1C-F6A6B304693F}" = Visual Studio 2010 x64 Redistributables
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{23F2C78C-E131-4CA0-8F84-3473FB7728BA}" = Microsoft Security Client
"{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2
"{27EF8E7F-88D1-4ec5-ADE2-7E447FDF114E}" = Kodak AIO Printer
"{2A9DFFD8-4E09-4B91-B957-454805B0D7C4}" = Zune Language Pack (CHS)
"{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}" = iTunes
"{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
"{309768A4-A2BB-4930-A5A2-8169678C9B4C}" = iCloud
"{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1" = MotioninJoy Gamepad tool 0.7.1001
"{34D246C0-7CA9-11E3-B3EF-F04DA23A5C58}" = MSVCRT Redists
"{3589A659-F732-4E65-A89A-5438C332E59D}" = Zune Language Pack (ELL)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{51C839E1-2BE4-4E77-A1BA-CCEA5DAFA741}" = Zune Language Pack (KOR)
"{57C51D56-B287-4C11-9192-EC3C46EF76A4}" = Zune Language Pack (RUS)
"{5C93E291-A1CC-4E51-85C6-E194209FCDB4}" = Zune Language Pack (PTG)
"{5CEBB0CE-1783-40C2-A7E1-02EE705820F0}" = Adblock Plus for IE (32-bit and 64-bit)
"{5DEFD397-4012-46C3-B6DA-E8013E660772}" = Zune Language Pack (NOR)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{670B1B49-9FD3-4827-9B41-471EFF580AA8}" = Evolve
"{6740BCB0-5863-47F4-80F4-44F394DE4FE2}" = Zune Language Pack (NLD)
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 3.0.7
"{6B33492E-FBBC-4EC3-8738-09E16E395A10}" = Zune Language Pack (ESP)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6EB931CD-A7DA-4A44-B74A-89C8EB50086F}" = Zune Language Pack (SVE)
"{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}" = Motorola Mobile Drivers Installation 6.3.0
"{764384C5-BCA9-307C-9AAC-FD443662686A}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
"{76BA306B-2AA0-47C0-AB6B-F313AB56C136}" = Zune Language Pack (MSL)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8960A0A1-BB5A-479E-92CF-65AB9D684B43}" = Zune Language Pack (PLK)
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B112338-2B08-4851-AF84-E7CAD74CEB32}" = Zune Language Pack (DAN)
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component
"{92ECE3F9-591E-4C12-8A62-B9FCE38BF646}" = Zune Language Pack (IND)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{977D1ABF-4089-4CA7-BA33-CC75808B7ACE}" = Intel® Trusted Connect Service Client
"{9B75648B-6C30-4A0D-9DE6-0D09D20AF5A5}" = Zune
"{A5A53EA8-A11E-49F0-BDF5-AE536426A31A}" = Zune Language Pack (CHT)
"{A8F2E50B-86E2-4D96-9BD2-9758BCC6F9B3}" = Zune Language Pack (CSY)
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 347.09
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 347.09
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 347.09
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.1.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 347.09
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 12.4.55
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.14.0702
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 16.18.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService" = NVIDIA GeForce Experience Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.33.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 16.18.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = SHIELD Wireless Controller Driver
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.27
"{B4870774-5F3A-46D9-9DFE-06FB5599E26B}" = Zune Language Pack (FIN)
"{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}" = Apple Mobile Device Support
"{BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}" = Zune Language Pack (DEU)
"{C2D4E056-EE19-4908-94C3-A23792BD3CEC}" = Firestorm SecondLife and OpenSim viewer
"{C5D37FFA-7483-410B-982B-91E93FD3B7DA}" = Zune Language Pack (ITA)
"{C68D33B1-0204-4EBE-BC45-A6E432B1D13A}" = Zune Language Pack (FRA)
"{C6BE19C6-B102-4038-B2A6-1C313872DBB4}" = Zune Language Pack (HUN)
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{d1e17d14-cabc-4f6f-9f46-c7ecf813645e}.sdb" = ef02f1e43
"{D8A781C9-3892-4E2E-9320-480CF896CFBB}" = Zune Language Pack (JPN)
"{D9C50188-12D5-4D3E-8F00-682346C2AA5F}" = Microsoft Xbox 360 Accessories 1.2
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E2C3C89F-23CC-4C39-A900-6139F65B1557}" = KYOCERA USB Modem KC02US Driver
"{EC39CC32-E144-42E4-9A59-53C20B408BDE}" = WD SmartWare
"{F2CB8C3C-9C9E-4FAB-9067-655601C5F748}" = Windows Mobile Device Updater Component
"30853F7174C6EB267FDAABE50A369169D18DA611" = Windows Driver Package - Datel Design & Development (usbio) USBIOControlledDevices  (04/21/2009 2.40.0.0)
"3DS Compatible Action Replay Firmware Update_is1" = 3DS Compatible Action Replay Firmware Update version 1.1
"6af12c54-643b-4752-87d0-8335503010de_is1" = Nexus Mod Manager
"8555DF8099612EF2F8333DC0EC454113D4537E7B" = Windows Driver Package - Datel Design & Development USBIOControlledDevices  (04/21/2009 2.40.0.0)
"Action Replay DSi Code Manager_is1" = Action Replay DSi Code Manager
"ASRock App Charger_is1" = ASRock App Charger v1.0.4
"ASRock XFast RAM_is1" = ASRock XFast RAM v2.0.9
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.67.1
"GrooveRetail - en-us" = Microsoft OneDrive for Business 2013 - en-us
"Microsoft Security Client" = Microsoft Security Essentials
"VueScan x64" = VueScan x64
"WhoCrashed_is1" = WhoCrashed 4.02
"WinRAR archiver" = WinRAR 4.20 (64-bit)
"Zune" = Zune
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02627EE5-EACA-4742-A9CC-E687631773E4}" = Nero ShowTime
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04DB50FA-EA80-4256-85F9-540C582E280D}" = QuickShare
"{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}" = Microsoft Games for Windows - LIVE Redistributable
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0941583C-A10F-4FBB-9B1C-9178CE3BFDAF}" = System Requirements Lab for Intel
"{0A5B39D2-7ED6-4779-BCC9-37F381139DB3}" = Adobe AIR
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}" = Google Talk Plugin
"{10934A28-0CC6-4B98-A14F-76B3546003AF}" = ksDIP
"{120a48c5-c576-409a-a382-4500030f3965}" = Nero 9 Essentials
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1ce01891-839b-4ad1-b629-2e608ba0c6ba}" = Adblock Plus for IE
"{1EECBA68-8BE4-4076-94DF-E9ED206B1D21}" = Star Wars Jedi Knight Jedi Academy
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 6.21
"{26A24AE4-039D-4CA4-87B4-2F03217067FF}" = Java 7 Update 67
"{26A24AE4-039D-4CA4-87B4-2F83218025F0}" = Java 8 Update 25
"{28DB8373-C1BB-444F-A427-A55585A12ED7}" = Motorola Device Manager
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{376348C2-E372-48BC-A138-E896757BD86A}" = aioscnnr
"{39352E3D-43FF-44E7-AC2F-0ADA04AF9BB2}_is1" = Sothink HD Movie Maker
"{3A3A3B34-6EA2-4031-8580-D66D29533E89}" = Download Navigator
"{3BAF1C25-33AA-AB09-0D89-1BAB227E5FB8}" = Amazon Music Importer
"{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}" = QuickTime 7
"{3D6AD258-61EA-35F5-812C-B7A02152996E}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
"{3DA224A5-666B-4941-8998-2F19C6D126A5}_is1" = Modio
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{3E9C9EE1-1964-4519-BF80-652E7F415ECF}" = WD Drive Utilities
"{3ECECC41-64EC-47F7-BCD1-6EC7039FF88A}" = YTD Toolbar v6.6
"{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}" = Microsoft ASP.NET MVC 4 Runtime
"{42C509F1-C451-11E1-AEC9-F04DA23A5C58}" = DVD Architect Studio 5.0
"{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision
"{46928CB0-C451-11E1-9E62-F04DA23A5C58}" = MSVCRT Redists
"{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}" = OpenOffice 4.0.1
"{48B41C3A-9A92-4B81-B653-C97FEB85C910}" = C4USelfUpdater
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D243BA7-9AC4-46D1-90E5-EEB88974F501}" = Microsoft Games for Windows - LIVE
"{4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{4e154806-de7a-4300-b61e-bc0c3a4c5b43}" = Firestorm-Releasex64 x64
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{553C904F-57A2-4113-888E-BA0C3D1C69C0}" = Microsoft VC9 runtime libraries
"{56BA241F-580C-43D2-8403-947241AAE633}" = center
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5D9BE3C1-8BA4-4E7E-82FD-9F74FA6815D1}" = Nero Vision Help
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner
"{62E2BBFA-BE97-42CD-AE89-A4EEF7F36992}" = The Elder Scrolls Arena
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{655CD886-3B90-4E4D-B314-92BDA9B08C86}" = Vegas Movie Studio HD 9.0
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6B8D6199-EE44-4FD7-813A-6D8C62C9B384}" = SlimCleaner
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{6DC79411-858B-11E1-8E7A-F04DA23A5C58}" = Vegas Movie Studio HD 11.0
"{6EF863B1-D8EA-4BB7-B88D-F96423FEFCF0}_is1" = Task Manager Enable Tool
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71CB4200-858B-11E1-B14B-F04DA23A5C58}" = MSVCRT Redists
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{75118CF3-44B5-411A-B3DD-C10432217693}" = Daggerfall
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}" = Apple Application Support
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{894AB83D-A9AF-4E54-BFF3-A7262A0A6C13}" = Motorola Device Software Update
"{8B4E75B8-6788-481D-B8D5-143EF17DC06A}" = LogMeIn Hamachi
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component
"{90150000-008C-0409-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{95716cce-fc71-413f-8ad5-56c2892d4b3a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{a1909659-0a08-4554-8af1-2175904903a1}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A5457401-D56A-43F2-9524-78E54A7FC07A}" = SlimDrivers
"{A724605D-B399-4304-B8C7-33B3EF7D4677}" = Bully Scholarship Edition
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA027AE9-DD20-4677-AA72-D760A358320B}" = Microsoft VC9 runtime libraries
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.10)
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B343B0E3-212A-40B9-8207-1BD299228F5D}" = Fallout 3 - The Garden of Eden Creation Kit
"{B36C4994-A563-4339-8754-CCCE51314A4C}" = Visual Pinball
"{B455E95A-B804-439F-B533-336B1635AE97}" = NVIDIA PhysX
"{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" = CyberLink PowerDVD 12
"{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{BE94C681-68E2-4561-8ABC-8D2E799168B4}" = essentials
"{BFBCF96F-7361-486A-965C-54B17AC35421}" = ocr
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{CD24B06F-0A4D-410A-AEF2-DFE6A28AB4C0}_is1" = Action Replay PowerSaves 3DS version 1.21
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CE96F5A5-584D-4F8F-AA3E-9BAED413DB72}" = Nero CoverDesigner Help
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1B455C8-C170-44fe-8A90-31263B5153C2}_is1" = Aiseesoft Blu-ray Ripper 6.2.18
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime
"{DA5BDB2A-12F0-4343-8351-21AAEB293990}" = PreReq
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0F274B7-592B-4669-8FB8-8D9825A09858}" = KODAK AiO Software
"{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E7D4E834-93EB-351F-B8FB-82CDAE623003}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EF53BFAB-4C10-40DB-A82D-9B07111715C6}" = aioscnnr
"{EFC0BA9B-F472-4559-B655-9C47281F9483}" = WD Security
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}" = Sound Blaster X-Fi MB
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"5513-1208-7298-9440" = JDownloader 0.9
"Action Replay Code Manager_is1" = Action Replay Code Manager
"Action Replay DSi Code Manager_is1" = Action Replay DSi Code Manager
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 16 ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 16 NPAPI
"Adobe Shockwave Player" = Adobe Shockwave Player 12.1
"Advanced SystemCare Ultimate_is1" = Advanced SystemCare Ultimate 7
"Afterburner" = MSI Afterburner 2.2.1
"AIM Toolbar" = AOL Messaging Toolbar
"AIM_7" = AIM 7
"Aimersoft DVD Ripper_is1" = Aimersoft DVD Ripper(Build 2.7.4.0)
"AOL Toolbar" = AOL Toolbar
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"ArtMoney SE_is1" = ArtMoney SE v7.43
"ASRock eXtreme Tuner_is1" = ASRock eXtreme Tuner v0.1.169
"ASRock InstantBoot_is1" = ASRock InstantBoot v1.26
"Audacity_is1" = Audacity 2.0.2
"AviSynth" = AviSynth 2.5
"BigJon PCGames Config Wizard1.1" = BigJon PCGames Config Wizard
"BJWOF" = Wheel Of Fortune 7.1.x
"Black_Chocobo" = Black Chocobo
"BOSS" = BOSS
"Cheat Engine 6.4_is1" = Cheat Engine 6.4
"CloneCD" = CloneCD
"CloneDVD2" = CloneDVD2
"com.amazon.music.uploader" = Amazon Music Importer
"d4cfeebc-b821-40b7-9f81-d366b1466f03_is1" = Horizon v2.8.3.1
"DAEMON Tools Pro" = DAEMON Tools Pro
"DivX Setup" = DivX Setup
"Dolphin" = Dolphin
"Driver Booster_is1" = Driver Booster 2.1
"DVDFab 9_is1" = DVDFab 9.0.6.0 (21/08/2013)
"FrostWire 5" = FrostWire 5.5.6
"Game Booster_is1" = Game Booster 3
"GameSaike SixaxisDriver_is1" = SixaxisDriver 0.91
"Generic Mod Manager_is1" = Fallout Mod Manager 0.13.21
"Google Chrome" = Google Chrome
"Gtk+ Runtime Environment" = Gtk+ Runtime Environment 2.12.9-2
"iLumina2" = iLumina Gold
"ImgBurn" = ImgBurn
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"InstallShield_{A724605D-B399-4304-B8C7-33B3EF7D4677}" = Bully Scholarship Edition
"InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" = CyberLink PowerDVD 12
"IObit Malware Fighter_is1" = IObit Malware Fighter
"IObit Surfing Protection_is1" = Surfing Protection
"IObitUninstall" = IObit Uninstaller
"KDiff3" = KDiff3 (remove only)
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 10.8.5
"L4D2SP" = Left 4 Dead 2 Standalone Patch™
"LAME_is1" = LAME v3.99.3 (for Windows)
"Law and Order Dead on the Money" = Law and Order Dead on the Money
"Law and Order: Double or Nothing" = Law and Order: Double or Nothing
"Law and Order: Justice is Served" = Law and Order: Justice is Served
"LibUSB-Win32_is1" = LibUSB-Win32-0.1.10.1
"LogMeIn Hamachi" = LogMeIn Hamachi
"LOOT" = LOOT
"LTCM Client" = LTCM Client
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.0.4.1028
"ManageMyMobile_is1" = ManageMyMobile
"ManyCam" = ManyCam 4.1.0
"MegaTrainer eXperience_is1" = MegaTrainer eXperience V1.2.1.6
"mIRC" = mIRC
"Monopoly by Parker Brothers" = Monopoly by Parker Brothers
"Mozilla Firefox 35.0 (x86 en-US)" = Mozilla Firefox 35.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"OpenAL" = OpenAL
"pcsx2-r5875" = PCSX2 - Playstation 2 Emulator
"Pokémon Mystery Gift Editor" = Pokémon Mystery Gift Editor
"Price Check by AOL" = Price Check by AOL
"PrintProjects" = PrintProjects
"Project 64_is1" = Project 64 version 2.1.0.1
"SecondLifeBeta" = SecondLifeBeta (remove only)
"SecondLifeBetaViewer" = SecondLifeBetaViewer (remove only)
"SecondLifeViewer" = SecondLifeViewer (remove only)
"Singularity (64 bit)" = Singularity (64 bit) (remove only)
"Smart Defrag 3_is1" = Smart Defrag 3
"Steam App 200260" = Batman: Arkham City GOTY
"Steam App 202480" = Creation Kit
"Steam App 202530" = SONIC THE HEDGEHOG 4 Episode I
"Steam App 203650" = SONIC THE HEDGEHOG 4 Episode II
"Steam App 206420" = Saints Row IV
"Steam App 21670" = Bionic Commando
"Steam App 21680" = Bionic Commando Rearmed
"Steam App 21690" = Resident Evil 5
"Steam App 22320" = The Elder Scrolls III: Morrowind
"Steam App 22330" = The Elder Scrolls IV: Oblivion
"Steam App 22370" = Fallout 3 - Game of the Year Edition
"Steam App 22380" = Fallout: New Vegas
"Steam App 225140" = Duke Nukem 3D: Megaton Edition
"Steam App 237110" = Mortal Kombat Komplete Edition
"Steam App 237630" = DuckTales Remastered
"Steam App 242700" = Injustice: Gods Among Us Ultimate Edition
"Steam App 254700" = resident evil 4 / biohazard 4
"Steam App 312750" = FINAL FANTASY IV
"Steam App 39140" = FINAL FANTASY VII
"Steam App 4000" = Garry's Mod
"Steam App 440" = Team Fortress 2
"Steam App 49520" = Borderlands 2
"Steam App 550" = Left 4 Dead 2
"Steam App 55230" = Saints Row: The Third
"Steam App 563" = Left 4 Dead 2 Authoring Tools
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 8870" = BioShock Infinite
"The Jokers' Wild1.0.x" = The Jokers' Wild
"The Price Is Right7.9.0" = The Price Is Right
"VirtuallTek Fighter Factory Classic_is1" = Fighter Factory Classic
"VirtuallTek Fighter Factory Ultimate_is1" = Fighter Factory Ultimate
"WBFS Manager 3.0" = WBFS Manager 3.0
"Whammy_1.0" = Tic Tac Dough 1.0
"Wheel of Fortune Deluxe" = Wheel of Fortune Deluxe (remove only)
"Winamp" = Winamp
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.2
"World Wrestling Mpire 2013 HD" = World Wrestling Mpire 2013 HD
"Wrestling MPire 2004" = Wrestling MPire 2004
"Wrestling MPire 2008 (Management Edition)" = Wrestling MPire 2008 (Management Edition)
"XFastUSB" = XFastUSB
"XiphQT" = Xiph QuickTime Components
"Yahoo! Messenger" = Yahoo! Messenger
"YInstHelper" = Yahoo! Install Manager
"Your Product1.0" = Your Product
"YTdetect" = Yahoo! Detect
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1692155839-1707551626-4126777635-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{790875CA-153F-49F0-AAC8-C403494239A1}" = Oxy updater
"AOL Messaging Toolbar" = AOL Messaging Toolbar
"AOL Toolbar" = AOL Toolbar
"EA SPORTS Game Face Browser Plugin" = EA SPORTS Game Face Browser Plugin 1.8.0.0
"JoinMe" = join.me
"OneDriveSetup.exe" = Microsoft OneDrive
"Super Mario Fusion Revival v0.4.1" = Super Mario Fusion Revival v0.4.1
"UnityWebPlayer" = Unity Web Player
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 1/19/2015 11:38:14 PM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 192.168.1.102:5353   15 102.1.168.192.in-addr.arpa.
 PTR gamer-2.local.
 
Error - 1/19/2015 11:38:14 PM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Unexpected conflict discarding   13 102.1.168.192.in-addr.arpa.
 PTR gamer.local.
 
Error - 1/20/2015 8:59:08 AM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 25.35.226.45:5353   15 45.226.35.25.in-addr.arpa.
 PTR gamer-2.local.
 
Error - 1/20/2015 8:59:08 AM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Unexpected conflict discarding   13 45.226.35.25.in-addr.arpa.
 PTR gamer.local.
 
Error - 1/20/2015 8:59:08 AM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 192.168.1.102:5353   15 102.1.168.192.in-addr.arpa.
 PTR gamer-2.local.
 
Error - 1/20/2015 8:59:08 AM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Unexpected conflict discarding   13 102.1.168.192.in-addr.arpa.
 PTR gamer.local.
 
Error - 1/20/2015 5:00:45 PM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 25.35.226.45:5353   15 45.226.35.25.in-addr.arpa.
 PTR gamer-2.local.
 
Error - 1/20/2015 5:00:45 PM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Unexpected conflict discarding   13 45.226.35.25.in-addr.arpa.
 PTR gamer.local.
 
Error - 1/20/2015 5:00:45 PM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 192.168.1.102:5353   15 102.1.168.192.in-addr.arpa.
 PTR gamer-2.local.
 
Error - 1/20/2015 5:00:45 PM | Computer Name = gamer | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Unexpected conflict discarding   13 102.1.168.192.in-addr.arpa.
 PTR gamer.local.
 
[ System Events ]
Error - 1/20/2015 5:02:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7031
Description = The Secondary Logon service terminated unexpectedly.  It has done
this 1 time(s).  The following corrective action will be taken in 120000 milliseconds:
 Restart the service.
 
Error - 1/20/2015 5:02:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7031
Description = The System Event Notification Service service terminated unexpectedly.
  It has done this 1 time(s).  The following corrective action will be taken in
120000 milliseconds: Restart the service.
 
Error - 1/20/2015 5:02:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7031
Description = The Shell Hardware Detection service terminated unexpectedly.  It
has done this 1 time(s).  The following corrective action will be taken in 60000
 milliseconds: Restart the service.
 
Error - 1/20/2015 5:02:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7031
Description = The Themes service terminated unexpectedly.  It has done this 1 time(s).
  The following corrective action will be taken in 60000 milliseconds: Restart the
 service.
 
Error - 1/20/2015 5:02:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7031
Description = The Windows Management Instrumentation service terminated unexpectedly.
  It has done this 1 time(s).  The following corrective action will be taken in
120000 milliseconds: Restart the service.
 
Error - 1/20/2015 5:03:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7032
Description = The Service Control Manager tried to take a corrective action (Restart
 the service) after the unexpected termination of the Shell Hardware Detection service,
 but this action failed with the following error:   %%1056
 
Error - 1/20/2015 5:03:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7032
Description = The Service Control Manager tried to take a corrective action (Restart
 the service) after the unexpected termination of the Server service, but this action
 failed with the following error:   %%1056
 
Error - 1/20/2015 5:04:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7032
Description = The Service Control Manager tried to take a corrective action (Restart
 the service) after the unexpected termination of the Windows Management Instrumentation
 service, but this action failed with the following error:   %%1056
 
Error - 1/20/2015 5:04:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7032
Description = The Service Control Manager tried to take a corrective action (Restart
 the service) after the unexpected termination of the User Profile Service service,
 but this action failed with the following error:   %%1056
 
Error - 1/20/2015 5:04:33 PM | Computer Name = gamer | Source = Service Control Manager | ID = 7032
Description = The Service Control Manager tried to take a corrective action (Restart
 the service) after the unexpected termination of the Multimedia Class Scheduler
 service, but this action failed with the following error:   %%1056
 
 
< End of report >
 


  • 0

#40
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

now the combofix log

 

ComboFix 15-01-18.01 - gamerpc 01/20/2015  15:45:25.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8159.4051 [GMT -8:00]
Running from: c:\users\gamerpc\Desktop\ComboFix.exe
AV: Advanced SystemCare Ultimate *Disabled/Updated* {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}
AV: Microsoft Security Essentials *Disabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Microsoft Security Essentials *Disabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Spyware Process Detector
c:\programdata\ntuser.pol
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Alex Valencia\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\gamerpc\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\000005.ldb
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\000008.ldb
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\000009.log
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\CURRENT
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\LOCK
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\LOG
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\LOG.old
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghjimiceldbljgjilficpgelhbkldcoo\MANIFEST-000007
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\000005.ldb
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\000008.ldb
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\000009.log
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\CURRENT
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\LOCK
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\LOG
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\LOG.old
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ococoobfggldcpkhfchknljaobglkgaj\MANIFEST-000007
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\000005.ldb
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\000008.ldb
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\000009.log
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\CURRENT
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\LOCK
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\LOG
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\LOG.old
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohicjlepbpjfdfhjmnpodegbmfjpnjeg\MANIFEST-000007
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ghjimiceldbljgjilficpgelhbkldcoo_0.localstorage
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ococoobfggldcpkhfchknljaobglkgaj_0.localstorage
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ohicjlepbpjfdfhjmnpodegbmfjpnjeg_0.localstorage
c:\users\gamerpc\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\gamerpc\AppData\Roaming\evt.exe
c:\users\gamerpc\AppData\Roaming\Love
c:\users\gamerpc\AppData\Roaming\Love\mari0\mappacks\smb\8-3.txt
c:\users\gamerpc\AppData\Roaming\Love\mari0\options.txt
c:\users\gamerpc\AppData\Roaming\Love\mari0\suspend.txt
c:\users\gamerpc\AppData\Roaming\RBMD5500.dll
c:\users\gamerpc\AUTORUN.INF
c:\users\gamerpc\MammothPuff Tiffa Meer BeachBall .png
c:\users\gamerpc\Singularity_1-8-5-5617_x86-64_Setup.exe
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha\000005.ldb
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha\000006.log
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha\CURRENT
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha\LOCK
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha\LOG
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha\LOG.old
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heoecpkcljedicgigepndfgpkbffdaha\MANIFEST-000004
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_heoecpkcljedicgigepndfgpkbffdaha_0.localstorage
c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\D2xoYvQZED.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bdakjbhhhnpgodafgfgblafnkfankkbe\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cdmgbncgfoenfijfeccmeadbiccpboif\2.14\w6upGeAeRJ5S.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\bLS9l7N.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\chmmkbmmkdgkhkmpdgjgnldecbelidac\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\l67L.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dfnoofejmifmalgklijihapamgniikcf\1.0\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jbobbahdbakeafaohkafjfhgdmdbbdjf\1.0\oFTjfIJal60.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ndmefebpbigpondphdgocaneklhlbich\2.14\T5oFAQI2_.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\npnmineabpfnbdddkokefmcbjbakpcgo\2.14\VdAMVT3w.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\aZI_7e.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\237\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhaleinbeogjiicjnkjgpgcpgeijjome\2.1\VtWPMc.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikpgpbhlalpcjfklfnfplilnanlihdmf\2.1\nnZ.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\AcCi_x.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\background.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\content.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\lsdb.js
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\manifest.json
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\knoaldjikbpbdfemopkeajbfjabdbcac\2.1\newtab.html
c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\Google\Chrome\User Data\Default\preferences
c:\windows\iun6002.exe
c:\windows\msdownld.tmp
c:\windows\SysWow64\SETF4C0.tmp
c:\windows\SysWow64\SETFABF.tmp
c:\windows\XSxS
J:\install.exe
.
.
(((((((((((((((((((((((((   Files Created from 2014-12-21 to 2015-01-21  )))))))))))))))))))))))))))))))
.
.
2015-01-21 00:04 . 2015-01-21 00:04 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-01-21 00:04 . 2015-01-21 00:04 -------- d-----w- c:\users\Mario Valencia.NWOFAN-PC\AppData\Local\temp
2015-01-21 00:04 . 2015-01-21 00:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-21 00:04 . 2015-01-21 00:04 -------- d-----w- c:\users\Alex Valencia\AppData\Local\temp
2015-01-21 00:04 . 2015-01-21 00:04 -------- d-----w- c:\users\Veronica Valencia.NWOFAN-PC\AppData\Local\temp
2015-01-20 23:08 . 2015-01-20 23:08 -------- d-----w- C:\_OTL
2015-01-20 04:03 . 2014-12-02 10:26 11870360 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F6D62039-DB81-4E92-BA1C-69B05A8B1EBF}\mpengine.dll
2015-01-18 23:51 . 2014-12-02 10:26 11870360 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-01-18 05:51 . 2015-01-18 05:51 73840 ----a-w- c:\program files (x86)\Mozilla Firefox\wow_helper.exe
2015-01-17 21:59 . 2014-09-17 12:26 1188440 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E9EF8640-BA5E-4E24-8CE6-897D8B292885}\gapaengine.dll
2015-01-16 07:58 . 2015-01-16 07:58 -------- d-----w- c:\users\gamerpc\AppData\Local\THQ
2015-01-16 07:58 . 2008-07-12 16:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2015-01-16 07:58 . 2008-07-12 16:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2015-01-16 07:58 . 2008-07-12 16:18 540688 ----a-w- c:\windows\system32\d3dx10_39.dll
2015-01-16 07:58 . 2008-07-12 16:18 1942552 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2015-01-16 07:58 . 2008-07-12 16:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2015-01-16 07:58 . 2008-07-12 16:18 4992520 ----a-w- c:\windows\system32\D3DX9_39.dll
2015-01-14 23:07 . 2015-01-20 23:47 -------- d-----w- c:\users\gamerpc\AppData\Local\CrashDumps
2015-01-14 10:29 . 2015-01-14 10:29 4877488 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2015-01-13 21:37 . 2015-01-13 22:10 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-01-13 21:37 . 2015-01-13 21:37 -------- d-----w- c:\programdata\RogueKiller
2015-01-13 21:22 . 2014-12-12 05:35 5553592 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-01-13 21:22 . 2014-12-12 05:11 3971512 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2015-01-13 21:22 . 2014-12-12 05:11 3916728 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2015-01-13 21:22 . 2014-12-12 05:31 503808 ----a-w- c:\windows\system32\srcore.dll
2015-01-13 21:22 . 2014-12-12 05:31 50176 ----a-w- c:\windows\system32\srclient.dll
2015-01-13 21:22 . 2014-12-12 05:31 296960 ----a-w- c:\windows\system32\rstrui.exe
2015-01-13 21:22 . 2014-12-12 05:07 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2015-01-13 21:21 . 2014-12-19 03:06 210432 ----a-w- c:\windows\system32\profsvc.dll
2015-01-13 21:21 . 2014-12-06 04:17 303616 ----a-w- c:\windows\system32\nlasvc.dll
2015-01-13 21:21 . 2014-12-06 03:50 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2015-01-13 21:21 . 2014-12-06 03:50 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2015-01-13 21:21 . 2014-12-19 01:46 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2015-01-13 21:21 . 2014-12-11 17:47 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2015-01-11 00:38 . 2015-01-11 00:38 942808 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2015-01-11 00:38 . 2015-01-11 00:38 73800 ----a-w- c:\windows\system32\RtNicProp64.dll
2015-01-11 00:03 . 2015-01-11 00:03 -------- d-----w- c:\programdata\{D76294E6-03B8-4971-AF2E-3F846161A690}
2015-01-11 00:03 . 2015-01-11 00:03 -------- d-----w- c:\programdata\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2015-01-09 21:52 . 2015-01-09 21:52 -------- d-----w- c:\users\Alex Valencia\AppData\Roaming\NVIDIA
2015-01-08 00:22 . 2015-01-08 00:22 -------- d-----w- c:\windows\ERUNT
2015-01-07 04:50 . 2015-01-12 21:20 -------- d-----w- C:\FRST
2014-12-30 07:49 . 2014-12-30 07:53 -------- d-----w- c:\users\gamerpc\AppData\Roaming\Mupen64Plus
2014-12-28 01:09 . 2014-12-13 00:47 620176 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-12-27 02:14 . 2014-12-27 02:14 -------- d-----w- c:\users\gamerpc\AppData\Roaming\SUPERAntiSpyware.com
2014-12-27 02:12 . 2015-01-20 21:09 -------- d-----w- c:\program files\SUPERAntiSpyware
2014-12-27 02:12 . 2014-12-27 02:12 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2014-12-26 23:53 . 2014-12-27 01:57 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-12-26 23:52 . 2014-12-27 02:14 -------- d-----w- c:\users\gamerpc\mbar
2014-12-25 03:36 . 2014-12-25 03:36 -------- d-----w- C:\ManyCam
2014-12-25 03:34 . 2014-12-25 03:34 -------- d-----w- C:\Echobit
2014-12-25 03:32 . 2014-12-25 03:39 -------- d-----w- C:\acccore
2014-12-24 20:44 . 2014-12-24 20:44 26528 ----a-w- c:\windows\SysWow64\drivers\HWiNFO64A.SYS
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-01-20 23:38 . 2014-05-19 02:20 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-01-20 21:01 . 2013-09-12 01:42 16152 ----a-w- c:\windows\system32\drivers\SWDUMon.sys
2015-01-14 11:02 . 2013-09-30 08:10 113365784 ----a-w- c:\windows\system32\MRT.exe
2015-01-14 10:29 . 2014-09-26 23:51 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-01-14 10:29 . 2014-09-26 23:51 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-01-11 00:38 . 2012-10-18 19:00 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2014-12-31 11:14 . 2010-11-21 03:27 298120 ------w- c:\windows\system32\MpSigStub.exe
2014-12-15 07:43 . 2014-12-15 07:43 35992 ----a-w- c:\windows\system32\drivers\mcaudrv_x64.sys
2014-12-15 04:01 . 2014-12-15 04:01 49304 ----a-w- c:\windows\system32\drivers\mcvidrv.sys
2014-12-13 10:08 . 2014-11-19 03:06 24764232 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-12-13 10:08 . 2014-11-19 03:06 16040184 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-12-13 10:08 . 2014-11-19 03:06 2897824 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-12-13 10:08 . 2014-08-02 07:17 18594432 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-12-13 10:08 . 2014-08-02 07:17 14128496 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-12-13 10:08 . 2013-07-05 07:48 3293136 ----a-w- c:\windows\system32\nvapi64.dll
2014-12-13 08:03 . 2013-09-30 04:24 6859408 ----a-w- c:\windows\system32\nvcpl.dll
2014-12-13 08:03 . 2013-09-30 04:24 3513488 ----a-w- c:\windows\system32\nvsvc64.dll
2014-12-13 08:03 . 2013-09-30 04:24 935240 ----a-w- c:\windows\system32\nvvsvc.exe
2014-12-13 08:03 . 2013-09-30 04:24 62608 ----a-w- c:\windows\system32\nvshext.dll
2014-12-13 08:03 . 2013-09-30 04:24 386368 ----a-w- c:\windows\system32\nvmctray.dll
2014-12-13 08:03 . 2012-10-18 19:27 2558608 ----a-w- c:\windows\system32\nvsvcr.dll
2014-12-13 00:12 . 2014-06-03 20:54 1291464 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2014-12-13 00:12 . 2014-04-09 07:13 2210040 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-12-13 00:12 . 2014-06-03 20:54 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll
2014-12-13 00:12 . 2014-04-09 07:13 2824504 ----a-w- c:\windows\system32\nvspcap64.dll
2014-12-12 23:11 . 2013-09-30 04:24 4151176 ----a-w- c:\windows\system32\nvcoproc.bin
2014-12-08 07:59 . 2014-12-08 07:59 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-12-04 02:50 . 2014-12-09 20:09 413184 ----a-w- c:\windows\system32\generaltel.dll
2014-12-04 02:50 . 2014-12-09 20:09 741376 ----a-w- c:\windows\system32\invagent.dll
2014-12-04 02:50 . 2014-12-09 20:09 396800 ----a-w- c:\windows\system32\devinv.dll
2014-12-04 02:50 . 2014-12-09 20:09 830976 ----a-w- c:\windows\system32\appraiser.dll
2014-12-04 02:50 . 2014-12-09 20:09 192000 ----a-w- c:\windows\system32\aepic.dll
2014-12-04 02:50 . 2014-12-09 20:09 227328 ----a-w- c:\windows\system32\aepdu.dll
2014-12-04 02:44 . 2014-12-09 20:09 1083392 ----a-w- c:\windows\system32\aeinv.dll
2014-12-02 19:42 . 2012-10-25 04:35 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2014-12-02 19:42 . 2012-10-25 04:35 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2014-12-02 19:42 . 2012-10-25 04:35 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2014-12-02 19:42 . 2012-10-25 04:35 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2014-12-01 23:28 . 2014-12-09 20:09 1232040 ----a-w- c:\windows\system32\aitstatic.exe
2014-11-22 10:46 . 2014-12-17 10:47 38032 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2014-11-22 10:46 . 2014-12-17 10:47 32400 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2014-11-22 10:46 . 2014-04-09 07:11 35472 ----a-w- c:\windows\system32\nvaudcap64v.dll
2014-11-21 14:14 . 2014-05-19 02:20 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-21 14:14 . 2014-05-19 02:20 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-21 14:14 . 2012-11-29 10:26 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-21 11:37 . 2014-08-06 22:08 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-11-21 08:38 . 2014-12-13 02:26 51712 ----a-w- c:\windows\system32\ie4uinit.exe
2014-11-21 08:38 . 2014-12-13 02:26 2237952 ----a-w- c:\windows\system32\wininet.dll
2014-11-21 08:37 . 2014-12-13 02:26 600576 ----a-w- c:\windows\system32\vbscript.dll
2014-11-21 08:37 . 2014-12-13 02:26 1409536 ----a-w- c:\windows\system32\urlmon.dll
2014-11-21 08:36 . 2014-12-13 02:26 197120 ----a-w- c:\windows\system32\msrating.dll
2014-11-21 08:36 . 2014-12-13 02:26 19283456 ----a-w- c:\windows\system32\mshtml.dll
2014-11-21 08:36 . 2014-12-13 02:26 97280 ----a-w- c:\windows\system32\mshtmled.dll
2014-11-21 08:36 . 2014-12-13 02:26 603136 ----a-w- c:\windows\system32\msfeeds.dll
2014-11-21 08:36 . 2014-12-13 02:26 3959296 ----a-w- c:\windows\system32\jscript9.dll
2014-11-21 08:36 . 2014-12-13 02:26 53760 ----a-w- c:\windows\system32\jsproxy.dll
2014-11-21 08:36 . 2014-12-13 02:26 855552 ----a-w- c:\windows\system32\jscript.dll
2014-11-21 08:36 . 2014-12-13 02:26 15400960 ----a-w- c:\windows\system32\ieframe.dll
2014-11-21 08:36 . 2014-12-13 02:26 2655232 ----a-w- c:\windows\system32\iertutil.dll
2014-11-21 08:36 . 2014-12-13 02:26 526336 ----a-w- c:\windows\system32\ieui.dll
2014-11-21 08:36 . 2014-12-13 02:26 136704 ----a-w- c:\windows\system32\iesysprep.dll
2014-11-21 08:36 . 2014-12-13 02:26 67072 ----a-w- c:\windows\system32\iesetup.dll
2014-11-21 08:36 . 2014-12-13 02:26 39936 ----a-w- c:\windows\system32\iernonce.dll
2014-11-21 08:36 . 2014-12-13 02:26 255488 ----a-w- c:\windows\system32\iedkcs32.dll
2014-11-21 08:36 . 2014-12-13 02:26 451584 ----a-w- c:\windows\system32\dxtmsft.dll
2014-11-21 08:36 . 2014-12-13 02:26 281600 ----a-w- c:\windows\system32\dxtrans.dll
2014-11-21 08:35 . 2014-12-13 02:26 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2014-11-21 07:17 . 2014-12-13 02:26 1762816 ----a-w- c:\windows\SysWow64\wininet.dll
2014-11-21 07:17 . 2014-12-13 02:26 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-11-21 07:16 . 2014-12-13 02:26 2861568 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-11-21 07:16 . 2014-12-13 02:26 109056 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-11-21 07:16 . 2014-12-13 02:26 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-11-21 07:16 . 2014-12-13 02:26 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-11-21 07:00 . 2014-12-13 02:26 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2014-11-21 06:54 . 2014-12-13 02:26 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-11-21 06:31 . 2014-12-13 02:26 441856 ----a-w- c:\windows\system32\html.iec
2014-11-21 06:24 . 2014-12-13 02:26 361984 ----a-w- c:\windows\SysWow64\html.iec
2014-11-21 06:05 . 2014-12-13 02:26 89600 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-11-21 05:59 . 2014-12-13 02:26 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-11-15 22:04 . 2012-10-25 04:40 32320 ----a-w- c:\windows\system32\drivers\FNETTBOH_305.SYS
2014-11-14 14:12 . 2014-10-31 05:07 254976 ----a-w- c:\windows\system32\xvidvfw.dll
2014-11-14 14:11 . 2014-10-31 05:07 240128 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2014-11-13 15:05 . 2014-10-31 05:07 729088 ----a-w- c:\windows\system32\xvidcore.dll
2014-11-13 15:04 . 2009-10-06 07:16 655872 ----a-w- c:\windows\SysWow64\xvidcore.dll
2014-11-13 00:20 . 2014-11-19 03:06 1876296 ----a-w- c:\windows\system32\nvdispco6434475.dll
2014-11-13 00:20 . 2014-11-19 03:06 1540424 ----a-w- c:\windows\system32\nvdispgenco6434475.dll
2014-11-12 11:50 . 2014-11-12 11:50 0 ----a-w- c:\windows\SysWow64\sho939C.tmp
2014-11-11 03:09 . 2014-12-09 20:09 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-11-11 03:08 . 2014-11-18 19:08 241152 ----a-w- c:\windows\system32\pku2u.dll
2014-11-11 03:08 . 2014-11-18 19:08 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-11-11 02:44 . 2014-12-09 20:09 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-11-11 02:44 . 2014-11-18 19:08 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-11 02:44 . 2014-11-18 19:08 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-11 01:46 . 2014-12-09 20:09 119296 ----a-w- c:\windows\system32\drivers\tdx.sys
2014-11-08 03:16 . 2014-12-09 20:08 2048 ----a-w- c:\windows\system32\tzres.dll
2014-11-08 02:45 . 2014-12-09 20:08 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-11-06 05:42 . 2014-11-06 05:42 341848 ----a-w- c:\windows\SysWow64\DivXControlPanelApplet.cpl
2014-11-04 09:35 . 2014-06-16 04:47 590536 ----a-w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2014-11-04 00:04 . 2014-11-10 22:52 1876296 ----a-w- c:\windows\system32\nvdispco6434465.dll
2014-11-04 00:04 . 2014-11-10 22:52 1539272 ----a-w- c:\windows\system32\nvdispgenco6434465.dll
2009-12-06 09:18 26624 --sha-w- c:\windows\bfcs2.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F}]
2014-06-11 23:20 464720 ----a-w- c:\program files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-09-24 21:30 239272 ----a-w- c:\users\gamerpc\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-09-24 21:30 239272 ----a-w- c:\users\gamerpc\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-09-24 21:30 239272 ----a-w- c:\users\gamerpc\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-11-12 00:41 1729744 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-11-12 00:41 1729744 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-11-12 00:41 1729744 ----a-w- c:\program files\Microsoft Office 15\root\office15\grooveex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AIM"="c:\program files (x86)\AIM\aim.exe" [2012-05-30 4331392]
"ooVoo.exe"="c:\program files (x86)\ooVoo\oovoo.exe" [2014-09-01 36202560]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2015-01-19 1942720]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-10-23 39408]
"GoogleChromeAutoLaunch_B39D6C0379323E21774615E279B6C2EB"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2015-01-09 856904]
"EvolveClient"="c:\program files\Echobit\Evolve\EvolveClient.exe" [2015-01-09 3327872]
"SkyDrive"="c:\users\gamerpc\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" [2014-09-24 277672]
"DAEMON Tools Pro Agent"="c:\program files (x86)\DAEMON Tools Pro\DTAgent.exe" [2014-02-24 3129560]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-10-01 22065760]
"ManyCam"="c:\program files (x86)\ManyCam\ManyCam.exe" [2014-12-23 9726760]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2014-12-15 7780120]
"Advanced SystemCare Ultimate"="c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe" [2014-02-24 2521920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-10 1073312]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712]
"CloneCDTray"="c:\program files (x86)\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"CTSyncService"="c:\program files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe" [2009-07-08 1233195]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-11-17 448856]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2000-01-01 5299320]
"HostManager"="c:\program files (x86)\Common Files\AOL\1352139576\ee\AOLSoftware.exe" [2010-03-08 41800]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
"LTCM Client"="c:\program files (x86)\LTCM Client\ltcmClient.exe" [2009-08-05 1596096]
"PowerDVD12Agent"="c:\program files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe" [2012-09-18 374560]
"PowerDVD12DMREngine"="c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe" [2012-09-18 505872]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"VolPanel"="c:\program files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" [2009-05-05 241789]
"WD Drive Unlocker"="c:\program files (x86)\Western Digital\WD Apps\WDDriveAutoUnlock.exe" [2011-12-16 1687968]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2012-06-28 74752]
"XFastUSB"="c:\program files (x86)\XFastUSB\XFastUsb.exe" [2012-10-25 5019360]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-11-20 1021128]
"EKStatusMonitor"="c:\program files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe" [2013-01-15 2750840]
"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.EXE" [2012-10-08 3182080]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480]
"IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2014-10-14 1802048]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-10-07 507776]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-12-14 3838800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe;c:\program files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1;c:\windows\system32\libusbd-nt.exe;c:\windows\SYSNATIVE\libusbd-nt.exe [x]
R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 cpudrv64;cpudrv64;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 EvolveVirtualAdapter;Evolve Virtual Miniport Driver;c:\windows\system32\DRIVERS\evolve.sys;c:\windows\SYSNATIVE\DRIVERS\evolve.sys [x]
R3 EvoSvc;Evolve Service;c:\program files\Echobit\Evolve\EvoSvc.exe;c:\program files\Echobit\Evolve\EvoSvc.exe [x]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys;c:\windows\SYSNATIVE\drivers\libusb0.sys [x]
R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys;c:\windows\SYSNATIVE\DRIVERS\motccgp.sys [x]
R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys;c:\windows\SYSNATIVE\DRIVERS\motccgpfl.sys [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 motport;Motorola USB Diagnostic Port;c:\windows\system32\DRIVERS\motport.sys;c:\windows\SYSNATIVE\DRIVERS\motport.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]
R3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys;c:\windows\SYSNATIVE\DRIVERS\SWDUMon.sys [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x]
R3 WSDScan;WSD Scan Support via UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
R3 xb1usb;Microsoft Xbox One Controller Driver;c:\windows\system32\DRIVERS\xb1usb.sys;c:\windows\SYSNATIVE\DRIVERS\xb1usb.sys [x]
R3 XPADFL02;XPAD Filter Service 02;c:\windows\system32\DRIVERS\xpadfl02.sys;c:\windows\SYSNATIVE\DRIVERS\xpadfl02.sys [x]
R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AsrAppCharger.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS;c:\windows\SYSNATIVE\drivers\FNETURPX.SYS [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
S1 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys;c:\windows\SYSNATIVE\drivers\mbamchameleon.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
S2 {73526619-C24F-470B-9BED-53D455FBB5C6};Power Control [2012/10/24 21:37];c:\program files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl;c:\program files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [x]
S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe [x]
S2 ASCAntivirusSrv;AdvancedSystemCareAntivirus;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 CLHNServiceForPowerDVD12;CLHNServiceForPowerDVD12;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [x]
S2 ClickToRunSvc;Microsoft Office ClickToRun Service;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [x]
S2 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [x]
S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [x]
S2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
S2 Motorola Device Manager;Motorola Device Manager Service;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 ntk_PowerDVD12;ntk_PowerDVD12;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 PST Service;PST Service;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S2 WDDMService;WDDMService;c:\program files\Western Digital\WD SmartWare\WDDMService.exe;c:\program files\Western Digital\WD SmartWare\WDDMService.exe [x]
S2 WDDriveService;WD Drive Manager;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [x]
S2 WDFMEService;WDFME;c:\program files\Western Digital\WD SmartWare\WDFME.exe;c:\program files\Western Digital\WD SmartWare\WDFME.exe [x]
S2 WDRulesService;WDRules;c:\program files\Western Digital\WD SmartWare\WDRulesEngine.exe;c:\program files\Western Digital\WD SmartWare\WDRulesEngine.exe [x]
S3 FNETTBOH_305;FNETTBOH_305;c:\windows\system32\drivers\FNETTBOH_305.SYS;c:\windows\SYSNATIVE\drivers\FNETTBOH_305.SYS [x]
S3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv.sys;c:\windows\SYSNATIVE\DRIVERS\mcvidrv.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys;c:\windows\SYSNATIVE\drivers\mcaudrv_x64.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-01-15 07:56 1087816 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.99\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-01-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-26 10:29]
.
2015-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cfa712bccbb08c.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24 07:41]
.
2015-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cfa712be8cef20.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24 07:41]
.
2015-01-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1692155839-1707551626-4126777635-1001Core.job
- c:\users\gamerpc\AppData\Local\Google\Update\GoogleUpdate.exe [2014-07-25 07:41]
.
2015-01-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1692155839-1707551626-4126777635-1001UA.job
- c:\users\gamerpc\AppData\Local\Google\Update\GoogleUpdate.exe [2014-07-25 07:41]
.
2015-01-20 c:\windows\Tasks\SlimDrivers Startup.job
- c:\program files (x86)\SlimDrivers\SlimDrivers.exe [2013-09-24 19:49]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2015-01-15 20:43 2471744 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-09-24 21:30 266416 ----a-w- c:\users\gamerpc\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-09-24 21:30 266416 ----a-w- c:\users\gamerpc\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-09-24 21:30 266416 ----a-w- c:\users\gamerpc\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-11-12 08:07 2334928 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-11-12 08:07 2334928 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-11-12 08:07 2334928 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2000-01-01 5299320]
"RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 17920]
"WD Quick View"="c:\program files\Western Digital\WD SmartWare\WDDMStatus.exe" [2011-12-15 4244888]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-10-01 825184]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe" [2012-10-08 3182080]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-12-13 2531472]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-12-13 2824504]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-08-22 1331288]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.wwe.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = 127.0.0.1;localhost;10.*;192.168.*;127.0.0.1:895;127.0.0.1:896;192.168.*.*;<local>
uSearchAssistant = hxxp://www.google.com
FF - ProfilePath - c:\users\gamerpc\AppData\Roaming\Mozilla\Firefox\Profiles\yogn1qzz.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.wwe.com
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKU-Default-Run-Advanced SystemCare 8 - c:\program files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
SafeBoot-24779123.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
AddRemove-Whammy_1.0 - c:\windows\iun6002.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\{73526619-C24F-470B-9BED-53D455FBB5C6}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_257_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_257_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_257_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_257_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-01-20  16:08:01
ComboFix-quarantined-files.txt  2015-01-21 00:08
.
Pre-Run: 261,259,350,016 bytes free
Post-Run: 263,414,272,000 bytes free
.
- - End Of File - - 67BB381A8AA87489FE277B735A19A2AB
 


  • 0

Advertisements


#41
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Is the machine behaving any better? Have the disk error messages stopped?
  • 0

#42
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

well it's a lot smoother though I am seeing those error messages


  • 0

#43
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Have I mentioned that I dislike that error message? :rofl:

 

Seriously, it's my least favorite because it's so ambiguous. I'll re-review what we've done to date, but I'm think we may have to face the reality that your Hard Drive may in fact be failing. I'll be with you again this afternoon.


  • 0

#44
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 349 posts

okay and I was considering having the hard drive looked at soon to see if it is damaged or not.


  • 0

#45
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

I don't see that we've missed anything, so I'm going to recommend that you open a topic here. These folks are very good and have diagnostic tools beyond what I have here. So, give them a try and let me know how it goes. I'll keep this topic open for a few days while you work with them  :)


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP