keylogger

hello everybody
i was with 2 people on skype, they gave me a link and there was a keylogger on it, i have spybot search and destroy and i disabled all the taskmsgr incoming but they were still able to get into my computer.
i have run a scan with my anti-virus and with spybot, i deleted everything i found but i just don't know for sure if it's actually gone now, could u guys please check if it is deleted or not?
i have used hijackthis for a log, please help me, sorry for my bad english if i made many mistakes.
Greetz Thibaut

i can't add the logfile as attachement, so i opened it with notepad and i copy it down here:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:29:26 PM, on 2/23/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
F:\Thibaut\Spybot - Search & Destroy\TeaTimer.exe
C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\AVG\AVG2012\avgui.exe
F:\Firefox\firefox.exe
C:\PROGRA~2\Java\jre6\bin\jp2launcher.exe
C:\Program Files (x86)\Java\jre6\bin\java.exe
F:\Firefox\plugin-container.exe
F:\Thibaut\HijackThis\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14200
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 0.0.0.0:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
R3 - URLSearchHook: (no name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - F:\Thibaut\Orbitdownloader\orbitcth.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: PriceGong - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.5.1\PriceGongIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\Thibaut\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: RewardsArcade - {597A9974-8CB0-4f41-B61F-ED065738A397} - C:\Program Files (x86)\RewardsArcade\RewardsArcade.dll
O2 - BHO: DebugBar BHO - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - C:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Hot MP3 Toolbar - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files (x86)\Hot_MP3\tbHot_.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Download Accelerator Plus Integration - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~2\DAP\DAPIEL~1.DLL
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DebugBar - {3E1201F4-1707-409F-BB45-A5F192381DA0} - C:\Program Files (x86)\Core Services\DebugBar\DebugToolBar.dll
O3 - Toolbar: Hot MP3 Toolbar - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files (x86)\Hot_MP3\tbHot_.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [NVIDIA] C:\Users\thibaut\AppData\Roaming\Microsoft\Windows\Templates\nvdisp.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] F:\Thibaut\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Windows Update] C:\Users\thibaut\AppData\Local\Temp\GEDuplicatorII.exe
O4 - HKCU\..\Run: [HKCU] C:\Windows\WinDir\WinUpdate
O4 - HKCU\..\Run: [config driver] C:\Users\thibaut\AppData\Roaming\config\config32.exe
O4 - HKCU\..\Run: [SexMessenger] "F:\Thibaut\Talesrunner hk\SexMessenger\SexMessenger.exe -startup"
O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
O4 - HKCU\..\Run: [MouseRobotTrayService] C:\ProgramData\AutomationBox\MouseRobot2\Application\MouseRobotService.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\Windows\WinDir\WinUpdate
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\Windows\WinDir\WinUpdate
O4 - HKUS\S-1-5-18\..\Run: [Samsung.PCSync] "C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Samsung.PCSync] "C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Startup: OpenOffice.org 3.2 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Clean Traces - F:\Thibaut\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download by Orbit - res://F:\Thibaut\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Download with &DAP - F:\Thibaut\DAP\dapextie.htm
O8 - Extra context menu item: &Grab video by Orbit - res://F:\Thibaut\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://F:\Thibaut\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://F:\Thibaut\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Download &all with DAP - F:\Thibaut\DAP\dapextie2.htm
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\Thibaut\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\Thibaut\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {00BC5049-C7F3-4AC9-92AE-1991C76608B0} (TRLauncher Control) - http://weblogin.talesrunner.com.hk/TRLauncher.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s…yri_4.3.1.0.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Overwolf\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O19 - User stylesheet: C:\Users\thibaut\Downloads\ads.css
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: Overwolf Updater Service (OverwolfUpdaterService) - Overwolf Ltd - C:\Program Files (x86)\Overwolf\\OverwolfUpdater.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - F:\Thibaut\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: TurboBoost - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 16949 bytes

Hello troy, Thank you for helping me! I did everything you asked me and here are the logs: DDS: . DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_23 Run by [removed] at 22:43:29 on 2012-02-25 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1043.18.3949.968 [GMT 1:00] . AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\PROGRA~2\AVG\AVG2012\avgrsa.exe C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe C:\Windows\system32\atieclxx.exe C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe C:\Program Files (x86)\AVG\AVG2012\avgemca.exe C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe C:\Program Files\P4G\BatteryLife.exe C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe C:\Program Files (x86)\ASUS\Splendid\ACMON.exe C:\Windows\SysWOW64\ACEngSvr.exe C:\Program Files\Elantech\ETDCtrl.exe C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe C:\Program Files\IDT\WDM\sttray64.exe C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe F:\Thibaut\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files (x86)\Overwolf\Overwolf.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Windows\AsScrPro.exe C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe C:\Program Files (x86)\AVG\AVG2012\avgtray.exe C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\wuauclt.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\DllHost.exe C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe F:\Firefox\firefox.exe F:\Firefox\plugin-container.exe C:\Program Files\Java\jre6\bin\javaw.exe C:\PROGRA~2\Java\jre6\bin\jp2launcher.exe C:\Program Files (x86)\Java\jre6\bin\java.exe C:\Windows\system32\conhost.exe C:\Windows\system32\calc.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://eu.ask.com/?l=dis&o=14200 uDefault_Page_URL = hxxp://asus.msn.com uInternet Settings,ProxyServer = 0.0.0.0:80 uInternet Settings,ProxyOverride = *.local uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll uURLSearchHooks: H - No File mURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll mURLSearchHooks: Hot MP3 Toolbar: {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files (x86)\Hot_MP3\tbHot_.dll mWinlogon: Userinit=userinit.exe, BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - F:\Thibaut\Orbitdownloader\orbitcth.dll BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll BHO: Shopping Assistant Plugin: {1631550f-191d-4826-b069-d9439253d926} - C:\Program Files (x86)\PriceGong\2.5.1\PriceGongIE.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - F:\Thibaut\Spybot - Search & Destroy\SDHelper.dll BHO: DebugBar BHO: {69fc0024-10eb-480a-bbf2-3bf4e78e17b1} - C:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll BHO: Aanmeldhulp voor Windows Live ID: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Hot MP3 Toolbar: {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files (x86)\Hot_MP3\tbHot_.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll BHO: Download Accelerator Plus Integration: {ff6c3cf0-4b15-11d1-abed-709549c10000} - C:\PROGRA~2\DAP\DAPIEL~1.DLL BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll TB: DebugBar: {3e1201f4-1707-409f-bb45-a5f192381da0} - C:\Program Files (x86)\Core Services\DebugBar\DebugToolBar.dll TB: Hot MP3 Toolbar: {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - C:\Program Files (x86)\Hot_MP3\tbHot_.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File TB: {5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - No File TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background uRun: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun uRun: [NVIDIA] C:\Users\thibaut\AppData\Roaming\Microsoft\Windows\Templates\nvdisp.exe uRun: [SpybotSD TeaTimer] F:\Thibaut\Spybot - Search & Destroy\TeaTimer.exe uRun: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h uRun: [SexMessenger] "F:\Thibaut\Talesrunner hk\SexMessenger\SexMessenger.exe -startup" uRun: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent uRun: [MouseRobotTrayService] C:\ProgramData\AutomationBox\MouseRobot2\Application\MouseRobotService.exe uRun: [Windows Update] C:\Users\thibaut\AppData\Local\Temp\GEDuplicatorII.exe uRun: [HKCU] C:\Windows\WinDir\WinUpdate uRun: [config driver] C:\Users\thibaut\AppData\Roaming\config\config32.exe mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" dRun: [Samsung.PCSync] "C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe" /NoDialog StartupFolder: C:\Users\thibaut\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\FANCYS~1.LNK - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\HPDIGI~1.LNK - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: &Clean Traces - F:\Thibaut\DAP\Privacy Package\dapcleanerie.htm IE: &Download by Orbit - F:\Thibaut\Orbitdownloader\orbitmxt.dll/201 IE: &Download with &DAP - F:\Thibaut\DAP\dapextie.htm IE: &Grab video by Orbit - F:\Thibaut\Orbitdownloader\orbitmxt.dll/204 IE: Do&wnload selected by Orbit - F:\Thibaut\Orbitdownloader\orbitmxt.dll/203 IE: Down&load all by Orbit - F:\Thibaut\Orbitdownloader\orbitmxt.dll/202 IE: Download &all with DAP - F:\Thibaut\DAP\dapextie2.htm IE: Google Sidewiki… - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - F:\Thibaut\Spybot - Search & Destroy\SDHelper.dll DPF: {00BC5049-C7F3-4AC9-92AE-1991C76608B0} - hxxp://weblogin.talesrunner.com.hk/TRLauncher.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=100 TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{6E938A01-EAB5-4BA4-8D2F-F7601D0290FA} : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{6E938A01-EAB5-4BA4-8D2F-F7601D0290FA}\2626F68723D263730303 : DhcpNameServer = 192.168.1.1 Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Overwolf\SKYPE4~1.DLL Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - F:\Thibaut\DAP\dapie.dll Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - F:\Thibaut\DAP\dapie.dll {000123B4-9B42-4900-B3F7-F4B073EFC214} {0347C33E-8762-4905-BF09-768834316C61} {1631550F-191D-4826-B069-D9439253D926} {18DF081C-E8AD-4283-A596-FA578C2EBDC3} {3049C3E9-B461-4BC5-8870-4C09146192CA} {30F9B915-B755-4826-820B-08FBA6BD249D} {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} {53707962-6F74-2D53-2644-206D7942484F} {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} {9030D464-4C02-4ABF-8ECC-5164760863C6} {9384bd4c-dd14-4be9-80f7-f6277511e4f5} {AA58ED58-01DD-4d91-8333-CF10577473F7} {ba14329e-9550-4989-b3f2-9732e92d17cc} {DBC80044-A445-435b-BC74-9C25C1C588A9} {FF6C3CF0-4B15-11D1-ABED-709549C10000} {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} {ba14329e-9550-4989-b3f2-9732e92d17cc} {30F9B915-B755-4826-820B-08FBA6BD249D} {3E1201F4-1707-409F-BB45-A5F192381DA0} {9384bd4c-dd14-4be9-80f7-f6277511e4f5} {2318C2B1-4965-11d4-9B18-009027A5CD4F} TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File TB-X64: {5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - No File TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun-x64: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\thibaut\AppData\Roaming\Mozilla\Firefox\Profiles\xe68ts4u.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Web Search FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/ FF - prefs.js: network.proxy.type - 0 FF - component: C:\Program Files (x86)\AVG\AVG10\Firefox4\components\avgssff4.dll FF - component: C:\Program Files (x86)\DAP\DAPFireFox\components\DAPFireFox.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBook.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBookDB.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpNeoLogger.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSaturn.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSeymour.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartSelect.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartWebPrinting.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSWPOperation.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPLogging.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTC.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTL.dll FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXREStub.dll FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll . ============= SERVICES / DRIVERS =============== . R0 AVGIDSEH;AVGIDSEH;C:\Windows\system32\DRIVERS\AVGIDSEH.Sys –> C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [?] R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\system32\DRIVERS\avgrkx64.sys –> C:\Windows\system32\DRIVERS\avgrkx64.sys [?] R0 Lbd;Lbd;C:\Windows\system32\DRIVERS\Lbd.sys –> C:\Windows\system32\DRIVERS\Lbd.sys [?] R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\system32\DRIVERS\avgldx64.sys –> C:\Windows\system32\DRIVERS\avgldx64.sys [?] R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\system32\DRIVERS\avgmfx64.sys –> C:\Windows\system32\DRIVERS\avgmfx64.sys [?] R1 Avgtdia;AVG TDI Driver;C:\Windows\system32\DRIVERS\avgtdia.sys –> C:\Windows\system32\DRIVERS\avgtdia.sys [?] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys –> C:\Windows\system32\DRIVERS\vwififlt.sys [?] R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/09/08 21:56:20];C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [2010-2-24 146928] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe –> C:\Windows\system32\atiesrxx.exe [?] R2 ASMMAP64;ASMMAP64;C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-7-3 15416] R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248] R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-8-2 192776] R2 LMIGuardianSvc;LMIGuardianSvc;C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2010-12-8 375176] R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files (x86)\LogMeIn\x64\rainfo.sys [2010-9-17 15928] R2 LMIRfsDriver;LogMeIn Remote File System Driver;\??\C:\Windows\system32\drivers\LMIRfsDriver.sys –> C:\Windows\system32\drivers\LMIRfsDriver.sys [?] R2 TeamViewer7;TeamViewer 7;C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832] R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys –> C:\Windows\system32\DRIVERS\TurboB.sys [?] R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-9-9 2314240] R2 VMCService;Vodafone Mobile Connect Service;C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2008-7-4 14336] R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys –> C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [?] R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys –> C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [?] R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\system32\DRIVERS\ETD.sys –> C:\Windows\system32\DRIVERS\ETD.sys [?] R3 HECIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys –> C:\Windows\system32\DRIVERS\HECIx64.sys [?] R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys –> C:\Windows\system32\DRIVERS\Impcd.sys [?] R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\system32\DRIVERS\L1C62x64.sys –> C:\Windows\system32\DRIVERS\L1C62x64.sys [?] S2 AFBAgent;AFBAgent;"C:\Windows\system32\FBAgent.exe" –> C:\Windows\system32\FBAgent.exe [?] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-9-9 135664] S2 SBSDWSCService;SBSD Security Center Service;F:\Thibaut\Spybot - Search & Destroy\SDWinSec.exe [2011-3-12 1153368] S3 AmUStor;AM USB Stroage Driver;C:\Windows\system32\drivers\AmUStor.SYS –> C:\Windows\system32\drivers\AmUStor.SYS [?] S3 androidusb;ADB Interface Driver;C:\Windows\system32\Drivers\androidusb.sys –> C:\Windows\system32\Drivers\androidusb.sys [?] S3 fssfltr;fssfltr;C:\Windows\system32\DRIVERS\fssfltr.sys –> C:\Windows\system32\DRIVERS\fssfltr.sys [?] S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840] S3 gupdatem;Google Update-service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-9-9 135664] S3 npggsvc;nProtect GameGuard Service;C:\Windows\system32\GameMon.des -service –> C:\Windows\system32\GameMon.des -service [?] S3 OverwolfUpdaterService;Overwolf Updater Service;C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2011-12-26 17848] S3 Revoflt;Revoflt;C:\Windows\system32\DRIVERS\revoflt.sys –> C:\Windows\system32\DRIVERS\revoflt.sys [?] S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\system32\DRIVERS\SiSG664.sys –> C:\Windows\system32\DRIVERS\SiSG664.sys [?] S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096] S3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-8-6 118672] S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\system32\Wat\WatAdminSvc.exe –> C:\Windows\system32\Wat\WatAdminSvc.exe [?] S3 zghsmdm;ZTE General Handset USB Modem Proprietary;C:\Windows\system32\DRIVERS\zghsmdm.sys –> C:\Windows\system32\DRIVERS\zghsmdm.sys [?] . =============== Created Last 30 ================ . 2012-02-25 13:16:44 ——– d—–w- C:\Users\thibaut\jagexcache2 2012-02-25 10:16:22 ——– d—–w- C:\Users\thibaut\AppData\Local\{4727B385-12A4-47F7-B9A9-D503D0F74EB4} 2012-02-25 10:16:00 ——– d—–w- C:\Users\thibaut\AppData\Local\{61694D9C-B015-400F-A6AB-F0AD3222488E} 2012-02-24 22:15:44 ——– d—–w- C:\Users\thibaut\AppData\Local\{3BE023BB-9755-4F2F-85D3-776F6413D399} 2012-02-24 22:15:24 ——– d—–w- C:\Users\thibaut\AppData\Local\{6ABD9E20-B0E2-4701-8EC1-6926AB880D85} 2012-02-24 12:50:46 ——– d—–w- C:\Users\thibaut\AppData\Roaming\EpicBot 2012-02-24 12:50:27 ——– d—–w- C:\Program Files (x86)\EpicBot 2012-02-24 10:04:21 ——– d—–w- C:\Users\thibaut\AppData\Local\{D4A48DD1-58C3-4ECA-97B2-0FF833A777EE} 2012-02-24 10:03:42 ——– d—–w- C:\Users\thibaut\AppData\Local\{A084251F-BD4E-4B9B-91F2-A84AD892EE76} 2012-02-23 20:56:25 3583 —-a-w- C:\Users\thibaut\AppData\Roaming\WYH7V7.dll 2012-02-23 20:55:54 230912 —-a-w- C:\Users\thibaut\AppData\Roaming\Windows Task manager.exe 2012-02-23 20:55:52 230912 —-a-w- C:\Users\thibaut\AppData\Roaming\K77R7JMI.exe 2012-02-23 20:33:02 ——– d—–w- C:\Users\thibaut\AppData\Local\{6BEF571B-293C-45FA-A69E-923723E0776E} 2012-02-23 20:32:40 ——– d—–w- C:\Users\thibaut\AppData\Local\{E84ABAFE-CFEC-4A14-875E-C826F1834130} 2012-02-23 08:32:01 ——– d—–w- C:\Users\thibaut\AppData\Local\{93A4611F-3242-466C-BCE7-1307B604D820} 2012-02-23 08:31:38 ——– d—–w- C:\Users\thibaut\AppData\Local\{7F51ADEA-CA95-4361-9E2C-9336CED7BACD} 2012-02-22 19:48:34 ——– d—–w- C:\Users\thibaut\AppData\Local\{9CD83104-0296-4B7D-9D27-76243E68DEC2} 2012-02-22 19:48:13 ——– d—–w- C:\Users\thibaut\AppData\Local\{D5645D57-6DC2-4466-A130-F047A029E0C2} 2012-02-22 07:47:54 ——– d—–w- C:\Users\thibaut\AppData\Local\{E7ED3C42-FFE0-4836-B7A2-63178576591C} 2012-02-22 07:47:38 ——– d—–w- C:\Users\thibaut\AppData\Local\{933E1330-9DC4-4716-87BD-5414FFA3BBF5} 2012-02-21 11:22:04 ——– d—–w- C:\Users\thibaut\AppData\Local\{175863C5-9584-43A9-9844-CE639B809908} 2012-02-21 11:21:45 ——– d—–w- C:\Users\thibaut\AppData\Local\{B886E48F-3066-47E6-8CFF-3336DC62AF0A} 2012-02-20 21:15:29 ——– d—–w- C:\Users\thibaut\AppData\Local\{9F86F202-7386-4C93-B341-65D6F1DB2FC0} 2012-02-20 21:15:07 ——– d—–w- C:\Users\thibaut\AppData\Local\{7BD2B705-81EB-4BA4-B3BF-F107718DD1D8} 2012-02-20 09:14:54 ——– d—–w- C:\Users\thibaut\AppData\Local\{A1F0998D-E9EF-437A-B1A4-916C50BAF755} 2012-02-20 09:14:43 ——– d—–w- C:\Users\thibaut\AppData\Local\{38DC20A1-37F8-463F-9EF3-955329E8187B} 2012-02-19 21:09:42 ——– d—–w- C:\Users\thibaut\AppData\Local\{EFD530C0-F49B-466F-A994-4BA0E07DA7BB} 2012-02-19 21:09:32 ——– d—–w- C:\Users\thibaut\AppData\Local\{2C2F14A0-0AD2-4617-A4C7-ED5717D1939A} 2012-02-19 09:09:18 ——– d—–w- C:\Users\thibaut\AppData\Local\{16D765C3-8050-44E6-91B5-BE99C3A0529D} 2012-02-19 09:08:56 ——– d—–w- C:\Users\thibaut\AppData\Local\{59A23833-14DF-433D-823B-64EEB90C57BF} 2012-02-18 21:08:42 ——– d—–w- C:\Users\thibaut\AppData\Local\{B7BF8E2E-0D32-4323-9444-1AD3D97EF80B} 2012-02-18 21:08:30 ——– d—–w- C:\Users\thibaut\AppData\Local\{1794FFD9-D363-4234-9C47-955A7D934A11} 2012-02-18 09:08:16 ——– d—–w- C:\Users\thibaut\AppData\Local\{6A83AF6A-80F7-49C2-BF64-C079F9EA91F0} 2012-02-18 09:07:53 ——– d—–w- C:\Users\thibaut\AppData\Local\{6F644697-CBA0-4ECD-A96A-D902E57689AE} 2012-02-17 16:02:29 509952 —-a-w- C:\Windows\System32\ntshrui.dll 2012-02-17 16:02:29 442880 —-a-w- C:\Windows\SysWow64\ntshrui.dll 2012-02-17 16:02:21 515584 —-a-w- C:\Windows\System32\timedate.cpl 2012-02-17 16:02:21 478208 —-a-w- C:\Windows\SysWow64\timedate.cpl 2012-02-17 16:02:21 3143168 —-a-w- C:\Windows\System32\win32k.sys 2012-02-17 16:02:19 499200 —-a-w- C:\Windows\System32\drivers\afd.sys 2012-02-17 16:02:13 690688 —-a-w- C:\Windows\SysWow64\msvcrt.dll 2012-02-17 16:02:13 634368 —-a-w- C:\Windows\System32\msvcrt.dll 2012-02-12 20:30:28 ——– d—–w- C:\Users\thibaut\AppData\Local\{77D3CDD7-4BBE-41A1-9B19-423035BA7942} 2012-02-12 20:30:07 ——– d—–w- C:\Users\thibaut\AppData\Local\{5A450DDB-A71A-4966-AE0B-4BF8846DF15E} 2012-02-12 17:21:20 ——– d—–w- C:\Program Files (x86)\Common Files\Overwolf 2012-02-12 15:53:00 ——– d—–w- C:\Users\thibaut\AppData\Local\Microsoft Help 2012-02-12 08:29:41 ——– d—–w- C:\Users\thibaut\AppData\Local\{D87F6DCF-FF20-444B-AFF9-6397E77059A4} 2012-02-12 08:29:20 ——– d—–w- C:\Users\thibaut\AppData\Local\{99CCFC42-5F81-49C2-A18A-18C7E972394C} 2012-02-11 20:29:09 ——– d—–w- C:\Users\thibaut\AppData\Local\{730CB8EF-A86F-40B3-B11C-8302891814FB} 2012-02-11 20:28:45 ——– d—–w- C:\Users\thibaut\AppData\Local\{5F69DA8F-6724-4A6C-B3A4-F198465EF706} 2012-02-11 08:28:34 ——– d—–w- C:\Users\thibaut\AppData\Local\{387222F0-9A2E-4D4C-BBB6-9987CB413745} 2012-02-11 08:28:24 ——– d—–w- C:\Users\thibaut\AppData\Local\{97F106B9-E8BA-4D6C-B7F5-902C18C4232A} 2012-02-11 08:28:14 ——– d—–w- C:\Users\thibaut\AppData\Local\{AA1F8C03-7666-468E-B47C-D5303C4BDA0F} 2012-02-11 08:27:53 ——– d—–w- C:\Users\thibaut\AppData\Local\{13C1946F-A4EC-496B-8CAF-E7668BCC6280} 2012-02-10 20:27:39 ——– d—–w- C:\Users\thibaut\AppData\Local\{AF85E417-D7E1-4617-A241-07E71F4E0CD2} 2012-02-10 20:27:18 ——– d—–w- C:\Users\thibaut\AppData\Local\{724B8E84-1ED3-444B-8DF7-400AE1CD009F} 2012-02-10 20:26:35 ——– d—–w- C:\Users\thibaut\AppData\Local\{2BBE98A4-E556-420B-B686-352524893453} 2012-02-10 06:26:28 ——– d—–w- C:\Users\thibaut\AppData\Local\{4F11FD80-DEE5-458A-9965-92AF2940E889} 2012-02-10 06:26:07 ——– d—–w- C:\Users\thibaut\AppData\Local\{E246BBBD-F951-4516-B61B-A5088667AFC1} 2012-02-10 06:25:42 ——– d—–w- C:\Users\thibaut\AppData\Local\{0BCDB6D6-A9E3-4767-B80E-3565FCBBFA56} 2012-02-09 11:01:56 ——– d—–w- C:\Users\thibaut\AppData\Local\{B7B521D3-687F-4B47-B483-FEB71DD9BE19} 2012-02-09 11:01:46 ——– d—–w- C:\Users\thibaut\AppData\Local\{149F4B04-D4F9-4056-ACE4-12DC481B594A} 2012-02-09 11:01:35 ——– d—–w- C:\Users\thibaut\AppData\Local\{C4983CFB-BB6B-4DD7-98AE-6CE65DBF204D} 2012-02-09 11:01:08 ——– d—–w- C:\Users\thibaut\AppData\Local\{A93812B2-874D-4290-929C-07AA2CB2F716} 2012-02-08 19:08:25 ——– d—–w- C:\Users\thibaut\AppData\Local\{B6C68FB8-E294-4CE9-AD56-5A6464F598A3} 2012-02-08 19:08:15 ——– d—–w- C:\Users\thibaut\AppData\Local\{26A99EB9-D792-4311-ABAA-A2E2DBD01EBF} 2012-02-08 19:08:05 ——– d—–w- C:\Users\thibaut\AppData\Local\{D5F6C526-A8C2-498C-B5C8-17974754BA3E} 2012-02-08 19:07:31 ——– d—–w- C:\Users\thibaut\AppData\Local\{056B0861-BF6C-4CB6-8F04-15C3D06B0F94} 2012-02-08 06:25:53 ——– d—–w- C:\Users\thibaut\AppData\Local\{6D1CF92E-8F9B-496F-8E15-D00A01B21A3C} 2012-02-08 06:25:29 ——– d—–w- C:\Users\thibaut\AppData\Local\{95D69483-33C3-40F5-9EB6-AFD778B01D94} 2012-02-07 18:17:56 ——– d—–w- C:\Users\thibaut\AppData\Local\{75C96627-A280-468D-8B1A-E4F1691C0AE7} 2012-02-07 18:17:35 ——– d—–w- C:\Users\thibaut\AppData\Local\{9327EA84-63C1-4B89-891A-24C8A6A190AD} 2012-02-07 06:17:21 ——– d—–w- C:\Users\thibaut\AppData\Local\{AF86122F-B321-4B3E-803E-081C9FCD47ED} 2012-02-07 06:17:07 ——– d—–w- C:\Users\thibaut\AppData\Local\{9B2DA45B-B0D8-4AD7-886F-DA3E74B583A7} 2012-02-06 11:38:35 ——– d—–w- C:\Users\thibaut\AppData\Local\{73802CF1-F7FF-4B89-9F8A-D523B22FB415} 2012-02-06 11:38:13 ——– d—–w- C:\Users\thibaut\AppData\Local\{7774703F-AE65-4C36-B554-6721CD33C550} 2012-02-05 20:44:05 ——– d—–w- C:\Users\thibaut\AppData\Local\{EE6AA514-F29C-45EF-AC55-3E522F2F90F2} 2012-02-05 20:43:44 ——– d—–w- C:\Users\thibaut\AppData\Local\{D13BDC92-6B63-4BD4-8C8C-FE8547BD6494} 2012-02-05 08:43:31 ——– d—–w- C:\Users\thibaut\AppData\Local\{F92794A7-38E4-41F5-B5D9-79EF9592D756} 2012-02-05 08:43:08 ——– d—–w- C:\Users\thibaut\AppData\Local\{25428C62-6DB0-46F1-8EA0-128089F773D9} 2012-02-04 20:42:57 ——– d—–w- C:\Users\thibaut\AppData\Local\{96BFB0C0-2FA1-406B-9187-A323C40C9350} 2012-02-04 20:42:34 ——– d—–w- C:\Users\thibaut\AppData\Local\{E4EA5311-40C6-472D-91A0-DECDEFA2E6FF} 2012-02-04 08:42:22 ——– d—–w- C:\Users\thibaut\AppData\Local\{65E2D4BE-F18A-4D23-A6CF-C43F9C38FFC2} 2012-02-04 08:42:01 ——– d—–w- C:\Users\thibaut\AppData\Local\{74534B65-0D93-4326-AE3F-26DD7C73EED3} 2012-02-03 20:41:45 ——– d—–w- C:\Users\thibaut\AppData\Local\{22F59662-666A-4E50-A2F3-DF88E834F336} 2012-02-03 20:41:27 ——– d—–w- C:\Users\thibaut\AppData\Local\{5E0DA07F-7CCC-4078-A65E-BBC8466A21BA} 2012-02-03 11:44:27 ——– d—–w- C:\ProgramData\1B47 2012-02-03 11:41:38 ——– d—–w- C:\Users\thibaut\AppData\Roaming\Easy MP3 Recorder 2012-02-03 11:41:32 723294 —-a-w- C:\Windows\unins000.exe 2012-02-03 11:41:08 ——– d—–w- C:\Program Files (x86)\Moozy 2012-02-03 06:25:40 ——– d—–w- C:\Users\thibaut\AppData\Local\{7EA58384-BA29-414A-A981-E25C6178710E} 2012-02-03 06:25:21 ——– d—–w- C:\Users\thibaut\AppData\Local\{7E6D164C-9A87-4CF4-8301-FA53E68271E1} 2012-02-02 11:09:19 ——– d—–w- C:\Users\thibaut\AppData\Local\{0F8C1FCA-4FFA-4686-AD7D-A662CC6ADD08} 2012-02-02 11:08:50 ——– d—–w- C:\Users\thibaut\AppData\Local\{9C8B5A2D-3564-488C-AFB4-322BAC1E3296} 2012-02-01 18:27:03 ——– d—–w- C:\Users\thibaut\AppData\Local\{CE6ABA75-3B24-4EBF-AC50-631DFE363669} 2012-02-01 18:26:53 ——– d—–w- C:\Users\thibaut\AppData\Local\{93EC2D55-5375-4239-9FED-E42B27FF2B82} 2012-02-01 06:26:40 ——– d—–w- C:\Users\thibaut\AppData\Local\{F002EEE2-315D-40B9-9BF6-B2DB2403F9B6} 2012-02-01 06:26:14 ——– d—–w- C:\Users\thibaut\AppData\Local\{8B4BB5D7-E104-4B6C-8297-5FE1452867F9} 2012-01-31 18:22:56 ——– d—–w- C:\Users\thibaut\AppData\Local\{3583D09E-6FD4-4DFC-8B12-D9CECA458A90} 2012-01-31 18:22:35 ——– d—–w- C:\Users\thibaut\AppData\Local\{0ED1C6CE-B0A4-4D91-BA63-D18D168FEE29} 2012-01-31 06:22:13 ——– d—–w- C:\Users\thibaut\AppData\Local\{E150BBCF-CDDD-4554-A0C6-292E98ECA9FD} 2012-01-31 06:21:54 ——– d—–w- C:\Users\thibaut\AppData\Local\{5F398945-ADCF-40F6-B5E7-6007E38ACB2A} 2012-01-30 11:05:12 ——– d—–w- C:\Users\thibaut\AppData\Local\{D94023DA-1DFA-439E-8032-9333F14CFC13} 2012-01-30 11:04:57 ——– d—–w- C:\Users\thibaut\AppData\Local\{FD551897-245B-42ED-B5EF-F06FB575061C} 2012-01-29 20:17:51 ——– d—–w- C:\Users\thibaut\AppData\Local\{36064093-340E-4262-ADA0-7A33877DB4B2} 2012-01-29 20:17:29 ——– d—–w- C:\Users\thibaut\AppData\Local\{F6519AED-F131-4FE5-8EF6-B5E980DC1D38} 2012-01-29 08:17:14 ——– d—–w- C:\Users\thibaut\AppData\Local\{AA275F34-5583-4450-8421-E1CEDBE233FE} 2012-01-29 08:16:53 ——– d—–w- C:\Users\thibaut\AppData\Local\{BE741CA6-387A-49AD-B673-79D7D0B0CB26} 2012-01-28 19:51:48 ——– d—–w- C:\Users\thibaut\AppData\Local\{F6601327-47F5-4573-84B0-326A17F49297} 2012-01-28 19:51:26 ——– d—–w- C:\Users\thibaut\AppData\Local\{F06FC17D-EED0-4160-B683-C78D9484251C} 2012-01-28 08:11:54 ——– d—–w- C:\Program Files\iTunes 2012-01-28 08:11:54 ——– d—–w- C:\Program Files\iPod 2012-01-28 07:51:12 ——– d—–w- C:\Users\thibaut\AppData\Local\{5F663B3E-0050-42A8-9670-943947FA0F3B} 2012-01-28 07:50:57 ——– d—–w- C:\Users\thibaut\AppData\Local\{F4AD6278-FAD4-4A96-8411-8B84939EF716} 2012-01-27 11:40:44 ——– d—–w- C:\Users\thibaut\AppData\Local\{A56FA48A-6822-453B-B4E8-5FE7FDF54DDF} 2012-01-27 11:40:20 ——– d—–w- C:\Users\thibaut\AppData\Local\{CE75C9CA-1CD2-40DC-BD87-72EC4FED0C65} . ==================== Find3M ==================== . 2012-02-18 09:07:54 414368 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2012-02-10 17:22:36 525544 —-a-w- C:\Windows\System32\deployJava1.dll 2012-02-07 17:12:36 87456 —-a-w- C:\Windows\System32\LMIRfsClientNP.dll 2012-02-07 17:12:36 80768 —-a-w- C:\Windows\System32\LMIinit.dll 2012-02-07 17:12:36 34688 —-a-w- C:\Windows\System32\LMIport.dll 2011-12-29 18:00:00 79360 —-a-w- C:\Windows\SysWow64\ff_vfw.dll 2011-12-21 18:14:02 151552 —-a-w- C:\Windows\SysWow64\ac3acm.acm 2011-12-20 08:05:05 87456 —-a-w- C:\Windows\System32\LMIRfsClientNP.dll.000.bak 2011-12-15 04:39:42 28056 —-a-w- C:\Windows\System32\xfcodec64.dll 2011-12-14 07:11:03 2308096 —-a-w- C:\Windows\System32\jscript9.dll 2011-12-14 07:04:30 1390080 —-a-w- C:\Windows\System32\wininet.dll 2011-12-14 07:03:38 1493504 —-a-w- C:\Windows\System32\inetcpl.cpl 2011-12-14 06:57:28 2382848 —-a-w- C:\Windows\System32\mshtml.tlb 2011-12-14 03:04:54 1798656 —-a-w- C:\Windows\SysWow64\jscript9.dll 2011-12-14 02:57:18 1127424 —-a-w- C:\Windows\SysWow64\wininet.dll 2011-12-14 02:56:58 1427456 —-a-w- C:\Windows\SysWow64\inetcpl.cpl 2011-12-14 02:50:04 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb 2011-12-10 14:24:08 23152 —-a-w- C:\Windows\System32\drivers\mbam.sys 2011-11-30 15:29:24 84480 —-a-w- C:\Windows\SysWow64\EasyHook32.dll 2011-11-30 15:29:24 109216 —-a-w- C:\Windows\SysWow64\EasyHook64.dll . ============= FINISH: 22:45:28.16 =============== Attach: . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Home Premium Boot Device: \Device\HarddiskVolume2 Install Date: 11/17/2010 4:52:17 PM System Uptime: 2/25/2012 3:56:17 PM (7 hours ago) . Motherboard: ASUSTeK Computer Inc. | | K72Jr Processor: Intel® Core™ i5 CPU M 460 @ 2.53GHz | Socket 989 | 2534/133mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 75 GiB total, 25.044 GiB free. D: is FIXED (NTFS) - 204 GiB total, 203.925 GiB free. E: is CDROM (CDFS) F: is FIXED (NTFS) - 149 GiB total, 64.538 GiB free. G: is FIXED (NTFS) - 149 GiB total, 139.14 GiB free. H: is CDROM () J: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . No restore point in system. . ==== Installed Programs ====================== . Acrobat.com Adobe After Effects CS5.5 Adobe AIR Adobe Community Help Adobe Download Assistant Adobe Flash Player 10 ActiveX Adobe Reader 9.2 MUI Adobe Shockwave Player 11.6 Adobe Story Alcor Micro USB Card Reader Alice Greenfingers Apple Application Support Apple Software Update ASIO4ALL ASUS AI Recovery ASUS AP Bank ASUS FancyStart ASUS LifeFrame3 ASUS Live Update ASUS MultiFrame ASUS SmartLogon ASUS Splendid Video Enhancement Technology ASUS Virtual Camera ASUS WebStorage ATK Package AviSynth 2.5 Boingo Wi-Fi BufferChm Catalyst Control Center - Branding Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Common Catalyst Control Center Graphics Previews Vista Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-core-static CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish Combat Arms EU Conduit Engine ControlDeck Cross Fire En CyberLink LabelPrint CyberLink Power2Go CyberLink PowerDVD 9 CycoreFX HD-64 1.7.1 for After Effects D2300 D2300_Help D3DX10 DebugBar v5.4.1 for Internet Explorer (remove only) DeviceDiscovery Divine Souls Download Accelerator Plus (DAP) Dream Day Wedding Married in Manhattan Driver Sweeper 2.1.0 Easy MP3 Downloader EpicBot FL Studio 10 Flyff Fraps (remove only) FrostWire 4.21.5 FrostWire 5.0.8 Game Park Console GetFLV Pro 9.0.1.3 Google Chrome Google Earth Google Toolbar for Internet Explorer Google Update Helper GPBaseService2 HiJackThis Hot_MP3 Toolbar HP Update HPPhotoGadget HPProductAssistant HPSSupply HyperCam 3 IDT Audio IETester v0.4.10 (remove only) IL Download Manager iMesh IMVU Avatar Chat Software InstallIQ Updater Intel® Management Engine Components Intel® Turbo Boost Technology Driver Java Auto Updater Java™ 6 Update 23 Junk Mail filter update K-Lite Codec Pack 8.1.0 (Full) K_Series_ScreenSaver_EN LogMeIn Malwarebytes Anti-Malware versie 1.60.1.1000 MarketResearch Microsoft Search Enhancement Pack Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft_VC80_CRT_x86 Microsoft_VC80_MFC_x86 Microsoft_VC80_MFCLOC_x86 Microsoft_VC90_ATL_x86 Microsoft_VC90_CRT_x86 Microsoft_VC90_MFC_x86 Microsoft_VC90_MFCLOC_x86 Moozy Mozilla Firefox 10.0.2 (x86 nl) Mozilla Firefox 8.0.1 (x86 nl) Mozilla Firefox 9.0.1 (x86 nl) MSVC80_x86 MSVCRT MSVCRT_amd64 MSXML 4.0 SP2 Parser and SDK MSXML 4.0 SP3 Parser (KB973685) Nexon Game Manager NVIDIA PhysX OpenOffice.org 3.2 Orbit Downloader Overwolf Pando Media Booster PC Connectivity Solution PriceGong 2.5.1 PSP Video 9 6 QuickTime RealNetworks - Microsoft Visual C++ 2008 Runtime RealPlayer RealUpgrade 1.1 Runes of Magic Runescape Item Hack RuneScape Launcher 1.2 Samsung PC Studio 7 SamsungConnectivityCableDriver Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2478663) Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2518870) SF_CDA_ProductContext SF_CDA_Software Skype™ 5.5 SmartWebPrinting Smileyville FREE SolutionCenter Spybot - Search & Destroy Status Super Mp3 Download swMSM syncables desktop SE System Requirements Lab CYRI Teach2000 versie 8.53 TeamViewer 7 The Free YouTube Downloader Toolbox TrayApp TuneUp Companion 2.0.10 UnloadSupport Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Video Download Capture V2.6.6 VirtualDJ Home FREE Visual C++ 2008 x86 Runtime - (v9.0.30729) Visual C++ 2008 x86 Runtime - v9.0.30729.01 Visual Studio 2008 x64 Redistributables Vodafone Mobile Connect Lite Vuze Vuze Remote Toolbar WebReg Windows Live Communications Platform Windows Live Essentials Windows Live Installer Windows Live Mail Windows Live Messenger Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live Sync Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources WinFlash Wireless Console 3 . ==== End Of File ===========================

hello troy,
My computer isn't doing anything rare, but i just want to make sure that he isn't saving passwords and stuff that i enter anymore.
i did everything you asked and here are the results:

ckfile:
CKScanner - Additional Security Risks - These are not necessarily bad
c:\program files (x86)\outspark\divine souls\data\movie\skill\cm001\fire cracker.bik
c:\users\thibaut\desktop\fl studio 10\fl10 by comptricks.com\crack from comptricks.com\flstudio_10.0.2_crack from comptricks.com (2).exe
c:\users\thibaut\desktop\fl studio 10\fl10 by comptricks.com\crack from comptricks.com\flstudio_10.0.2_crack from comptricks.com.exe
c:\users\thibaut\downloads\adobe_after_effects_cs_5_5_keygen.zip
c:\users\thibaut\downloads\call+of+duty+6+-+modern+warfare+2+online+steam+crack+_+blackraz0.torrent
c:\users\thibaut\downloads\super mp3 4.6.7.6 patch and keygen.7z
scanner sequence 3.FN.11.NKAPIM
—– EOF —–

Malwarebyte:
Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Databaseversie: v2012.03.04.02

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
thibaut :: THIBAUT-PC [administrator]

3/4/2012 4:04:11 PM
mbam-log-2012-03-04 (16-04-11).txt

Scantype: Snelle scan
Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scanopties: P2P
Objecten gescand: 220721
Verstreken tijd: 9 minuut/minuten, 9 seconde(n)

Geheugenprocessen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden gedetecteerd: 3
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Windows Update (Backdoor.IRCBot) -> Data: C:\Users\thibaut\AppData\Local\Temp\GEDuplicatorII.exe -> Succesvol in quarantaine geplaatst en verwijderd.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|HKCU (Backdoor.HMCPol.Gen) -> Data: C:\Windows\WinDir\WinUpdate -> Succesvol in quarantaine geplaatst en verwijderd.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|config driver (Backdoor.Messa) -> Data: C:\Users\thibaut\AppData\Roaming\config\config32.exe -> Succesvol in quarantaine geplaatst en verwijderd.

Registerdata gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Bestanden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

(einde)

OTL:
OTL logfile created on: 3/4/2012 4:29:06 PM - Run 1
OTL by OldTimer - Version 3.2.35.1 Folder = F:\Downloads firefox
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Verenigde Staten | Language: ENU | Date Format: M/d/yyyy

3.86 Gb Total Physical Memory | 1.89 Gb Available Physical Memory | 49.13% Memory free
7.71 Gb Paging File | 5.43 Gb Available in Paging File | 70.40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74.52 Gb Total Space | 21.61 Gb Free Space | 28.99% Space Free | Partition Type: NTFS
Drive D: | 204.03 Gb Total Space | 203.93 Gb Free Space | 99.95% Space Free | Partition Type: NTFS
Drive E: | 276.96 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 149.04 Gb Total Space | 63.06 Gb Free Space | 42.31% Space Free | Partition Type: NTFS
Drive G: | 149.05 Gb Total Space | 138.50 Gb Free Space | 92.92% Space Free | Partition Type: NTFS

Computer Name: THIBAUT-PC | User Name: thibaut | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/03/04 16:26:47 | 000,584,704 | —- | M] (OldTimer Tools) – F:\Downloads firefox\OTL.exe
PRC - [2012/02/22 11:25:19 | 000,924,632 | —- | M] (Mozilla Corporation) – F:\Firefox\firefox.exe
PRC - [2012/02/22 11:25:16 | 000,016,856 | —- | M] (Mozilla Corporation) – F:\Firefox\plugin-container.exe
PRC - [2012/02/07 20:02:12 | 000,041,400 | —- | M] (Overwolf) – C:\Program Files (x86)\Overwolf\Overwolf.exe
PRC - [2012/02/07 20:02:12 | 000,025,528 | —- | M] (Microsoft) – C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe
PRC - [2012/01/24 17:24:26 | 002,416,480 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
PRC - [2012/01/13 14:53:16 | 000,981,680 | —- | M] (Malwarebytes Corporation) – F:\Thibaut\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2011/12/14 12:59:20 | 002,984,832 | —- | M] (TeamViewer GmbH) – C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2011/11/06 11:04:11 | 001,064,960 | —- | M] () – C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
PRC - [2011/10/12 06:25:22 | 004,433,248 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
PRC - [2011/08/02 06:09:08 | 000,192,776 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
PRC - [2010/05/21 01:05:36 | 011,312,128 | —- | M] (OpenOffice.org) – C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2010/05/21 01:05:34 | 011,318,784 | —- | M] (OpenOffice.org) – C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2010/04/01 10:16:20 | 000,357,696 | —- | M] (DT Soft Ltd) – C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2010/01/05 01:43:36 | 001,597,440 | —- | M] () – C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2009/11/24 21:45:36 | 000,053,888 | —- | M] () – C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
PRC - [2009/11/10 03:20:36 | 000,096,896 | —- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009/10/26 18:10:42 | 000,174,720 | —- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2009/10/01 03:34:22 | 002,314,240 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2009/10/01 03:33:08 | 000,262,144 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2009/06/19 18:29:26 | 002,488,888 | —- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2009/06/16 01:30:42 | 000,084,536 | —- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
PRC - [2009/05/18 23:58:38 | 000,305,720 | —- | M] (ASUS) – C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008/12/23 01:15:34 | 000,174,648 | —- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
PRC - [2008/07/04 12:52:18 | 000,014,336 | —- | M] (Vodafone) – C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
PRC - [2007/11/30 19:20:44 | 000,051,768 | —- | M] () – C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe


========== Modules (No Company Name) ==========

MOD - [2012/02/22 11:25:18 | 001,911,768 | —- | M] () – F:\Firefox\mozjs.dll
MOD - [2012/02/18 17:46:53 | 000,240,128 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a0cec0099a537e10af5be76457a27db1\WindowsFormsIntegration.ni.dll
MOD - [2012/02/18 17:45:25 | 002,295,296 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\a25e06e527720656434230d3ee420427\System.Core.ni.dll
MOD - [2012/02/18 17:44:48 | 002,347,008 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a221123a83601a4a964218b3bd3f4fa6\System.Runtime.Serialization.ni.dll
MOD - [2012/02/18 10:12:16 | 000,368,128 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\6954c7f14ea634672cdacf2cd793497e\PresentationFramework.Aero.ni.dll
MOD - [2012/02/18 10:12:15 | 000,212,992 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\5ca17001998a75ca774d2b80eead5579\System.ServiceProcess.ni.dll
MOD - [2012/02/18 10:11:42 | 014,322,688 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8435718626a24beaeefc98d45ae77127\PresentationFramework.ni.dll
MOD - [2012/02/18 10:11:31 | 012,431,360 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ff30db6905f8ec024fc808ed8779c0f3\System.Windows.Forms.ni.dll
MOD - [2012/02/18 10:11:25 | 001,586,688 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\a09ee392fa90849f2e9313a1ebbe0279\System.Drawing.ni.dll
MOD - [2012/02/18 10:11:22 | 012,216,320 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\c0508b05f5c28e37711f447a66368e75\PresentationCore.ni.dll
MOD - [2012/02/18 10:11:12 | 003,325,952 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\585ac5899ab444221c8b41df13b194bc\WindowsBase.ni.dll
MOD - [2012/02/18 10:11:06 | 005,452,800 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49f4cb0755ccc34cd35ff96dc2ef9e3\System.Xml.ni.dll
MOD - [2012/02/18 10:11:02 | 000,971,264 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\15742b3597258ce67cbe219005c197e5\System.Configuration.ni.dll
MOD - [2012/02/18 10:11:00 | 007,952,384 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System\1f14b3e1ee0847f8662f513e67f92547\System.ni.dll
MOD - [2012/02/18 10:07:54 | 008,527,008 | —- | M] () – C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
MOD - [2012/02/07 20:02:22 | 000,442,296 | —- | M] () – C:\Program Files (x86)\Overwolf\OWServer.dll
MOD - [2012/02/07 20:02:22 | 000,115,128 | —- | M] () – C:\Program Files (x86)\Overwolf\OWService.dll
MOD - [2012/02/07 20:02:22 | 000,074,680 | —- | M] () – C:\Program Files (x86)\Overwolf\OverWolf.BL.Interfaces.dll
MOD - [2012/02/07 20:02:22 | 000,054,272 | —- | M] () – C:\Program Files (x86)\Overwolf\BrowserWindow.dll
MOD - [2012/02/07 20:02:22 | 000,023,480 | —- | M] () – C:\Program Files (x86)\Overwolf\OWInjector.dll
MOD - [2012/02/07 20:02:20 | 007,406,008 | —- | M] () – C:\Program Files (x86)\Overwolf\OverWolf.Client.Core.dll
MOD - [2012/02/07 20:02:18 | 000,259,512 | —- | M] () – C:\Program Files (x86)\Overwolf\OWAgent.dll
MOD - [2012/02/07 20:02:18 | 000,025,600 | —- | M] () – C:\Program Files (x86)\Overwolf\CoreAudioApi.dll
MOD - [2012/02/07 20:02:12 | 000,028,088 | —- | M] () – C:\Program Files (x86)\Overwolf\OWLog.dll
MOD - [2012/02/07 20:02:12 | 000,027,064 | —- | M] () – C:\Program Files (x86)\Overwolf\OWExplorerLauncher.dll
MOD - [2012/02/07 20:02:08 | 000,074,680 | —- | M] () – C:\Program Files (x86)\Overwolf\OWExplorer-10513.dll
MOD - [2011/11/06 11:04:11 | 001,064,960 | —- | M] () – C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
MOD - [2011/10/17 11:52:55 | 011,490,304 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll
MOD - [2011/06/24 21:56:36 | 000,087,328 | —- | M] () – C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 21:56:14 | 001,241,888 | —- | M] () – C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/03/17 00:11:16 | 004,297,568 | —- | M] () – C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/10/20 15:45:26 | 008,801,120 | —- | M] () – F:\microsoft office\Office14\1033\GrooveIntlResource.dll
MOD - [2010/05/04 15:36:28 | 000,970,752 | —- | M] () – C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2010/01/05 01:43:36 | 001,597,440 | —- | M] () – C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
MOD - [2009/11/24 21:45:36 | 000,053,888 | —- | M] () – C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
MOD - [2009/09/23 19:07:14 | 000,204,800 | —- | M] () – C:\Program Files (x86)\ASUS\VirtualCamera\virtualCamera.ax
MOD - [2007/11/30 19:20:44 | 000,051,768 | —- | M] () – C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2009/12/08 00:16:34 | 000,379,520 | —- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] – C:\Windows\SysNative\FBAgent.exe – (AFBAgent)
SRV:64bit: - [2009/11/27 04:39:45 | 000,243,712 | —- | M] (IDT, Inc.) [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\stacsv64.exe – (STacSV)
SRV:64bit: - [2009/11/11 09:29:13 | 000,202,752 | —- | M] (AMD) [Auto | Running] – C:\Windows\SysNative\atiesrxx.exe – (AMD External Events Utility)
SRV:64bit: - [2009/08/06 22:17:46 | 000,118,672 | —- | M] (Intel® Corporation) [On_Demand | Stopped] – C:\Program Files\Intel\TurboBoost\TurboBoost.exe – (TurboBoost)
SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2012/02/07 18:12:44 | 000,147,336 | —- | M] (LogMeIn, Inc.) [Auto | Running] – C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe – (LMIMaint)
SRV - [2012/02/07 18:12:36 | 000,375,176 | —- | M] (LogMeIn, Inc.) [Auto | Running] – C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe – (LMIGuardianSvc)
SRV - [2011/12/29 20:19:06 | 000,017,848 | —- | M] () [On_Demand | Stopped] – C:\Program Files (x86)\Overwolf\\OverwolfUpdater.exe – (OverwolfUpdaterService)
SRV - [2011/12/14 12:59:20 | 002,984,832 | —- | M] (TeamViewer GmbH) [Auto | Running] – C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe – (TeamViewer7)
SRV - [2011/10/12 06:25:22 | 004,433,248 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] – C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe – (AVGIDSAgent)
SRV - [2011/08/02 06:09:08 | 000,192,776 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] – C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe – (avgwd)
SRV - [2011/06/12 11:15:00 | 031,125,880 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – F:\microsoft office\Office14\GROOVE.EXE – (Microsoft SharePoint Workspace Audit Service)
SRV - [2010/12/11 16:09:04 | 000,403,240 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2010/11/08 12:04:20 | 000,407,424 | —- | M] (LogMeIn, Inc.) [Auto | Running] – C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe – (LogMeIn)
SRV - [2010/11/03 22:02:04 | 004,294,288 | —- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] – C:\Windows\SysWow64\GameMon.des – (npggsvc)
SRV - [2010/03/18 12:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2010/02/19 12:37:14 | 000,517,096 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe – (SwitchBoard)
SRV - [2009/11/10 03:20:36 | 000,096,896 | —- | M] (ASUS) [Auto | Running] – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe – (ATKGFNEXSrv)
SRV - [2009/10/01 03:34:22 | 002,314,240 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe – (UNS) Intel®
SRV - [2009/10/01 03:33:08 | 000,262,144 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe – (LMS) Intel®
SRV - [2009/06/16 01:30:42 | 000,084,536 | —- | M] (ASUS) [Auto | Running] – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe – (ASLDRService)
SRV - [2009/06/10 22:23:09 | 000,066,384 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2008/11/11 09:38:06 | 000,620,544 | —- | M] (Nokia.) [On_Demand | Stopped] – C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe – (ServiceLayer)
SRV - [2008/07/04 12:52:18 | 000,014,336 | —- | M] (Vodafone) [Auto | Running] – C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe – (VMCService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/02/07 18:12:36 | 000,087,456 | —- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] – C:\Windows\SysNative\LMIRfsClientNP.dll – (LMIRfsClientNP)
DRV:64bit: - [2011/10/07 06:23:46 | 000,283,728 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\Windows\SysNative\drivers\avgldx64.sys – (Avgldx64)
DRV:64bit: - [2011/09/13 06:30:08 | 000,037,456 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] – C:\Windows\SysNative\drivers\avgrkx64.sys – (Avgrkx64)
DRV:64bit: - [2011/08/08 06:08:58 | 000,046,672 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] – C:\Windows\SysNative\drivers\avgmfx64.sys – (Avgmfx64)
DRV:64bit: - [2011/07/11 01:14:36 | 000,375,376 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\Windows\SysNative\drivers\avgtdia.sys – (Avgtdia)
DRV:64bit: - [2011/07/11 01:14:08 | 000,029,776 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\AVGIDSFilter.sys – (AVGIDSFilter)
DRV:64bit: - [2011/07/11 01:14:06 | 000,120,400 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\AVGIDSDriver.sys – (AVGIDSDriver)
DRV:64bit: - [2011/07/11 01:14:06 | 000,026,704 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\AVGIDSEH.sys – (AVGIDSEH)
DRV:64bit: - [2011/03/11 07:22:41 | 000,107,904 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata)
DRV:64bit: - [2011/03/11 07:22:40 | 000,027,008 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata)
DRV:64bit: - [2011/01/13 02:17:30 | 000,122,624 | —- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\zghsmdm.sys – (zghsmdm)
DRV:64bit: - [2010/12/19 10:36:59 | 000,834,544 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\sptd.sys – (sptd)
DRV:64bit: - [2010/12/03 10:05:34 | 000,069,152 | —- | M] (Lavasoft AB) [File_System | Boot | Running] – C:\Windows\SysNative\drivers\Lbd.sys – (Lbd)
DRV:64bit: - [2010/10/18 05:24:46 | 000,038,424 | —- | M] (Google Inc) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\androidusb.sys – (androidusb)
DRV:64bit: - [2010/09/23 00:36:48 | 000,048,488 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\fssfltr.sys – (fssfltr)
DRV:64bit: - [2010/09/17 15:40:06 | 000,072,216 | —- | M] (LogMeIn, Inc.) [File_System | Auto | Running] – C:\Windows\SysNative\drivers\LMIRfsDriver.sys – (LMIRfsDriver)
DRV:64bit: - [2010/09/17 15:39:58 | 000,011,552 | —- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\lmimirr.sys – (lmimirr)
DRV:64bit: - [2009/12/30 11:21:24 | 000,031,800 | —- | M] (VS Revo Group) [File_System | On_Demand | Stopped] – C:\Windows\SysNative\drivers\revoflt.sys – (Revoflt)
DRV:64bit: - [2009/11/27 04:39:45 | 000,505,344 | —- | M] (IDT, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\stwrt64.sys – (STHDA)
DRV:64bit: - [2009/11/13 10:47:35 | 000,067,072 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\L1C62x64.sys – (L1C)
DRV:64bit: - [2009/11/11 10:02:11 | 006,104,576 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\atikmdag.sys – (atikmdag)
DRV:64bit: - [2009/10/26 05:39:43 | 000,151,936 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Impcd.sys – (Impcd)
DRV:64bit: - [2009/10/15 10:23:19 | 000,117,760 | —- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\ETD.sys – (ETD)
DRV:64bit: - [2009/10/05 02:33:59 | 001,542,656 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\athrx.sys – (athr)
DRV:64bit: - [2009/09/30 02:34:31 | 000,121,872 | —- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\AtiHdmi.sys – (AtiHdmiService)
DRV:64bit: - [2009/09/17 20:54:54 | 000,056,344 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\HECIx64.sys – (HECIx64) Intel®
DRV:64bit: - [2009/09/03 16:30:20 | 000,128,512 | —- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\tiehdusb.sys – (TIEHDUSB)
DRV:64bit: - [2009/08/21 07:48:17 | 000,044,032 | —- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\AmUStor.sys – (AmUStor)
DRV:64bit: - [2009/08/12 04:38:01 | 001,799,680 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\snp2uvc.sys – (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV:64bit: - [2009/08/06 22:24:13 | 000,408,600 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iaStor.sys – (iaStor)
DRV:64bit: - [2009/08/06 22:17:34 | 000,013,784 | —- | M] () [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\TurboB.sys – (TurboB)
DRV:64bit: - [2009/07/20 10:29:39 | 000,015,416 | —- | M] ( ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\kbfiltr.sys – (kbfiltr)
DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs)
DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2)
DRV:64bit: - [2009/07/14 02:47:48 | 000,077,888 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD)
DRV:64bit: - [2009/07/14 02:47:48 | 000,023,104 | —- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] – C:\Windows\SysNative\drivers\fs_rec.sys – (Fs_Rec)
DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor)
DRV:64bit: - [2009/06/10 21:35:57 | 000,056,832 | —- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\SiSG664.sys – (SiSGbeLH)
DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv)
DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv)
DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a)
DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | —- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\GEARAspiWDM.sys – (GEARAspiWDM)
DRV:64bit: - [2009/05/13 17:07:20 | 000,015,928 | —- | M] (ASUS) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\ATK64AMD.sys – (MTsensor)
DRV:64bit: - [2008/08/28 11:44:42 | 000,025,600 | —- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\pccsmcfdx64.sys – (pccsmcfd)
DRV:64bit: - [2008/05/24 01:27:28 | 000,154,168 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysNative\drivers\WimFltr.sys – (WimFltr)
DRV:64bit: - [2008/03/17 11:06:14 | 000,115,328 | —- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\ewusbmdm.sys – (hwdatacard)
DRV - [2010/09/17 15:40:06 | 000,015,928 | —- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] – C:\Program Files (x86)\LogMeIn\x64\rainfo.sys – (LMIInfo)
DRV - [2010/02/24 19:14:22 | 000,146,928 | —- | M] (CyberLink Corp.) [2010/09/08 21:56:20] [Kernel | Auto | Running] – C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl – ({B154377D-700F-42cc-9474-23858FBDF4BD})
DRV - [2009/07/14 02:19:10 | 000,019,008 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysWOW64\drivers\wimmount.sys – (WIMMount)
DRV - [2009/07/03 01:36:14 | 000,015,416 | —- | M] (ASUS) [Kernel | Auto | Running] – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys – (ASMMAP64)
DRV - [2005/01/04 19:43:08 | 000,004,682 | —- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\SysWOW64\npptNT2.sys – (NPPTNT2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}: "URL" = http://search.imesh.com/web?src=ieb&sy;…q={searchTerms}
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1066435


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o;=14200
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7ASUT
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}: "URL" = http://search.imesh.com/web?src=ieb&sy;…q={searchTerms}
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1066435
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 0.0.0.0:80

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource;=3&q;={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.startup.homepage: "http://www.google.be/"
FF - prefs.js..extensions.enabledItems: [removed]:4.51
FF - prefs.js..extensions.enabledItems: {F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}:[removed]
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.608
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.2
FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1209
FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.3
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: F:\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: F:\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.647: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.647: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/11/22 18:27:01 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2012/02/01 12:15:39 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/05/26 17:18:53 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Users\thibaut\AppData\Local\RewardsArcade\498\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: F:\Firefox\components [2012/02/22 11:25:19 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: F:\Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/01/07 23:00:57 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/12/10 12:28:08 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/11/22 18:27:01 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: F:\Firefox\components [2012/02/22 11:25:19 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: F:\Firefox\plugins

[2011/04/14 07:32:18 | 000,000,000 | —D | M] (No name found) – C:\Users\thibaut\AppData\Roaming\mozilla\Extensions
[2011/04/14 07:32:18 | 000,000,000 | —D | M] (No name found) – C:\Users\thibaut\AppData\Roaming\mozilla\Extensions\[removed]
[2010/12/22 10:33:47 | 000,000,000 | —D | M] (No name found) – C:\Users\thibaut\AppData\Roaming\mozilla\Extensions\[removed]
[2012/03/04 15:51:54 | 000,000,000 | —D | M] (No name found) – C:\Users\thibaut\AppData\Roaming\mozilla\Firefox\Profiles\xe68ts4u.default\extensions
[2011/08/26 19:11:13 | 000,000,000 | —D | M] (Garmin Communicator) – C:\Users\thibaut\AppData\Roaming\mozilla\Firefox\Profiles\xe68ts4u.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011/03/08 18:26:16 | 000,000,000 | —D | M] (XfireXO) – C:\Users\thibaut\AppData\Roaming\mozilla\Firefox\Profiles\xe68ts4u.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
[2011/12/24 14:21:58 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\thibaut\AppData\Roaming\mozilla\Firefox\Profiles\xe68ts4u.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011/01/11 16:51:31 | 000,000,000 | —D | M] (LogMeIn, Inc. Remote Access Plugin) – C:\Users\thibaut\AppData\Roaming\mozilla\Firefox\Profiles\xe68ts4u.default\extensions\[removed]
[2011/03/21 15:18:36 | 000,000,879 | —- | M] () – C:\Users\thibaut\AppData\Roaming\Mozilla\Firefox\Profiles\xe68ts4u.default\searchplugins\conduit.xml
[2011/11/09 15:19:39 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/11/03 12:40:24 | 000,000,000 | —D | M] ("Babylon Spelling and Proofreading") – C:\Program Files (x86)\Mozilla Firefox\extensions\[removed]
[2011/11/03 12:40:21 | 000,000,000 | —D | M] (Babylon OCR) – C:\Program Files (x86)\Mozilla Firefox\extensions\[removed]
() (No name found) – C:\USERS\THIBAUT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XE68TS4U.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI
[2012/01/07 23:00:57 | 000,121,816 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/11/12 18:53:06 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011/09/30 20:51:13 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/09/30 20:51:13 | 000,001,892 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bolcom-nl.xml
[2011/09/30 20:51:13 | 000,004,558 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\marktplaats-nl.xml
[2011/09/30 20:51:13 | 000,001,049 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-nl.xml
[2011/05/01 10:10:42 | 000,001,106 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-nl.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Chrome DAP extension (Enabled) = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\2.0.9_0\lib/npdapchrome.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Download Accelerator Plus (DAP) Opera/NS6 plugin (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\npdap.dll
CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U23 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealNetworks™ RealPlayer Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonEU\NGM\npNxGameeu.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: PriceGong = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.5.1_0\
CHR - Extension: YouTube = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google Zoeken = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: RewardsArcade = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcmagccbogebndpoodhhhafmofelpffh\1.13.61_0\
CHR - Extension: Download Accelerator Plus (DAP) = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\2.0.9_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.4_0\
CHR - Extension: AVG Safe Search = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\
CHR - Extension: Gmail = C:\Users\thibaut\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\

Hosts file not found
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DebugBar BHO) - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - C:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll (Core Services)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - F:\microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - F:\microsoft office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll File not found
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (DebugBar) - {3E1201F4-1707-409F-BB45-A5F192381DA0} - C:\Program Files (x86)\Core Services\DebugBar\DebugToolBar.dll (Core Services)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\Toolbar\WebBrowser: (no name) - {5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - No CLSID value found.
O3 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\Toolbar\WebBrowser: (no name) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - No CLSID value found.
O3 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.)
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BCSSync] F:\microsoft office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\Run: [Samsung.PCSync] C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe (Nokia)
O4 - HKU\S-1-5-18..\Run: [Samsung.PCSync] C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe (Nokia)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001..\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h File not found
O4 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
O4 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001..\Run: [MouseRobotTrayService] C:\ProgramData\AutomationBox\MouseRobot2\Application\MouseRobotService.exe File not found
O4 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001..\Run: [NVIDIA] C:\Users\thibaut\AppData\Roaming\Microsoft\Windows\Templates\nvdisp.exe File not found
O4 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe (Overwolf)
O4 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001..\Run: [SexMessenger] F:\Thibaut\Talesrunner hk\SexMessenger\SexMessenger.exe (Inter-IT)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Garage\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\thibaut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-1362543476-2496973011-947830436-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: E&xport; to Microsoft Excel - F:\microsoft office\Office14\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: Google Sidewiki… - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8:64bit: - Extra context menu item: Se&nd; to OneNote - F:\microsoft office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport; to Microsoft Excel - F:\microsoft office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Se&nd; to OneNote - F:\microsoft office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\microsoft office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\microsoft office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - F:\microsoft office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - F:\microsoft office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {00BC5049-C7F3-4AC9-92AE-1991C76608B0} http://weblogin.talesrunner.com.hk/TRLauncher.cab (TRLauncher Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s…yri_4.3.1.0.cab (SysInfo Class)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com/activex/ractrl.cab?lmi=100 (Performance Viewer Activex Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6E938A01-EAB5-4BA4-8D2F-F7601D0290FA}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Overwolf\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - F:\microsoft office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/06/08 06:26:19 | 000,000,052 | -H– | M] () - D:\autorun.inf – [ NTFS ]
O32 - AutoRun File - [2007/04/02 07:25:00 | 000,000,043 | R— | M] () - E:\Autorun.inf – [ CDFS ]
O32 - AutoRun File - [2007/04/02 07:25:00 | 000,000,032 | R— | M] () - E:\autopp.ini – [ CDFS ]
O32 - AutoRun File - [2007/04/02 07:25:00 | 000,135,680 | R— | M] (GS Technologies) - E:\autorun.exe – [ CDFS ]
O33 - MountPoints2\{56d12f41-0f77-11e0-8418-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{56d12f41-0f77-11e0-8418-20cf305502ef}\Shell\AutoRun\command - "" = K:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{56d12f61-0f77-11e0-8418-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{56d12f61-0f77-11e0-8418-20cf305502ef}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{56d12f9e-0f77-11e0-8418-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{56d12f9e-0f77-11e0-8418-20cf305502ef}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{82cb1d1a-8ad8-11e0-957e-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{82cb1d1a-8ad8-11e0-957e-20cf305502ef}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{82cb1d1c-8ad8-11e0-957e-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{82cb1d1c-8ad8-11e0-957e-20cf305502ef}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{84e5f4c9-5baa-11e0-867e-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{84e5f4c9-5baa-11e0-867e-20cf305502ef}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{84e5f4cb-5baa-11e0-867e-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{84e5f4cb-5baa-11e0-867e-20cf305502ef}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{84e5f4fa-5baa-11e0-867e-20cf305502ef}\Shell - "" = AutoRun
O33 - MountPoints2\{84e5f4fa-5baa-11e0-867e-20cf305502ef}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{9a48b7a1-bbd1-11df-8148-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{9a48b7a1-bbd1-11df-8148-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe – [2007/04/02 07:25:00 | 000,135,680 | R— | M] (GS Technologies)
O33 - MountPoints2\I\Shell - "" = AutoRun
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\setup\rsrc\Autorun.exe
O33 - MountPoints2\I\Shell\dinstall\command - "" = I:\Directx\dxsetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/03/04 09:48:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2012/03/04 09:45:55 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{707563D5-A9A5-4841-83D2-362E19916180}
[2012/03/04 09:45:27 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{A8A2F6AC-743D-4CC7-AD9E-1134F6E83B61}
[2012/03/03 11:31:37 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{F01C6576-4006-423F-AACF-23BF394CBE73}
[2012/03/03 11:30:57 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{11E10811-CA4E-4116-9B11-1649A18C4D68}
[2012/03/02 07:11:23 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{469A358C-E617-494B-A7C4-D513409798A3}
[2012/03/02 07:10:50 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{6E780D90-8FD4-40AC-8DEC-38DB4EC3246F}
[2012/03/01 18:37:01 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{FC9A03AB-2A9E-4BF3-BD43-BA77915B35CC}
[2012/03/01 18:36:49 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{532FD4DE-E2C6-4347-8E5C-002BEEED8E67}
[2012/02/29 14:17:20 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2012/02/29 14:17:19 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2012/02/29 14:16:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Synchronization Services
[2012/02/29 14:16:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2012/02/29 14:15:50 | 000,000,000 | —D | C] – C:\Windows\PCHEALTH
[2012/02/29 14:15:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Sync Framework
[2012/02/29 14:14:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Visual Studio 8
[2012/02/29 14:13:44 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2012/02/29 14:13:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Analysis Services
[2012/02/29 14:05:37 | 000,000,000 | —D | C] – C:\Users\thibaut\Desktop\microsoft office
[2012/02/29 13:48:01 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{79C5040B-6F23-411F-8D8F-C97319D32FF1}
[2012/02/29 13:47:41 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{F087AE27-2E3E-4054-B2EE-1F83E5E9B8AD}
[2012/02/27 21:31:54 | 000,000,000 | —D | C] – C:\Users\thibaut\Desktop\krantenartikels eco
[2012/02/27 21:00:40 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\ApplicationHistory
[2012/02/27 21:00:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\SpellEx
[2012/02/27 20:57:55 | 000,000,000 | —D | C] – C:\Windows\SysWow64\URTTEMP
[2012/02/27 20:43:15 | 000,128,512 | —- | C] (Texas Instruments) – C:\Windows\SysNative\drivers\tiehdusb.sys
[2012/02/27 20:42:53 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools
[2012/02/27 20:42:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\TI Shared
[2012/02/27 20:42:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\TI Education
[2012/02/27 20:42:51 | 000,000,000 | —D | C] – C:\Users\thibaut\Documents\MyTIData
[2012/02/27 12:49:39 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\ElevatedDiagnostics
[2012/02/27 12:40:19 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{38F6A5A1-1432-4005-9863-389137E2E48D}
[2012/02/27 12:39:53 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{FE4CA0A7-A307-415D-A5AC-09844334D72C}
[2012/02/26 19:03:36 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SwiftKit
[2012/02/26 19:03:28 | 000,203,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RICHTX32.OCX
[2012/02/26 19:03:27 | 000,000,000 | —D | C] – C:\ProgramData\SwiftKit
[2012/02/26 19:03:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\SwiftKit
[2012/02/26 11:17:45 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{552783CA-6EEB-4DCE-9DF3-BB9313802A1C}
[2012/02/26 11:17:24 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{CE958996-B68C-4167-AF0C-DA32F75324E8}
[2012/02/25 23:17:10 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{F5AF635A-FFAC-4B09-9D70-F4E7232A1155}
[2012/02/25 23:16:48 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{A83B848E-13CF-4BF3-8B99-CDA88E180FCE}
[2012/02/25 14:16:44 | 000,000,000 | —D | C] – C:\Users\thibaut\jagexcache2
[2012/02/25 12:14:49 | 000,000,000 | —D | C] – C:\Users\thibaut\Documents\Runedev
[2012/02/25 11:16:22 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{4727B385-12A4-47F7-B9A9-D503D0F74EB4}
[2012/02/25 11:16:00 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{61694D9C-B015-400F-A6AB-F0AD3222488E}
[2012/02/24 23:15:44 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{3BE023BB-9755-4F2F-85D3-776F6413D399}
[2012/02/24 23:15:24 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{6ABD9E20-B0E2-4701-8EC1-6926AB880D85}
[2012/02/24 13:50:46 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Roaming\EpicBot
[2012/02/24 13:50:27 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EpicBot
[2012/02/24 13:50:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\EpicBot
[2012/02/24 13:32:16 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Runescape Item Hack
[2012/02/24 11:04:21 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{D4A48DD1-58C3-4ECA-97B2-0FF833A777EE}
[2012/02/24 11:03:42 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{A084251F-BD4E-4B9B-91F2-A84AD892EE76}
[2012/02/23 21:55:54 | 000,230,912 | —- | C] (QcFYE) – C:\Users\thibaut\AppData\Roaming\Windows Task manager.exe
[2012/02/23 21:55:52 | 000,230,912 | —- | C] (QcFYE) – C:\Users\thibaut\AppData\Roaming\K77R7JMI.exe
[2012/02/23 21:33:02 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{6BEF571B-293C-45FA-A69E-923723E0776E}
[2012/02/23 21:32:40 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{E84ABAFE-CFEC-4A14-875E-C826F1834130}
[2012/02/23 09:32:01 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{93A4611F-3242-466C-BCE7-1307B604D820}
[2012/02/23 09:31:38 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{7F51ADEA-CA95-4361-9E2C-9336CED7BACD}
[2012/02/22 20:48:34 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{9CD83104-0296-4B7D-9D27-76243E68DEC2}
[2012/02/22 20:48:13 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{D5645D57-6DC2-4466-A130-F047A029E0C2}
[2012/02/22 08:47:54 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{E7ED3C42-FFE0-4836-B7A2-63178576591C}
[2012/02/22 08:47:38 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{933E1330-9DC4-4716-87BD-5414FFA3BBF5}
[2012/02/21 12:22:04 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{175863C5-9584-43A9-9844-CE639B809908}
[2012/02/21 12:21:45 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{B886E48F-3066-47E6-8CFF-3336DC62AF0A}
[2012/02/20 22:15:29 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{9F86F202-7386-4C93-B341-65D6F1DB2FC0}
[2012/02/20 22:15:07 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{7BD2B705-81EB-4BA4-B3BF-F107718DD1D8}
[2012/02/20 15:11:12 | 000,000,000 | —D | C] – C:\Users\thibaut\Desktop\jagex
[2012/02/20 10:14:54 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{A1F0998D-E9EF-437A-B1A4-916C50BAF755}
[2012/02/20 10:14:43 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{38DC20A1-37F8-463F-9EF3-955329E8187B}
[2012/02/19 22:09:42 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{EFD530C0-F49B-466F-A994-4BA0E07DA7BB}
[2012/02/19 22:09:32 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{2C2F14A0-0AD2-4617-A4C7-ED5717D1939A}
[2012/02/19 10:09:18 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{16D765C3-8050-44E6-91B5-BE99C3A0529D}
[2012/02/19 10:08:56 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{59A23833-14DF-433D-823B-64EEB90C57BF}
[2012/02/18 22:08:42 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{B7BF8E2E-0D32-4323-9444-1AD3D97EF80B}
[2012/02/18 22:08:30 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{1794FFD9-D363-4234-9C47-955A7D934A11}
[2012/02/18 10:08:16 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{6A83AF6A-80F7-49C2-BF64-C079F9EA91F0}
[2012/02/18 10:07:53 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{6F644697-CBA0-4ECD-A96A-D902E57689AE}
[2012/02/18 09:32:14 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/02/18 09:32:14 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/02/18 09:32:13 | 002,308,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/02/18 09:32:13 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/02/18 09:32:13 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/02/18 09:32:12 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/02/18 09:32:12 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/02/18 09:32:12 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/02/18 09:32:12 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/02/18 09:32:11 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/02/18 09:32:11 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/02/17 17:02:29 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2012/02/17 17:02:21 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2012/02/17 17:02:21 | 000,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2012/02/17 17:02:13 | 000,634,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcrt.dll
[2012/02/12 21:30:28 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{77D3CDD7-4BBE-41A1-9B19-423035BA7942}
[2012/02/12 21:30:07 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{5A450DDB-A71A-4966-AE0B-4BF8846DF15E}
[2012/02/12 18:21:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2012/02/12 18:21:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Overwolf
[2012/02/12 16:53:00 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\Microsoft Help
[2012/02/12 16:52:40 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2012/02/12 09:29:41 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{D87F6DCF-FF20-444B-AFF9-6397E77059A4}
[2012/02/12 09:29:20 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{99CCFC42-5F81-49C2-A18A-18C7E972394C}
[2012/02/11 21:29:09 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{730CB8EF-A86F-40B3-B11C-8302891814FB}
[2012/02/11 21:28:45 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{5F69DA8F-6724-4A6C-B3A4-F198465EF706}
[2012/02/11 09:28:34 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{387222F0-9A2E-4D4C-BBB6-9987CB413745}
[2012/02/11 09:28:24 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{97F106B9-E8BA-4D6C-B7F5-902C18C4232A}
[2012/02/11 09:28:14 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{AA1F8C03-7666-468E-B47C-D5303C4BDA0F}
[2012/02/11 09:27:53 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{13C1946F-A4EC-496B-8CAF-E7668BCC6280}
[2012/02/10 21:27:39 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{AF85E417-D7E1-4617-A241-07E71F4E0CD2}
[2012/02/10 21:27:18 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{724B8E84-1ED3-444B-8DF7-400AE1CD009F}
[2012/02/10 21:26:35 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{2BBE98A4-E556-420B-B686-352524893453}
[2012/02/10 18:22:49 | 000,190,752 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaws.exe
[2012/02/10 18:22:49 | 000,172,320 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaw.exe
[2012/02/10 18:22:49 | 000,172,320 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\java.exe
[2012/02/10 07:26:28 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{4F11FD80-DEE5-458A-9965-92AF2940E889}
[2012/02/10 07:26:07 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{E246BBBD-F951-4516-B61B-A5088667AFC1}
[2012/02/10 07:25:42 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{0BCDB6D6-A9E3-4767-B80E-3565FCBBFA56}
[2012/02/09 12:01:56 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{B7B521D3-687F-4B47-B483-FEB71DD9BE19}
[2012/02/09 12:01:46 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{149F4B04-D4F9-4056-ACE4-12DC481B594A}
[2012/02/09 12:01:35 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{C4983CFB-BB6B-4DD7-98AE-6CE65DBF204D}
[2012/02/09 12:01:08 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{A93812B2-874D-4290-929C-07AA2CB2F716}
[2012/02/08 20:08:25 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{B6C68FB8-E294-4CE9-AD56-5A6464F598A3}
[2012/02/08 20:08:15 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{26A99EB9-D792-4311-ABAA-A2E2DBD01EBF}
[2012/02/08 20:08:05 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{D5F6C526-A8C2-498C-B5C8-17974754BA3E}
[2012/02/08 20:07:31 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{056B0861-BF6C-4CB6-8F04-15C3D06B0F94}
[2012/02/08 07:25:53 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{6D1CF92E-8F9B-496F-8E15-D00A01B21A3C}
[2012/02/08 07:25:29 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{95D69483-33C3-40F5-9EB6-AFD778B01D94}
[2012/02/07 19:17:56 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{75C96627-A280-468D-8B1A-E4F1691C0AE7}
[2012/02/07 19:17:35 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{9327EA84-63C1-4B89-891A-24C8A6A190AD}
[2012/02/07 07:17:21 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{AF86122F-B321-4B3E-803E-081C9FCD47ED}
[2012/02/07 07:17:07 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{9B2DA45B-B0D8-4AD7-886F-DA3E74B583A7}
[2012/02/06 12:38:35 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{73802CF1-F7FF-4B89-9F8A-D523B22FB415}
[2012/02/06 12:38:13 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{7774703F-AE65-4C36-B554-6721CD33C550}
[2012/02/05 21:44:05 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{EE6AA514-F29C-45EF-AC55-3E522F2F90F2}
[2012/02/05 21:43:44 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{D13BDC92-6B63-4BD4-8C8C-FE8547BD6494}
[2012/02/05 09:43:31 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{F92794A7-38E4-41F5-B5D9-79EF9592D756}
[2012/02/05 09:43:08 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{25428C62-6DB0-46F1-8EA0-128089F773D9}
[2012/02/04 21:42:57 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{96BFB0C0-2FA1-406B-9187-A323C40C9350}
[2012/02/04 21:42:34 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{E4EA5311-40C6-472D-91A0-DECDEFA2E6FF}
[2012/02/04 09:42:22 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{65E2D4BE-F18A-4D23-A6CF-C43F9C38FFC2}
[2012/02/04 09:42:01 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{74534B65-0D93-4326-AE3F-26DD7C73EED3}
[2012/02/03 21:41:45 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{22F59662-666A-4E50-A2F3-DF88E834F336}
[2012/02/03 21:41:27 | 000,000,000 | —D | C] – C:\Users\thibaut\AppData\Local\{5E0DA07F-7CCC-4078-A65E-BBC8466A21BA}
[1 C:\Windows\Fonts\*.tmp files -> C:\Windows\Fonts\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/03/04 16:30:35 | 000,010,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/04 16:30:35 | 000,010,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/04 16:23:53 | 000,001,066 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/03/04 16:22:05 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/03/04 16:21:52 | 3105,259,520 | -HS- | M] () – C:\hiberfil.sys
[2012/03/04 15:52:00 | 000,001,070 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/04 15:42:17 | 000,002,560 | —- | M] () – C:\Windows\_MSRSTRT.EXE
[2012/03/04 09:54:20 | 090,726,844 | —- | M] () – C:\Windows\SysNative\drivers\AVG\incavi.avm
[2012/03/03 17:00:13 | 000,544,335 | —- | M] () – C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2012/03/01 22:19:12 | 000,211,014 | —- | M] () – C:\Users\thibaut\Desktop\affiche nl paintball (0;00;00;00).jpg
[2012/03/01 18:39:31 | 000,000,032 | —- | M] () – C:\Users\thibaut\jagex_cl_runescape_LIVE.dat
[2012/02/29 17:52:42 | 000,000,047 | —- | M] () – C:\Users\thibaut\jagex_cl_runescape_LIVE1.dat
[2012/02/29 17:19:08 | 005,005,024 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/02/27 21:00:40 | 000,000,095 | —- | M] () – C:\Users\thibaut\AppData\Local\fusioncache.dat
[2012/02/27 21:00:09 | 000,002,440 | —- | M] () – C:\Users\Public\Desktop\TI NoteFolio Creator.lnk
[2012/02/27 20:58:49 | 001,731,334 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2012/02/27 20:58:49 | 000,753,682 | —- | M] () – C:\Windows\SysNative\perfh013.dat
[2012/02/27 20:58:49 | 000,671,526 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/02/27 20:58:49 | 000,157,660 | —- | M] () – C:\Windows\SysNative\perfc013.dat
[2012/02/27 20:58:49 | 000,126,044 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/02/27 20:49:34 | 001,663,904 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/02/27 20:42:54 | 000,001,379 | —- | M] () – C:\Users\Public\Desktop\TI Connect.lnk
[2012/02/26 19:03:37 | 000,001,009 | —- | M] () – C:\Users\thibaut\Desktop\SwiftKit.lnk
[2012/02/26 18:38:39 | 000,000,024 | —- | M] () – C:\Users\thibaut\jagexappletviewer.preferences
[2012/02/25 16:04:20 | 000,005,180 | —- | M] () – C:\Windows\SysNative\AutoRunFilter.ini
[2012/02/25 14:18:21 | 000,000,129 | —- | M] () – C:\Users\thibaut\jagex_runescape_preferences2.dat
[2012/02/25 14:16:45 | 000,000,035 | —- | M] () – C:\Users\thibaut\jagex_runescape_preferences.dat
[2012/02/25 14:16:44 | 000,000,047 | —- | M] () – C:\Users\thibaut\jagex_cl_runescape_LIVE2.dat
[2012/02/25 11:54:19 | 000,000,730 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/02/24 13:50:27 | 000,001,871 | —- | M] () – C:\Users\Public\Desktop\EpicBot.lnk
[2012/02/23 23:29:26 | 000,016,951 | —- | M] () – C:\Users\thibaut\Desktop\logfile1
[2012/02/23 23:12:07 | 000,252,262 | —- | M] () – C:\Users\thibaut\Desktop\proof virus.png
[2012/02/23 22:31:26 | 000,003,583 | —- | M] () – C:\Users\thibaut\AppData\Roaming\WYH7V7.dll
[2012/02/23 21:55:54 | 000,230,912 | —- | M] (QcFYE) – C:\Users\thibaut\AppData\Roaming\Windows Task manager.exe
[2012/02/23 21:55:53 | 000,230,912 | —- | M] (QcFYE) – C:\Users\thibaut\AppData\Roaming\K77R7JMI.exe
[2012/02/18 10:07:54 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/02/12 12:19:51 | 000,781,105 | —- | M] () – C:\Users\thibaut\Desktop\foto maps.png
[2012/02/10 18:22:36 | 000,525,544 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\deployJava1.dll
[2012/02/10 18:22:36 | 000,190,752 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaws.exe
[2012/02/10 18:22:36 | 000,172,320 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaw.exe
[2012/02/10 18:22:36 | 000,172,320 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\java.exe
[2012/02/07 18:12:36 | 000,087,456 | —- | M] (LogMeIn, Inc.) – C:\Windows\SysNative\LMIRfsClientNP.dll
[2012/02/07 18:12:36 | 000,080,768 | —- | M] (LogMeIn, Inc.) – C:\Windows\SysNative\LMIinit.dll
[2012/02/07 18:12:36 | 000,034,688 | —- | M] (LogMeIn, Inc.) – C:\Windows\SysNative\LMIport.dll

========== Files Created - No Company Name ==========

[2012/03/04 15:42:15 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2012/03/01 22:19:10 | 000,211,014 | —- | C] () – C:\Users\thibaut\Desktop\affiche nl paintball (0;00;00;00).jpg
[2012/02/27 21:00:40 | 000,000,095 | —- | C] () – C:\Users\thibaut\AppData\Local\fusioncache.dat
[2012/02/27 21:00:09 | 000,002,440 | —- | C] () – C:\Users\Public\Desktop\TI NoteFolio Creator.lnk
[2012/02/27 20:42:54 | 000,001,379 | —- | C] () – C:\Users\Public\Desktop\TI Connect.lnk
[2012/02/26 19:03:37 | 000,001,009 | —- | C] () – C:\Users\thibaut\Desktop\SwiftKit.lnk
[2012/02/25 14:16:44 | 000,000,047 | —- | C] () – C:\Users\thibaut\jagex_cl_runescape_LIVE2.dat
[2012/02/25 11:54:19 | 000,000,730 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/02/24 13:50:27 | 000,001,871 | —- | C] () – C:\Users\Public\Desktop\EpicBot.lnk
[2012/02/23 23:29:26 | 000,016,951 | —- | C] () – C:\Users\thibaut\Desktop\logfile1
[2012/02/23 23:12:06 | 000,252,262 | —- | C] () – C:\Users\thibaut\Desktop\proof virus.png
[2012/02/23 21:56:25 | 000,003,583 | —- | C] () – C:\Users\thibaut\AppData\Roaming\WYH7V7.dll
[2012/02/12 12:19:51 | 000,781,105 | —- | C] () – C:\Users\thibaut\Desktop\foto maps.png
[2012/02/03 12:41:32 | 000,723,294 | —- | C] () – C:\Windows\unins000.exe
[2012/02/03 12:41:32 | 000,029,717 | —- | C] () – C:\Windows\unins000.dat
[2012/01/07 23:45:05 | 000,650,752 | —- | C] () – C:\Windows\SysWow64\xvidcore.dll
[2012/01/07 23:45:05 | 000,243,200 | —- | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2012/01/07 23:45:04 | 000,079,360 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2012/01/07 23:41:19 | 000,175,616 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2011/11/30 16:29:25 | 000,109,216 | —- | C] () – C:\Windows\SysWow64\EasyHook64.dll
[2011/11/30 16:29:25 | 000,084,480 | —- | C] () – C:\Windows\SysWow64\EasyHook32.dll
[2011/06/08 06:32:42 | 000,058,158 | —- | C] () – C:\Users\thibaut\AppData\Roaming\thibaut3SQLite3.dll
[2011/04/19 18:45:23 | 000,230,752 | —- | C] () – C:\Windows\patchw32.dll
[2011/04/19 18:45:21 | 000,118,176 | —- | C] () – C:\Windows\patchw.dll
[2011/03/25 23:05:56 | 000,197,728 | —- | C] () – C:\Windows\WinVd32.sys
[2011/03/25 23:05:51 | 000,007,680 | —- | C] () – C:\Windows\SysWow64\WinFLsrv.exe
[2010/12/29 19:49:43 | 000,111,616 | —- | C] () – C:\Users\thibaut\AppData\Roaming\3xbdr9016XB.exe
[2010/12/29 19:33:34 | 000,111,616 | —- | C] () – C:\Users\thibaut\AppData\Roaming\3pwfl6065PW.exe
[2010/12/28 19:59:26 | 000,000,264 | —- | C] () – C:\Users\thibaut\AppData\Roaming\RSBot_Accounts.ini
[2010/12/11 16:58:34 | 000,000,000 | —- | C] () – C:\Users\thibaut\AppData\Roaming\chrtmp
[2010/11/30 18:42:55 | 000,010,240 | —- | C] () – C:\Users\thibaut\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/22 18:22:47 | 000,172,191 | —- | C] () – C:\Windows\hppins20.dat
[2010/11/22 18:22:46 | 000,006,259 | —- | C] () – C:\Windows\hppmdl20.dat
[2010/11/20 09:11:07 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/11/17 21:30:23 | 001,731,334 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/09/09 06:28:41 | 000,053,248 | —- | C] () – C:\Windows\SysWow64\LogonStart.dll
[2010/09/09 06:21:06 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/09/09 06:07:20 | 000,131,368 | —- | C] () – C:\ProgramData\FullRemove.exe

========== Files - Unicode (All) ==========
[2010/11/26 07:27:29 | 000,000,000 | —D | M](C:\Users\thibaut\Documents\?? ???) – C:\Users\thibaut\Documents\넥슨 플러그
[2010/11/26 07:27:29 | 000,000,000 | —D | C](C:\Users\thibaut\Documents\?? ???) – C:\Users\thibaut\Documents\넥슨 플러그

========== Alternate Data Streams ==========

@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:2B11E0DF
@Alternate Data Stream - 108 bytes -> C:\ProgramData\Temp:553CA6CA

< End of report >

extras:
OTL Extras logfile created on: 3/4/2012 4:29:06 PM - Run 1
OTL by OldTimer - Version 3.2.35.1 Folder = F:\Downloads firefox
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Verenigde Staten | Language: ENU | Date Format: M/d/yyyy

3.86 Gb Total Physical Memory | 1.89 Gb Available Physical Memory | 49.13% Memory free
7.71 Gb Paging File | 5.43 Gb Available in Paging File | 70.40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74.52 Gb Total Space | 21.61 Gb Free Space | 28.99% Space Free | Partition Type: NTFS
Drive D: | 204.03 Gb Total Space | 203.93 Gb Free Space | 99.95% Space Free | Partition Type: NTFS
Drive E: | 276.96 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 149.04 Gb Total Space | 63.06 Gb Free Space | 42.31% Space Free | Partition Type: NTFS
Drive G: | 149.05 Gb Total Space | 138.50 Gb Free Space | 92.92% Space Free | Partition Type: NTFS

Computer Name: THIBAUT-PC | User Name: thibaut | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html[@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-1362543476-2496973011-947830436-1001\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – F:\Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] – F:\Thibaut\adobe cs5\components\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] – F:\Thibaut\adobe cs5\components\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes]
"F:\Combat Arms EU\CombatArms.exe" = F:\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe – (Nexon)
"F:\Combat Arms EU\Engine.exe" = F:\Combat Arms EU\Engine.exe:*Enabled:Engine.exe – (Nexon)
"C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes]
"F:\Combat Arms EU\CombatArms.exe" = F:\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe – (Nexon)
"F:\Combat Arms EU\Engine.exe" = F:\Combat Arms EU\Engine.exe:*Enabled:Engine.exe – (Nexon)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{021B6358-4373-3FC0-A0B4-4709B7E0D3E5}" = Microsoft .NET Framework 4 Extended NLD Language Pack
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{26A24AE4-039D-4CA4-87B4-2F86416030FF}" = Java™ 6 Update 30 (64-bit)
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel® Turbo Boost Technology Monitor
"{4567EA14-6BCA-3EF9-859B-92CE48B1D704}" = Microsoft .NET Framework 4 Client Profile NLD Language Pack
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B97502B-795A-4E12-9A93-E824772156A7}" = HP Deskjet & Photosmart Printer Driver Software 13.0 Rel. A
"{52A98A2C-B58C-1555-C864-6781EFC54019}" = ccc-utility64
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer
"{5E11C972-1E76-45FE-8F92-14E0D1140B1B}" = iTunes
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64A3A4F4-B792-11D6-A78A-00B0D0160230}" = Java™ SE Development Kit 6 Update 23 (64-bit)
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.5.0
"{68660049-8D48-427C-9FF7-139D8340CDC0}" = MSVC80_x64
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{75104836-CAC7-444E-A39E-3F54151942F5}" = Apple Mobile Device Support
"{80AB4395-42E3-D0B3-A310-6F0A6BD9709B}" = ATI Catalyst Install Manager
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{CEA21F20-DBF4-464C-8B81-28B8508AFDDD}" = Windows Live Family Safety
"{D050583D-5CEC-47B1-88AA-8B328CAA8621}" = AVG 2012
"{D1829BE5-F305-4576-9593-C66FC7E0B008}" = iCloud
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{E3EC7FC4-B4BF-4911-9A43-F7C753CE03F5}" = AVG 2012
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F11009B0-F4DB-463B-B717-5266E47498AA}" = Windows Live Family Safety
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FB5688A1-05A2-4E9F-A5E7-872D71A6AAD6}" = DAP Plug-in for 64 Bit IE
"7511B29C86C398B4D11A0B0E4176CAD68D1B7057" = Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1)
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"ASUS USB2.0 UVC VGA WebCam" = ASUS USB2.0 UVC VGA WebCam
"AVG" = AVG 2012
"CCleaner" = CCleaner
"EC3E466026556D3EB760B01C4772277614354E11" = Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0)
"Elantech" = ETDWare PS/2-x64 7.0.5.9_WHQL
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Windows-stuurprogrammapakket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile NLD Language Pack" = Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended NLD Language Pack" = Taalpakket voor Microsoft .NET Framework 4 Extended - NLD
"Shop for HP Supplies" = Shop for HP Supplies
"vsfilter64_is1" = DirectVobSub 2.40.3851 (x64)
"WinRAR archiver" = WinRAR 4.00 beta 2 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{0498D807-1B6C-4C47-3403-AB78C5205539}" = CCC Help Thai
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery
"{075E4ABC-928E-9B1B-D4F1-EAB25E565A33}" = Catalyst Control Center Graphics Full Existing
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{09BBD84F-CC00-D8E1-5A4F-D37BA1A76A35}" = CCC Help Russian
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{10CDCAD1-6F37-5938-89A0-FAFC58B007D3}" = CCC Help Danish
"{1485BCD3-1E59-2120-EE0C-3390C5C53B5A}" = CCC Help Chinese Standard
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{159499C8-68C1-C6CB-2682-9D7AD450FDC7}" = CCC Help Japanese
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{17F6FF31-E155-DE44-3745-305A89FE8B80}" = Catalyst Control Center Graphics Previews Vista
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{189F8DEC-2B05-02AC-C4B9-38411A3825B1}" = CCC Help Portuguese
"{1D03F9DF-FCCE-5114-2787-3FA3568CFC8B}" = CCC Help Polish
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2147B890-E62E-5DA7-D15B-C637ED4D2CC3}" = CCC Help Chinese Traditional
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23F9F197-B8CD-BB88-2509-267F083F7062}" = ccc-core-static
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{289AC7E0-0AEE-4a7b-913C-709D9803D23E}" = Nexon Game Manager
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{34562452-1967-951F-28A9-970C86DFA1D7}" = Catalyst Control Center Core Implementation
"{34610DE0-3C13-42CA-8E32-01FFA38AB6E8}" = PC Connectivity Solution
"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
"{3C9D008D-3716-4C3F-90CD-38ED57568FAB}_is1" = Video Download Capture V2.6.6
"{3E96F8D0-1414-26C6-AEDB-4447C3109D90}" = CCC Help Spanish
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{43F5ECF4-F2B4-4DE3-98DA-356556CDA5A8}" = Divine Souls
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{48294D95-EE9A-4377-8213-44FC4265FB27}" = Windows Live Messenger
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{531C00B3-1F6E-64B8-2DA3-D75AA840CA2E}" = Catalyst Control Center Graphics Light
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{5D87C09F-512F-474A-A306-0FE3B89C396F}" = RuneScape Launcher 1.2
"{5E1375CB-6792-4464-8715-CC3EC83D48FA}" = VirtualDJ Home FREE
"{6009F2FC-EC56-4e28-B91C-0BA5104D6419}" = SF_CDA_Software
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{705C1482-BB28-B8DD-D1FB-F76774664308}" = Catalyst Control Center Graphics Previews Common
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7145C946-B9BA-8101-90EE-08CB1B6F2AB1}" = CCC Help Dutch
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71929EC1-FDB2-4A67-AAAD-936E4539FA84}_is1" = Driver Sweeper 2.1.0
"{739126B3-1B80-4F9F-8D59-312A19633E1A}_is1" = Moozy
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79872596-B887-E700-8D56-CADBC78BA5DE}" = Adobe Download Assistant
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}" = Dream Day Wedding Married in Manhattan
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}" = Smileyville FREE
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{868F24EB-5CA7-4285-B39B-3617CF37462A}" = D2300_Help
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A5EB4E7-7371-519A-735D-AAA9AC9C2792}" = CCC Help Finnish
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}" = iMesh
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9718521B-A345-4ad9-A52B-74D1435FB708}" = SF_CDA_ProductContext
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic
"{A53DAEB6-72F4-70CF-3C97-33255284B8E8}" = CCC Help Norwegian
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"{A8B80045-6EB4-F93A-828F-7038007AA2EA}" = CCC Help Czech
"{A8B94669-8654-4126-BD28-D0D2412CDED6}" = TI Connect 1.6
"{A912DA90-FAD5-F4F2-869C-E50BFA584B0B}" = CCC Help Italian
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB3C268A-E54B-4F6D-BF97-2DFCEEFA94F5}" = Catalyst Control Center - Branding
"{AB49B509-8FCA-45E6-9FB9-9E4AEEB8F148}" = System Requirements Lab CYRI
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AB6F6C80-1C35-4672-BDEF-F26FF214C409}" = Samsung PC Studio 7
"{AB80140D-669E-4D6A-B626-4F8A8DB58F54}" = Divine Souls
"{ACEB2BAF-96DF-48FD-ADD5-43842D4C443D}" = Adobe AIR
"{AEBA98E2-FDFB-6669-6994-9C42751675B4}" = Catalyst Control Center Localization All
"{AFB23B2D-21D6-2840-82BB-3C312C85897D}" = CCC Help Korean
"{B61AF6D1-49F9-7776-6BAB-2F3F3CF6BAA9}" = CCC Help Turkish
"{B653A2EC-D816-4498-A4FD-651047AB9DC9}" = Boingo Wi-Fi
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{BBED4F90-7AE5-40BF-AFB7-1B495692F4AB}" = syncables desktop SE
"{C20AD945-FCB5-D88A-6479-4E90CE196F1E}" = CCC Help German
"{C28DD992-5B7B-D195-6841-4EC57DF512BD}" = Adobe Story
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C656142F-EFE1-44CD-BFAD-6CBC6DCB9860}" = Vodafone Mobile Connect Lite
"{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1" = Game Park Console
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB04D8E1-7B9C-4F35-B2E2-E87CBE520805}" = Adobe After Effects CS5.5
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB594326-2A81-4B1D-AE5B-AA14FE09B1EE}" = Overwolf
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CC084EC0-5F74-4A17-8635-3ED61D501643}_is1" = Flyff
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D297A783-A680-4FDB-8882-913EBA36ABC5}" = D2300
"{D3AE96EE-2876-4B3F-847C-D3A4AD689E43}" = LogMeIn
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel® Turbo Boost Technology Driver
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA5A2B93-2A3B-DFCB-FB68-082A3B505758}" = CCC Help Hungarian
"{DC485813-86F2-B1EA-0B57-F199906DCE57}" = CCC Help Greek
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}" = NVIDIA PhysX
"{E34F703A-1C9D-4B1F-ABBE-D7E8800B860D}" = Windows Live Sync
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E7EE9A81-AE31-463D-E416-4D6B10A10E4B}" = CCC Help English
"{EBBBF21F-7E48-9766-5DC6-7D1C29B3B431}" = CCC Help French
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{EF445145-5ADF-CF94-40AD-0F2E770BC54D}" = CCC Help Swedish
"{F07AE5AB-516C-4CEB-A0AA-AD083B9182C6}" = TI NoteFolio Creator
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F2739D43-F30E-4294-87C1-0F814CCEB9E9}" = Catalyst Control Center InstallProxy
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"{F5691B9D-513B-4B07-2A3C-DC65566DE2C1}" = Catalyst Control Center Graphics Full New
"{F578F3FA-1AFC-422F-BDF1-817E1E0C78BC}" = OpenOffice.org 3.2
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"ASIO4ALL" = ASIO4ALL
"ASUS AP Bank_is1" = ASUS AP Bank
"ASUS WebStorage" = ASUS WebStorage
"AviSynth" = AviSynth 2.5
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Story
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"Combat Arms EU" = Combat Arms EU
"Cross Fire_is1" = Cross Fire En
"CycoreFX HD-64 1.7.1 for After Effects" = CycoreFX HD-64 1.7.1 for After Effects
"DebugBar" = DebugBar v5.4.1 for Internet Explorer (remove only)
"EasyMP3Downloader" = Easy MP3 Downloader
"EpicBot" = EpicBot
"FL Studio 10" = FL Studio 10
"Fraps" = Fraps (remove only)
"GetFLV Pro_is1" = GetFLV Pro [removed]
"Google Chrome" = Google Chrome
"HyperCam 3" = HyperCam 3
"IETester" = IETester v0.4.10 (remove only)
"IL Download Manager" = IL Download Manager
"iMesh" = iMesh
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"K_Series_ScreenSaver_EN" = K_Series_ScreenSaver_EN
"KLiteCodecPack_is1" = K-Lite Codec Pack 8.1.0 (Full)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware versie 1.60.1.1000
"Mozilla Firefox 8.0.1 (x86 nl)" = Mozilla Firefox 8.0.1 (x86 nl)
"Mozilla Firefox 9.0.1 (x86 nl)" = Mozilla Firefox 9.0.1 (x86 nl)
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"PSP Video 9" = PSP Video 9 6
"RealPlayer 12.0" = RealPlayer
"Samsung PC Studio 7" = Samsung PC Studio 7
"SuperMp3Download" = Super Mp3 Download
"Teach2000.7 XP - The Troolean Edition_is1" = Teach2000 versie 8.53
"TeamViewer 7" = TeamViewer 7
"The Free YouTube Downloader" = The Free YouTube Downloader
"TuneUpMedia" = TuneUp Companion 2.0.10
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1362543476-2496973011-947830436-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"0e81a32b7d54f7d6" = Runescape Item Hack
"IMVU Avatar chat client software BETA" = IMVU Avatar Chat Software
"Mozilla Firefox 10.0.2 (x86 nl)" = Mozilla Firefox 10.0.2 (x86 nl)
"SwiftKit" = SwiftKit

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

Thibaut