frozengamer

URL Redirect - Hosts file was full of redirects.

44 posts in this topic

I just noticed this morning that one in 5 of my clicks was sending me to random sites. I have ran the following software prior to this post. - super antispyware - MalwareBytes - Microsoft Security Essentials - HiJackthis - and now spybot search and destroy. I had installed a few giveaway of the day programs, i suspect this one may have been the culprit - http://www.giveawayo...y+of+the+Day%29 - the top line in feedback says its blacklisted by malwarebytes.

I will attach the corrupted hosts file as well as others requested by pinned subjects. I replaced the hosts already and it hasn't gone back to corrupted yet.

On a deep scan with superantyspyware one of my desura dlls (legally purchased games) showed as kazy.gen but really nothing has shown up on all the scans so far.

Last, i am on a network with many computers so there is a possiblity that other computers out of my control may be compromised.

Please advise and thanks for your assistance. PS this is my first post here so please let me know if i did something wrong or forgot something obvious.

HiJack this log

Logfile of Trend Micro HijackThis v2.0.5

Scan saved at 12:13:17 PM, on 5/21/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16576)

FIREFOX: 20.0.1 (en-US)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Everything\Everything.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\AnVir Task Manager\anvir.exe

C:\Windows\System32\PrintDisp.exe

C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe

C:\hotkeyp\HotkeyP.exe

C:\Program Files (x86)\Origin\Origin.exe

I:\Steam\Steam.exe

C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe

C:\Program Files\CrashPlan\CrashPlanTray.exe

C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

C:\Windows\SSDriver\fi5110\SsWiaChecker.exe

C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe

C:\Program Files (x86)\PDF24\pdf24.exe

C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

C:\Users\Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

C:\Program Files (x86)\GameStop App\Now\GameStopNow.exe

C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe

C:\Program Files (x86)\Desura\desura.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe

C:\Program Files (x86)\jane\jane.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Winamp\winamp.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe

F:\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft..../?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft..../?LinkId=255141

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: SoundFrost - {081524f7-7ed8-43ff-b01e-915c410a9cbe} - C:\PROGRA~2\SOUNDF~1\SOUNDF~1.DLL

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL

O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Fantapper - {8A86D350-37AB-410A-8531-7D1363F317B3} - C:\Program Files (x86)\Brand Affinity Technologies\Fantapper Player\\IEInstaller.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll

O2 - BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60

O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s

O4 - HKLM\..\Run: [scanSnap WIA Service Checker] C:\Windows\SSDriver\fi5110\SsWiaChecker.exe

O4 - HKLM\..\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [HOSTS Anti-Adware_PUPs] C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe

O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\Chris\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [superCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe

O4 - HKCU\..\Run: [F.lux] "C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe" /noshow

O4 - HKCU\..\Run: [HotkeyP] C:\hotkeyp\HotkeyP.exe 0

O4 - HKCU\..\Run: [Desura] C:\Program Files (x86)\Desura\desura.exe -autostart

O4 - HKCU\..\Run: [GOG.com Downloader] C:\Program Files (x86)\GOG.com\GOG.com Downloader.exe -autostart

O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

O4 - HKCU\..\Run: [steam] "I:\Steam\steam.exe" -silent

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

O4 - Startup: GameStop Now.lnk = C:\Program Files (x86)\GameStop App\Now\GameStopNow.exe

O4 - Global Startup: CardMinder Viewer.lnk = ?

O4 - Global Startup: Conversion to PDF with ScanSnap Organizer.lnk = ?

O4 - Global Startup: CrashPlan Tray.lnk = C:\Program Files\CrashPlan\CrashPlanTray.exe

O4 - Global Startup: ScanSnap Manager.lnk = ?

O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3

O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1

O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000

O8 - Extra context menu item: LastPass - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=lastpass

O8 - Extra context menu item: LastPass Fill Forms - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=fillforms

O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html

O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O9 - Extra 'Tools' menuitem: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

O9 - Extra button: Fantapper - {AB745E88-1BAD-4B80-A83E-7C964EAC9804} - C:\Program Files (x86)\Brand Affinity Technologies\Fantapper Player\\IEInstaller.dll (HKCU)

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: CrashPlan Backup Service (CrashPlanService) - CrashPlan - C:\Program Files\CrashPlan\CrashPlanService.exe

O23 - Service: Desura Install Service - Desura Pty Ltd - C:\Program Files (x86)\Common Files\Desura\desura_service.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Fantapper Player Update Service (FTSvc) - Brand Affinity Technologies - C:\Program Files (x86)\Brand Affinity Technologies\Fantapper Player\FantapperUpdateService.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HOSTS Anti-PUPs - Unknown owner - C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: Printer Control - Unknown owner - C:\Windows\system32\PrintCtrl.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - C:\Program Files\Sandboxie\SbieSvc.exe

O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe

O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - Unknown owner - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (file missing)

O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

O23 - Service: TomTomHOMEService - TomTom - d:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

DDS.txt

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 10.0.9200.16576 BrowserJavaVersion: 10.21.2

Run by Chris at 12:21:03 on 2013-05-21

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.16360.11463 [GMT -8:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Program Files\Sandboxie\SbieSvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\atieclxx.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\CrashPlan\CrashPlanService.exe

C:\Windows\SysWOW64\PnkBstrA.exe

C:\Windows\system32\PrintCtrl.exe

C:\Program Files (x86)\Secunia\PSI\PSIA.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

d:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Microsoft Security Client\NisSrv.exe

C:\Windows\system32\PrintDisp.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Everything\Everything.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Process Lasso\processgovernor.exe

C:\Program Files\Process Lasso\processlasso.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\AnVir Task Manager\anvir.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Windows\System32\PrintDisp.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files (x86)\Secunia\PSI\sua.exe

C:\Program Files\Logitech Gaming Software\LCore.exe

C:\Program Files\Shadow Defender\DefenderDaemon.exe

C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe

C:\hotkeyp\HotkeyP.exe

C:\Program Files (x86)\Origin\Origin.exe

I:\Steam\Steam.exe

C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe

C:\Program Files\CrashPlan\CrashPlanTray.exe

C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

C:\Windows\SSDriver\fi5110\SsWiaChecker.exe

C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe

C:\Program Files (x86)\PDF24\pdf24.exe

C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

C:\Users\Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\GameStop App\Now\GameStopNow.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe

C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe

C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe

C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe

C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files (x86)\Desura\desura.exe

C:\Program Files (x86)\Common Files\Desura\desura_service.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files (x86)\Common Files\Steam\SteamService.exe

C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe

C:\Program Files (x86)\jane\jane.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Users\Chris\Desktop\MultiDesk\MultiDesk64.exe

C:\Program Files (x86)\Winamp\winamp.exe

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe

C:\Windows\system32\taskhost.exe

F:\Downloads\HijackThis.exe

C:\Windows\SysWOW64\NOTEPAD.EXE

C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe

C:\Windows\SysWOW64\hh.exe

C:\Program Files\Microsoft Security Client\MpCmdRun.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

mWinlogon: Userinit = userinit.exe

BHO: SoundFrost: {081524f7-7ed8-43ff-b01e-915c410a9cbe} - C:\Program Files (x86)\SoundFrost\SoundFrost.dll

BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

BHO: Fantapper: {8A86D350-37AB-410A-8531-7D1363F317B3} - C:\Program Files (x86)\Brand Affinity Technologies\Fantapper Player\\IEInstaller.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Evernote extension: {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll

BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll

uRun: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

uRun: [Google Update] "C:\Users\Chris\AppData\Local\Google\Update\GoogleUpdate.exe" /c

uRun: [superCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe

uRun: [F.lux] "C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe" /noshow

uRun: [HotkeyP] C:\hotkeyp\HotkeyP.exe 0

uRun: [Desura] C:\Program Files (x86)\Desura\desura.exe -autostart

uRun: [GOG.com Downloader] C:\Program Files (x86)\GOG.com\GOG.com Downloader.exe -autostart

uRun: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

uRun: [steam] "I:\Steam\steam.exe" -silent

uRun: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

mRun: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60

mRun: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s

mRun: [scanSnap WIA Service Checker] C:\Windows\SSDriver\fi5110\SsWiaChecker.exe

mRun: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

mRun: [HOSTS Anti-Adware_PUPs] C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe

StartupFolder: C:\Users\Chris\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe

StartupFolder: C:\Users\Chris\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\EVERNO~1.LNK - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

StartupFolder: C:\Users\Chris\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\GAMEST~1.LNK - C:\Program Files (x86)\GameStop App\Now\GameStopNow.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\CARDMI~1.LNK - C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\CONVER~1.LNK - C:\Program Files (x86)\PFU\ScanSnap\Organizer\PfuSsOrgOcrChk.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\CRASHP~1.LNK - C:\Program Files\CrashPlan\CrashPlanTray.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SCANSN~1.LNK - C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SECUNI~1.LNK - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200

IE: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3

IE: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1

IE: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0

IE: E&xport to Microsoft Excel - C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000

IE: LastPass - C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=lastpass

IE: LastPass Fill Forms - C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=fillforms

IE: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html

IE: Se&nd to OneNote - C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

TCP: NameServer = 192.168.1.1

TCP: Interfaces\{2F2D49D1-222D-43C8-8DC9-7F36834F344F} : DHCPNameServer = 192.168.1.1

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

SSODL: WebCheck - <orphaned>

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

x64-TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll

x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

x64-Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices

x64-Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun

x64-Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

x64-Run: [PrintDisp] C:\Windows\System32\PrintDisp.exe

x64-Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized

x64-Run: [shadow Defender Daemon] "C:\Program Files\Shadow Defender\DefenderDaemon.exe" /Auto

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

x64-IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab

x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-SSODL: WebCheck - <orphaned>

x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - about:home

FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=

FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10171.dll

FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll

FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll

FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

FF - plugin: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll

FF - plugin: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypchub.dll

FF - plugin: C:\Users\Chris\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll

FF - plugin: C:\Users\Chris\AppData\Local\Roblox\Versions\version-d2e4e6e567c64738\NPRobloxProxy.dll

FF - plugin: C:\Users\Chris\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll

FF - plugin: C:\Users\Chris\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

FF - plugin: C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll

FF - plugin: C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll

FF - plugin: C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npo1d.dll

FF - plugin: C:\Windows\System32\Wat\npWatWeb.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll

FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

FF - ExtSQL: 2013-04-20 17:22; {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}; C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

.

============= SERVICES / DRIVERS ===============

.

R0 diskpt;diskpt;C:\Windows\System32\drivers\diskpt.sys [2013-5-1 263912]

R0 fltsrv;Acronis Storage Filter Management;C:\Windows\System32\drivers\fltsrv.sys [2012-1-19 133728]

R0 hotcore3;hc3ServiceName;C:\Windows\System32\drivers\hotcore3.sys [2012-1-13 39728]

R0 iaStorA;iaStorA;C:\Windows\System32\drivers\iaStorA.sys [2012-11-27 647736]

R0 iaStorF;iaStorF;C:\Windows\System32\drivers\iaStorF.sys [2012-11-27 28216]

R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-1-20 230320]

R0 mv91xx;mv91xx;C:\Windows\System32\drivers\mv91xx.sys [2010-11-21 303408]

R0 vidsflt61;Acronis Disk Storage Filter (61);C:\Windows\System32\drivers\vsflt61.sys [2012-1-19 142944]

R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]

R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]

R1 Uim_VIM;UIM Virtual Image Plugin;C:\Windows\System32\drivers\uim_vimx64.sys [2011-11-14 352816]

R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2012-7-11 140672]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-4-16 241152]

R2 cpuz135;cpuz135;C:\Windows\System32\drivers\cpuz135_x64.sys [2012-1-12 21992]

R2 CrashPlanService;CrashPlan Backup Service;C:\Program Files\CrashPlan\CrashPlanService.exe [2011-3-16 222720]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-4-15 14904]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-5-21 418376]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-5-21 701512]

R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2010-10-24 130008]

R2 Printer Control;Printer Control;C:\Windows\System32\PrintCtrl.exe [2012-9-5 78848]

R2 Secunia PSI Agent;Secunia PSI Agent;C:\Program Files (x86)\Secunia\PSI\psia.exe [2012-7-25 1326176]

R2 Secunia Update Agent;Secunia Update Agent;C:\Program Files (x86)\Secunia\PSI\sua.exe [2012-7-25 681056]

R2 TeamViewer8;TeamViewer 8;C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-5-18 3574624]

R2 TomTomHOMEService;TomTomHOMEService;D:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-1-22 92592]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-2-14 96768]

R3 Desura Install Service;Desura Install Service;C:\Program Files (x86)\Common Files\Desura\desura_service.exe [2012-3-23 131912]

R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;C:\Windows\System32\drivers\EtronHub3.sys [2011-2-8 39936]

R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;C:\Windows\System32\drivers\EtronXHCI.sys [2011-2-8 64512]

R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;C:\Windows\System32\drivers\LGBusEnum.sys [2011-10-24 22408]

R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;C:\Windows\System32\drivers\LGSHidFilt.Sys [2012-10-2 66360]

R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;C:\Windows\System32\drivers\LGVirHid.sys [2011-10-24 16008]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-5-21 25928]

R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-1-27 379360]

R3 PSI;PSI;C:\Windows\System32\drivers\psi_mf.sys [2010-9-1 17976]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-2-7 648808]

R3 SbieDrv;SbieDrv;C:\Program Files\Sandboxie\SbieDrv.sys [2011-6-17 154752]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 HOSTS Anti-PUPs;HOSTS Anti-PUPs;C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe -update --> C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe -update [?]

S2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2013-5-21 1153368]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe --> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [?]

S3 ampa;ampa;C:\Windows\System32\ampa.sys [2013-2-3 15288]

S3 ddmdrv;ddmdrv;C:\Windows\System32\ddmdrv.sys [2013-2-3 15288]

S3 DigiartyVirtualCDBus;Digiarty Virtual Driver;C:\Windows\System32\drivers\DigiartyVirtualCDBus.sys [2012-1-6 276256]

S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2010-11-20 71168]

S3 epmntdrv;epmntdrv;C:\Windows\System32\epmntdrv.sys [2013-2-11 17480]

S3 EuGdiDrv;EuGdiDrv;C:\Windows\System32\EuGdiDrv.sys [2013-2-11 9800]

S3 FTSvc;Fantapper Player Update Service;C:\Program Files (x86)\Brand Affinity Technologies\Fantapper Player\FantapperUpdateService.exe [2011-12-12 11776]

S3 ivusb;Initio Driver for USB Default Controller;C:\Windows\System32\drivers\ivusb.sys [2010-7-29 29720]

S3 LADF_BakerCOnly;BakerC Filter Driver;C:\Windows\System32\drivers\ladfBakerCamd64.sys [2011-3-18 410184]

S3 LADF_BakerROnly;BakerR Filter Driver;C:\Windows\System32\drivers\ladfBakerRamd64.sys [2011-3-18 335688]

S3 LADF_CaptureOnly;LADF Capture Filter Driver;C:\Windows\System32\drivers\ladfGSCamd64.sys [2011-10-24 410184]

S3 LADF_RenderOnly;LADF Render Filter Driver;C:\Windows\System32\drivers\ladfGSRamd64.sys [2011-10-24 341832]

S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\System32\drivers\netaapl64.sys [2011-8-2 22528]

S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]

S3 Synth3dVsc;Synth3dVsc;C:\Windows\System32\drivers\Synth3dVsc.sys [2010-11-20 88960]

S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\System32\drivers\terminpt.sys [2010-11-20 34816]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

S3 tsusbhub;tsusbhub;C:\Windows\System32\drivers\tsusbhub.sys [2010-11-20 117248]

S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-9-28 53760]

S3 VBoxUSB;VirtualBox USB;C:\Windows\System32\drivers\VBoxUSB.sys [2011-12-19 117040]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-4-17 1255736]

S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]

S3 WinRing0_1_2_0;WinRing0_1_2_0;C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2013-4-20 14544]

.

=============== Created Last 30 ================

.

2013-05-21 20:16:41 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy

2013-05-21 20:16:41 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy

2013-05-21 16:27:21 76232 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{891354E4-DC18-4235-A3BE-820F78AA4E00}\offreg.dll

2013-05-21 16:08:57 -------- d-----w- C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs

2013-05-21 15:45:55 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-05-21 15:45:55 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-05-21 11:37:24 964552 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DD477897-6445-44E9-9B0D-DFEB567EB007}\gapaengine.dll

2013-05-21 11:37:16 9460464 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{891354E4-DC18-4235-A3BE-820F78AA4E00}\mpengine.dll

2013-05-21 02:48:10 -------- d-----w- C:\Fraps

2013-05-21 01:03:18 -------- d-----w- C:\Users\Chris\AppData\Roaming\FairyBloomRe

2013-05-20 19:56:32 -------- d-----w- C:\Users\Chris\AppData\Local\Activision

2013-05-20 17:19:31 -------- d-----w- C:\Program Files (x86)\SoundFrost

2013-05-20 11:36:29 9460464 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2013-05-19 01:42:12 -------- d-----w- C:\Users\Chris\AppData\Roaming\RIFT

2013-05-15 07:10:54 983400 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2013-05-14 04:33:06 -------- d-----w- C:\ProgramData\ManiaPlanet

2013-05-13 19:48:09 -------- d-----w- C:\Program Files (x86)\AMD AVT

2013-05-10 07:57:26 187456 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll

2013-05-02 04:22:33 263912 ----a-w- C:\Windows\System32\drivers\diskpt.sys

2013-05-02 04:22:31 -------- d-----w- C:\Program Files\Shadow Defender

2013-04-24 12:49:09 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys

.

==================== Find3M ====================

.

2013-05-15 19:36:15 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2013-05-15 19:36:15 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2013-05-02 15:29:56 278800 ------w- C:\Windows\System32\MpSigStub.exe

2013-04-21 01:28:51 95648 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2013-04-21 01:28:50 866720 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll

2013-04-21 01:28:50 788896 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2013-04-21 01:22:54 0 ----a-w- C:\Windows\SysWow64\REN671D.tmp

2013-04-21 01:22:54 0 ----a-w- C:\Windows\SysWow64\REN671C.tmp

2013-04-21 01:22:54 0 ----a-w- C:\Windows\SysWow64\REN671B.tmp

2013-04-20 20:39:44 281688 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr

2013-04-20 20:39:44 281688 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe

2013-04-17 15:15:24 971680 ----a-w- C:\Windows\System32\deployJava1.dll

2013-04-17 15:15:24 1092512 ----a-w- C:\Windows\System32\npDeployJava1.dll

2013-04-16 14:54:06 78432 ----a-w- C:\Windows\System32\atimpc64.dll

2013-04-16 14:54:06 78432 ----a-w- C:\Windows\System32\amdpcom64.dll

2013-04-16 14:54:04 71704 ----a-w- C:\Windows\SysWow64\atimpc32.dll

2013-04-16 14:54:04 71704 ----a-w- C:\Windows\SysWow64\amdpcom32.dll

2013-04-16 14:54:00 139696 ----a-w- C:\Windows\System32\atiuxp64.dll

2013-04-16 14:54:00 118584 ----a-w- C:\Windows\SysWow64\atiuxpag.dll

2013-04-16 14:53:58 92304 ----a-w- C:\Windows\SysWow64\atiu9pag.dll

2013-04-16 14:53:58 112440 ----a-w- C:\Windows\System32\atiu9p64.dll

2013-04-16 14:53:56 970912 ----a-w- C:\Windows\SysWow64\aticfx32.dll

2013-04-16 14:53:56 1154240 ----a-w- C:\Windows\System32\aticfx64.dll

2013-04-16 14:53:52 8322576 ----a-w- C:\Windows\System32\atidxx64.dll

2013-04-16 14:53:50 7285360 ----a-w- C:\Windows\SysWow64\atidxx32.dll

2013-04-16 14:53:44 4448216 ----a-w- C:\Windows\SysWow64\atiumdva.dll

2013-04-16 14:53:42 5941680 ----a-w- C:\Windows\SysWow64\atiumdag.dll

2013-04-16 14:53:36 4997736 ----a-w- C:\Windows\System32\atiumd6a.dll

2013-04-16 14:53:34 6983040 ----a-w- C:\Windows\System32\atiumd64.dll

2013-04-16 14:51:54 11653632 ----a-w- C:\Windows\System32\drivers\atikmdag.sys

2013-04-16 14:37:26 222720 ----a-w- C:\Windows\System32\clinfo.exe

2013-04-16 14:37:14 1187342 ----a-w- C:\Windows\System32\amdocl_as64.exe

2013-04-16 14:37:14 1061902 ----a-w- C:\Windows\System32\amdocl_ld64.exe

2013-04-16 14:37:12 995342 ----a-w- C:\Windows\SysWow64\amdocl_as32.exe

2013-04-16 14:37:12 798734 ----a-w- C:\Windows\SysWow64\amdocl_ld32.exe

2013-04-16 14:37:08 76288 ----a-w- C:\Windows\System32\OpenVideo64.dll

2013-04-16 14:37:04 65536 ----a-w- C:\Windows\SysWow64\OpenVideo.dll

2013-04-16 14:37:00 64000 ----a-w- C:\Windows\System32\OVDecode64.dll

2013-04-16 14:36:56 56320 ----a-w- C:\Windows\SysWow64\OVDecode.dll

2013-04-16 14:36:48 29150208 ----a-w- C:\Windows\System32\amdocl64.dll

2013-04-16 14:35:38 23593984 ----a-w- C:\Windows\System32\atio6axx.dll

2013-04-16 14:34:54 23810560 ----a-w- C:\Windows\SysWow64\amdocl.dll

2013-04-16 14:33:10 54784 ----a-w- C:\Windows\System32\OpenCL.dll

2013-04-16 14:33:06 50176 ----a-w- C:\Windows\SysWow64\OpenCL.dll

2013-04-16 14:27:18 163840 ----a-w- C:\Windows\System32\atiapfxx.exe

2013-04-16 14:24:48 51200 ----a-w- C:\Windows\System32\aticalrt64.dll

2013-04-16 14:24:46 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll

2013-04-16 14:24:40 44544 ----a-w- C:\Windows\System32\aticalcl64.dll

2013-04-16 14:24:38 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll

2013-04-16 14:24:26 16082944 ----a-w- C:\Windows\System32\aticaldd64.dll

2013-04-16 14:24:04 76800 ----a-w- C:\Windows\System32\coinst_12.102.3.dll

2013-04-16 14:20:04 13703168 ----a-w- C:\Windows\SysWow64\aticaldd.dll

2013-04-16 14:16:32 19772416 ----a-w- C:\Windows\SysWow64\atioglxx.dll

2013-04-16 14:03:02 442368 ----a-w- C:\Windows\System32\atidemgy.dll

2013-04-16 14:02:48 562688 ----a-w- C:\Windows\System32\atieclxx.exe

2013-04-16 14:01:58 241152 ----a-w- C:\Windows\System32\atiesrxx.exe

2013-04-16 14:00:30 120320 ----a-w- C:\Windows\System32\atitmm64.dll

2013-04-16 14:00:14 26112 ----a-w- C:\Windows\System32\atimuixx.dll

2013-04-16 14:00:10 59392 ----a-w- C:\Windows\System32\atiedu64.dll

2013-04-16 14:00:04 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll

2013-04-16 13:36:12 635392 ----a-w- C:\Windows\System32\atiadlxx.dll

2013-04-16 13:36:00 430080 ----a-w- C:\Windows\SysWow64\atiadlxy.dll

2013-04-16 13:35:46 17920 ----a-w- C:\Windows\System32\atig6pxx.dll

2013-04-16 13:35:42 14848 ----a-w- C:\Windows\SysWow64\atiglpxx.dll

2013-04-16 13:35:42 14848 ----a-w- C:\Windows\System32\atiglpxx.dll

2013-04-16 13:35:38 44032 ----a-w- C:\Windows\System32\atig6txx.dll

2013-04-16 13:35:30 34816 ----a-w- C:\Windows\SysWow64\atigktxx.dll

2013-04-16 13:35:20 581120 ----a-w- C:\Windows\System32\drivers\atikmpag.sys

2013-04-16 13:35:00 79360 ----a-w- C:\Windows\System32\amdave64.dll

2013-04-16 13:34:54 78336 ----a-w- C:\Windows\SysWow64\amdave32.dll

2013-04-16 13:34:42 74240 ----a-w- C:\Windows\System32\atisamu64.dll

2013-04-16 13:34:36 71168 ----a-w- C:\Windows\SysWow64\atisamu32.dll

2013-04-16 13:31:20 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll

2013-04-13 05:49:23 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49:19 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49:19 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49:19 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45:16 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll

2013-04-13 04:45:15 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll

2013-04-12 19:41:58 237840 ----a-w- C:\Windows\System32\drivers\VBoxDrv.sys

2013-04-12 19:41:28 131856 ----a-w- C:\Windows\System32\drivers\VBoxNetAdp.sys

2013-04-12 19:40:18 146704 ----a-w- C:\Windows\System32\drivers\VBoxNetFlt.sys

2013-04-12 19:40:18 120080 ----a-w- C:\Windows\System32\drivers\VBoxUSBMon.sys

2013-04-12 19:40:16 204048 ----a-w- C:\Windows\System32\VBoxNetFltNobj.dll

2013-04-10 06:01:54 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys

2013-04-10 03:30:50 3153920 ----a-w- C:\Windows\System32\win32k.sys

2013-04-05 06:52:14 2242048 ----a-w- C:\Windows\System32\wininet.dll

2013-04-05 06:50:36 3958784 ----a-w- C:\Windows\System32\jscript9.dll

2013-04-05 06:50:31 67072 ----a-w- C:\Windows\System32\iesetup.dll

2013-04-05 06:50:31 136704 ----a-w- C:\Windows\System32\iesysprep.dll

2013-04-05 05:28:24 1767424 ----a-w- C:\Windows\SysWow64\wininet.dll

2013-04-05 05:26:26 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll

2013-04-05 05:26:21 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll

2013-04-05 05:26:21 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll

2013-04-05 04:43:00 2706432 ----a-w- C:\Windows\System32\mshtml.tlb

2013-04-05 04:29:45 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2013-04-05 03:51:11 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

2013-04-05 03:38:25 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe

2013-04-02 14:09:52 4550656 ----a-w- C:\Windows\SysWow64\GPhotos.scr

2013-03-19 06:04:06 5550424 ----a-w- C:\Windows\System32\ntoskrnl.exe

.

============= FINISH: 12:21:12.66 ===============

Share this post


Link to post
Share on other sites

Last - My HOSTS file - which as you can see is quite interesting :(

127.0.0.1 00aaf101a7.gougava.asia # hosts anti-adware / pups

127.0.0.1 08sr.combineads.info # hosts anti-adware / pups

127.0.0.1 08srvr.combineads.info # hosts anti-adware / pups

127.0.0.1 12srvr.combineads.info # hosts anti-adware / pups

127.0.0.1 1a2e115593.efacen.pro # hosts anti-adware / pups

127.0.0.1 1f1.fr # hosts anti-adware / pups

127.0.0.1 1facebookhackeronline.blogspot.no # hosts anti-adware / pups

127.0.0.1 2010-fr.com # hosts anti-adware / pups

127.0.0.1 2012-new.biz # hosts anti-adware / pups

127.0.0.1 2319825.ourtoolbar.com # hosts anti-adware / pups

127.0.0.1 24h00business.com # hosts anti-adware / pups

127.0.0.1 33black.porn-quest.net # hosts anti-adware / pups

127.0.0.1 4672ee0bc8.laibritec.waw.pl # hosts anti-adware / pups

127.0.0.1 4990usd.com # hosts anti-adware / pups

127.0.0.1 4xp.com # hosts anti-adware / pups

127.0.0.1 74.80.131.123 # hosts anti-adware / pups

127.0.0.1 78031d2298.tradorad.waw.pl # hosts anti-adware / pups

127.0.0.1 80323fcc6e.starsogor.waw.pl # hosts anti-adware / pups

127.0.0.1 888.rahon.org # hosts anti-adware / pups

127.0.0.1 8e47c22037.temavi.pro # hosts anti-adware / pups

127.0.0.1 94eb028571.eimeefiewe.pisz.pl # hosts anti-adware / pups

127.0.0.1 96910cbcd4.nicero.pro # hosts anti-adware / pups

127.0.0.1 96fb625592.tysofque.waw.pl:82 # hosts anti-adware / pups

127.0.0.1 98eu.info # hosts anti-adware / pups

127.0.0.1 ack.cdnperformance.info # hosts anti-adware / pups

127.0.0.1 acking.conversionads.com # hosts anti-adware / pups

127.0.0.1 a.daasafterdusk.com # hosts anti-adware / pups

127.0.0.1 ad.adn360.com # hosts anti-adware / pups

127.0.0.1 adeartss.eu # hosts anti-adware / pups

127.0.0.1 adesoeasy.eu # hosts anti-adware / pups

127.0.0.1 adf.girldatesforfree.net # hosts anti-adware / pups

127.0.0.1 adomicileavail.googlepages.com # hosts anti-adware / pups

127.0.0.1 ads7.complexadveising.com # hosts anti-adware / pups

127.0.0.1 ads.aff.co # hosts anti-adware / pups

127.0.0.1 ads.alpha00001.com # hosts anti-adware / pups

127.0.0.1 ads.cloud4ads.com # hosts anti-adware / pups

127.0.0.1 ads.eorezo.com # hosts anti-adware / pups

127.0.0.1 ads.hooqy.com # hosts anti-adware / pups

127.0.0.1 ads.icksor.com # hosts anti-adware / pups

127.0.0.1 ads.regiedepub.com # hosts anti-adware / pups

127.0.0.1 ads.sucomspot.com # hosts anti-adware / pups

127.0.0.1 ads.tersecta.com # hosts anti-adware / pups

127.0.0.1 aduatnight.com # hosts anti-adware / pups

127.0.0.1 adultatnight.com # hosts anti-adware / pups

127.0.0.1 adultsextools.com # hosts anti-adware / pups

127.0.0.1 a.dungtank.com # hosts anti-adware / pups

127.0.0.1 adwareale.com # hosts anti-adware / pups

127.0.0.1 aff.foxtab.com # hosts anti-adware / pups

127.0.0.1 affilibot.eu # hosts anti-adware / pups

127.0.0.1 afhhhfegd.co.cc # hosts anti-adware / pups

127.0.0.1 afhhhfegd.co. # hosts anti-adware / pups

127.0.0.1 afoula.biz # hosts anti-adware / pups

127.0.0.1 agence-exusive.com # hosts anti-adware / pups

127.0.0.1 a.juiceknowledge.com # hosts anti-adware / pups

127.0.0.1 ak.imgfa.com # hosts anti-adware / pups

127.0.0.1 ak.imgfarm.com # hosts anti-adware / pups

127.0.0.1 amaranth-plant.ru # hosts anti-adware / pups

127.0.0.1 antivirusgratuit.vg # hosts anti-adware / pups

127.0.0.1 antivirus.nouvee-version.net # hosts anti-adware / pups

127.0.0.1 anygadget.info # hosts anti-adware / pups

127.0.0.1 api.downloadmr.com # hosts anti-adware / pups

127.0.0.1 api.yontoo.com # hosts anti-adware / pups

127.0.0.1 apnmedia.ask.com # hosts anti-adware / pups

127.0.0.1 application-eor.net # hosts anti-adware / pups

127.0.0.1 application-error.net # hosts anti-adware / pups

127.0.0.1 app.media-app.com # hosts anti-adware / pups

127.0.0.1 app.offerbox.com # hosts anti-adware / pups

127.0.0.1 app.softimizer.com # hosts anti-adware / pups

127.0.0.1 app.wideseam6.com # hosts anti-adware / pups

127.0.0.1 argentastuce.com # hosts anti-adware / pups

127.0.0.1 argent-avail-domicile.fr # hosts anti-adware / pups

127.0.0.1 argent-domicile.eu # hosts anti-adware / pups

127.0.0.1 argent-vital.com # hosts anti-adware / pups

127.0.0.1 ascentive.com # hosts anti-adware / pups

127.0.0.1 atelecharger.info # hosts anti-adware / pups

127.0.0.1 augmentersesrevenus.pyie.com # hosts anti-adware / pups

127.0.0.1 auto-webcash.com # hosts anti-adware / pups

127.0.0.1 avaaffic.com # hosts anti-adware / pups

127.0.0.1 availchezsoi.onlc.fr # hosts anti-adware / pups

127.0.0.1 avail-d-equipe.com # hosts anti-adware / pups

127.0.0.1 availleur-a-domicile.com # hosts anti-adware / pups

127.0.0.1 avigora.com # hosts anti-adware / pups

127.0.0.1 avs4you.com # hosts anti-adware / pups

127.0.0.1 bababiz.com # hosts anti-adware / pups

127.0.0.1 badusoft.com # hosts anti-adware / pups

127.0.0.1 banner.kuliyev.com # hosts anti-adware / pups

127.0.0.1 b.bestofmedia.com # hosts anti-adware / pups

127.0.0.1 be2.fr # hosts anti-adware / pups

127.0.0.1 bestflvplayer.net # hosts anti-adware / pups

127.0.0.1 bfd34af056e54c8abcb9dd50862f0b9b.integration.download.conduit-services.com # hosts anti-adware / pups

127.0.0.1 bidfun.fr # hosts anti-adware / pups

127.0.0.1 bisexywoman.biz # hosts anti-adware / pups

127.0.0.1 b.juiceknowledge.com # hosts anti-adware / pups

127.0.0.1 blacksxxx.org # hosts anti-adware / pups

127.0.0.1 blog.upoharbd.com # hosts anti-adware / pups

127.0.0.1 boolu.springjapan.info # hosts anti-adware / pups

127.0.0.1 boostersonpc.com # hosts anti-adware / pups

127.0.0.1 buzz-france.info # hosts anti-adware / pups

127.0.0.1 byteseeder.com # hosts anti-adware / pups

127.0.0.1 c756514600.phailifaiy.nysa.pl # hosts anti-adware / pups

127.0.0.1 c8783b9ac3.ebafap.pro # hosts anti-adware / pups

127.0.0.1 cache-download.real.com # hosts anti-adware / pups

127.0.0.1 caefourinternet.com # hosts anti-adware / pups

127.0.0.1 cash-avalanches.com # hosts anti-adware / pups

127.0.0.1 cash-methodes.be # hosts anti-adware / pups

127.0.0.1 cash-professor.com # hosts anti-adware / pups

127.0.0.1 casinoonlinecash.org # hosts anti-adware / pups

127.0.0.1 cdn.appround.biz # hosts anti-adware / pups

127.0.0.1 cdn.bigspeedpro.com # hosts anti-adware / pups

127.0.0.1 cdn.bispd.com # hosts anti-adware / pups

127.0.0.1 cdn.bisrv.com # hosts anti-adware / pups

127.0.0.1 cdn.download.sweetpacks.com # hosts anti-adware / pups

127.0.0.1 cdneu.bestflvplayer.net # hosts anti-adware / pups

127.0.0.1 cdneu.coolvideoconveer.com # hosts anti-adware / pups

127.0.0.1 cdneu.coolvideoconverter.com # hosts anti-adware / pups

127.0.0.1 cdneu.driverpackcdn.com # hosts anti-adware / pups

127.0.0.1 cdneu.friedcookiescdn.com # hosts anti-adware / pups

127.0.0.1 cdneu.onedownloadspot.com # hosts anti-adware / pups

127.0.0.1 cdneu.telechargercdn.com # hosts anti-adware / pups

127.0.0.1 cdn.guttastatdk.us # hosts anti-adware / pups

127.0.0.1 cdn.inskinmedia.com # hosts anti-adware / pups

127.0.0.1 cdn.insta.oibundles2.com # hosts anti-adware / pups

127.0.0.1 cdn.insta.playbryte.com # hosts anti-adware / pups

127.0.0.1 cdn.llogetfastcach.us # hosts anti-adware / pups

127.0.0.1 cdn.montiera.com # hosts anti-adware / pups

127.0.0.1 cdn.msdwnld.com # hosts anti-adware / pups

127.0.0.1 cdn.shyapotato.us # hosts anti-adware / pups

127.0.0.1 cdn.solimba.com # hosts anti-adware / pups

127.0.0.1 cdn.tuto4pc.com # hosts anti-adware / pups

127.0.0.1 cdnus.bestflvplayer.net # hosts anti-adware / pups

127.0.0.1 cdnus.coolflvplayer.com # hosts anti-adware / pups

127.0.0.1 cdnus.driverpackcdn.com # hosts anti-adware / pups

127.0.0.1 cdnus.extrimdownloadmanager.com # hosts anti-adware / pups

127.0.0.1 cdnus.ironcdn.com # hosts anti-adware / pups

127.0.0.1 cdnus.onedownloadspot.com # hosts anti-adware / pups

127.0.0.1 cdnus.telechargercdn.com # hosts anti-adware / pups

127.0.0.1 c.download-best-softwares.com # hosts anti-adware / pups

127.0.0.1 cen.incredibar.com # hosts anti-adware / pups

127.0.0.1 centerblog.net # hosts anti-adware / pups

127.0.0.1 cf1.vuze.com # hosts anti-adware / pups

127.0.0.1 cfnmhdtube.net # hosts anti-adware / pups

127.0.0.1 cfnmhdtube.org # hosts anti-adware / pups

127.0.0.1 c-full.info # hosts anti-adware / pups

127.0.0.1 checkmate121.com # hosts anti-adware / pups

127.0.0.1 chevaux8.free.fr # hosts anti-adware / pups

127.0.0.1 choiceadu.com # hosts anti-adware / pups

127.0.0.1 choiceadult.com # hosts anti-adware / pups

127.0.0.1 cia.mediahubaffiliates.biz # hosts anti-adware / pups

127.0.0.1 clubcasino.biz # hosts anti-adware / pups

127.0.0.1 c-mediaplayer-2010.com # hosts anti-adware / pups

127.0.0.1 cms.distributionengine.conduit-services.com # hosts anti-adware / pups

127.0.0.1 coachforlife.info # hosts anti-adware / pups

127.0.0.1 commeneussir.com # hosts anti-adware / pups

127.0.0.1 comment-gagner-argent-internet.fr # hosts anti-adware / pups

127.0.0.1 content.sweetim.com # hosts anti-adware / pups

127.0.0.1 couplefree.com # hosts anti-adware / pups

127.0.0.1 cpafixadvertiser.info # hosts anti-adware / pups

127.0.0.1 cp.tuguu.com # hosts anti-adware / pups

127.0.0.1 crakkkus.tk # hosts anti-adware / pups

127.0.0.1 crazyspandacasino.com # hosts anti-adware / pups

127.0.0.1 create-ringtones.com # hosts anti-adware / pups

127.0.0.1 cs.adxpansion.com # hosts anti-adware / pups

127.0.0.1 c.vg # hosts anti-adware / pups

127.0.0.1 d1m9ge5vns34so.oudfront.net # hosts anti-adware / pups

127.0.0.1 d1w467en2eqqh2.oudfront.net # hosts anti-adware / pups

127.0.0.1 d2qsma9t6l5kt7.oudfront.net # hosts anti-adware / pups

127.0.0.1 d30p0quhwpvm.cloudfront.net # hosts anti-adware / pups

127.0.0.1 d61.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d62.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d63.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d64.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d71.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d74.newplaysite.com # hosts anti-adware / pups

127.0.0.1 dagence.com # hosts anti-adware / pups

127.0.0.1 data.downloadstaer.net # hosts anti-adware / pups

127.0.0.1 data.oa-software.com # hosts anti-adware / pups

127.0.0.1 datefks.info # hosts anti-adware / pups

127.0.0.1 dating-adult-sex.com # hosts anti-adware / pups

127.0.0.1 dating-club.biz # hosts anti-adware / pups

127.0.0.1 dating.marmaladepark.com # hosts anti-adware / pups

127.0.0.1 datingpoland.com # hosts anti-adware / pups

127.0.0.1 datingsitenow.com # hosts anti-adware / pups

127.0.0.1 dating.voltesempre.org # hosts anti-adware / pups

127.0.0.1 db.nordicx.net # hosts anti-adware / pups

127.0.0.1 db.prepay-africa.com # hosts anti-adware / pups

127.0.0.1 dde.integration.storage.conduit-services.com # hosts anti-adware / pups

127.0.0.1 dec.pcvideosfreedownload.com # hosts anti-adware / pups

127.0.0.1 delargenapide.canalblog.com # hosts anti-adware / pups

127.0.0.1 delivery.afficbroker.com # hosts anti-adware / pups

127.0.0.1 delta.goforfiles.com # hosts anti-adware / pups

127.0.0.1 depanne-pc.com # hosts anti-adware / pups

127.0.0.1 depanne-pc.info # hosts anti-adware / pups

127.0.0.1 dereteweret.org # hosts anti-adware / pups

127.0.0.1 dev.oud4pc.com # hosts anti-adware / pups

127.0.0.1 dfast.us # hosts anti-adware / pups

127.0.0.1 dfc.mediaformatconverter.com # hosts anti-adware / pups

127.0.0.1 d.freevideosfordownload.com # hosts anti-adware / pups

127.0.0.1 dfr.eorezo.com # hosts anti-adware / pups

127.0.0.1 dhc.freewindowsmediaconverter.com # hosts anti-adware / pups

127.0.0.1 direct.excellerater.com # hosts anti-adware / pups

127.0.0.1 dl01.socdn.com # hosts anti-adware / pups

127.0.0.1 dl6.iq7download.com # hosts anti-adware / pups

127.0.0.1 dl.babylon.com # hosts anti-adware / pups

127.0.0.1 dl.cdn-services.com # hosts anti-adware / pups

127.0.0.1 dlfr.tuto4pc.com # hosts anti-adware / pups

127.0.0.1 dl.instaiq.com # hosts anti-adware / pups

127.0.0.1 dlmanager.net # hosts anti-adware / pups

127.0.0.1 dl-plugin.com # hosts anti-adware / pups

127.0.0.1 dls.nicdls.com # hosts anti-adware / pups

127.0.0.1 dls.softgratuit.com # hosts anti-adware / pups

127.0.0.1 dls.softlate.com # hosts anti-adware / pups

127.0.0.1 dl.v2.domaiq.com # hosts anti-adware / pups

127.0.0.1 dn.download-manage.com # hosts anti-adware / pups

127.0.0.1 dnld.instacore.com # hosts anti-adware / pups

127.0.0.1 dofus-kamas.net # hosts anti-adware / pups

127.0.0.1 domaiq.com # hosts anti-adware / pups

127.0.0.1 downlesoft.com # hosts anti-adware / pups

127.0.0.1 download2.us # hosts anti-adware / pups

127.0.0.1 downloadcdn.beerinstaller.com # hosts anti-adware / pups

127.0.0.1 downloadcdn.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 downloadcdn.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 downloadcdn.filebulldog.com # hosts anti-adware / pups

127.0.0.1 download.cdn.ftalk.com # hosts anti-adware / pups

127.0.0.1 download.cdn.imesh.com # hosts anti-adware / pups

127.0.0.1 download.cdn.koyotesoft.com # hosts anti-adware / pups

127.0.0.1 download.cdnperfoance.info # hosts anti-adware / pups

127.0.0.1 download.cdnperformance.info # hosts anti-adware / pups

127.0.0.1 download.cdn.torchbrowser.com # hosts anti-adware / pups

127.0.0.1 do-wn-lo-ad.com # hosts anti-adware / pups

127.0.0.1 download.fr.filewin.com # hosts anti-adware / pups

127.0.0.1 download.fuzezip.com # hosts anti-adware / pups

127.0.0.1 download.ilivid.com # hosts anti-adware / pups

127.0.0.1 download.imesh.com # hosts anti-adware / pups

127.0.0.1 download.instabrain.com # hosts anti-adware / pups

127.0.0.1 download.ircfast.com # hosts anti-adware / pups

127.0.0.1 download.jzip.com # hosts anti-adware / pups

127.0.0.1 download.loipop-network.com # hosts anti-adware / pups

127.0.0.1 download.lollipop-network.com # hosts anti-adware / pups

127.0.0.1 downloadsecurise.com # hosts anti-adware / pups

127.0.0.1 download.shoptowin.net # hosts anti-adware / pups

127.0.0.1 downloads.malavida.net # hosts anti-adware / pups

127.0.0.1 downloadsoftfr.com # hosts anti-adware / pups

127.0.0.1 download.softiglu.com # hosts anti-adware / pups

127.0.0.1 download.telechargers.net # hosts anti-adware / pups

127.0.0.1 download.televisionfanatic.com # hosts anti-adware / pups

127.0.0.1 download.toggle.com # hosts anti-adware / pups

127.0.0.1 download.wajam.com # hosts anti-adware / pups

127.0.0.1 download.winds10.com # hosts anti-adware / pups

127.0.0.1 driverutilities.com # hosts anti-adware / pups

127.0.0.1 dt3j8jg8ei6zr.oudfront.net # hosts anti-adware / pups

127.0.0.1 durable.com # hosts anti-adware / pups

127.0.0.1 e446c146c2.artrardf.su # hosts anti-adware / pups

127.0.0.1 easyformulaforsuccess.org # hosts anti-adware / pups

127.0.0.1 easyfoulaforsuccess.org # hosts anti-adware / pups

127.0.0.1 ebook-generation.com # hosts anti-adware / pups

127.0.0.1 ebooks-reussite.com # hosts anti-adware / pups

127.0.0.1 eee791ae0f.iffica.waw.pl # hosts anti-adware / pups

127.0.0.1 egirlsex.com # hosts anti-adware / pups

127.0.0.1 egisex.com # hosts anti-adware / pups

127.0.0.1 elecharger.superfiles.com # hosts anti-adware / pups

127.0.0.1 enigmasoftware.com # hosts anti-adware / pups

127.0.0.1 eorezo.com # hosts anti-adware / pups

127.0.0.1 ero-odnoklassniki.info # hosts anti-adware / pups

127.0.0.1 eu.paydaycashloanadvancea2478.com # hosts anti-adware / pups

127.0.0.1 explorer-2010.com # hosts anti-adware / pups

127.0.0.1 facebookmotdepasse.blogspot.fr # hosts anti-adware / pups

127.0.0.1 facebook-piraters.blogspot.fr # hosts anti-adware / pups

127.0.0.1 facenouf.com # hosts anti-adware / pups

127.0.0.1 fafrenzyforwindows.com # hosts anti-adware / pups

127.0.0.1 farmfrenzyforwindows.com # hosts anti-adware / pups

127.0.0.1 fatihkocyigit.com.tr # hosts anti-adware / pups

127.0.0.1 fedrekpolik.org # hosts anti-adware / pups

127.0.0.1 feed.extremelyorange.com # hosts anti-adware / pups

127.0.0.1 feed.gadarnews.com # hosts anti-adware / pups

127.0.0.1 fetolbus.ru # hosts anti-adware / pups

127.0.0.1 ff.conduit-download.com # hosts anti-adware / pups

127.0.0.1 fichier1.easycommander.com # hosts anti-adware / pups

127.0.0.1 file-exactor.com # hosts anti-adware / pups

127.0.0.1 files123321.uk.to # hosts anti-adware / pups

127.0.0.1 files.download1ick.ws # hosts anti-adware / pups

127.0.0.1 files.iranapps.com # hosts anti-adware / pups

127.0.0.1 files.vaultnoir.com # hosts anti-adware / pups

127.0.0.1 find2download.fr # hosts anti-adware / pups

127.0.0.1 flexweb.getyoursoft.com # hosts anti-adware / pups

127.0.0.1 flintporn.com # hosts anti-adware / pups

127.0.0.1 flirtube.com # hosts anti-adware / pups

127.0.0.1 flvmplayer.com # hosts anti-adware / pups

127.0.0.1 flvmplayer.s3-website-us-east-1.amazonaws.com # hosts anti-adware / pups

127.0.0.1 fmccijsu.changeip.org # hosts anti-adware / pups

127.0.0.1 founeacademie.com # hosts anti-adware / pups

127.0.0.1 francais.babylon.com # hosts anti-adware / pups

127.0.0.1 fr.ask.com # hosts anti-adware / pups

127.0.0.1 freeaddons.free.fr # hosts anti-adware / pups

127.0.0.1 freecompressor.com # hosts anti-adware / pups

127.0.0.1 freecensoredvidz.org # hosts anti-adware / pups

127.0.0.1 freemomsexxx7.com # hosts anti-adware / pups

127.0.0.1 french.ircfast.com # hosts anti-adware / pups

127.0.0.1 fr.excite.eu # hosts anti-adware / pups

127.0.0.1 fr.iminent.com # hosts anti-adware / pups

127.0.0.1 fr.malavida.com # hosts anti-adware / pups

127.0.0.1 fr.phreat.com # hosts anti-adware / pups

127.0.0.1 fr.smeet.com # hosts anti-adware / pups

127.0.0.1 fr.winds10.com # hosts anti-adware / pups

127.0.0.1 ftp2solls.org # hosts anti-adware / pups

127.0.0.1 functionjs.com # hosts anti-adware / pups

127.0.0.1 functionjs.com # hosts anti-adware / pups

127.0.0.1 fupackcodecs.com # hosts anti-adware / pups

127.0.0.1 fupackvista.com # hosts anti-adware / pups

127.0.0.1 gagner-argent.blog4ever.com # hosts anti-adware / pups

127.0.0.1 gagnerargent.blog4ever.com # hosts anti-adware / pups

127.0.0.1 gagner-argent-domicile.be # hosts anti-adware / pups

127.0.0.1 gagnerargentnet.canalblog.com # hosts anti-adware / pups

127.0.0.1 gagner-de-l-argent-facile.net # hosts anti-adware / pups

127.0.0.1 gagner-de-l-argent.org # hosts anti-adware / pups

127.0.0.1 gagner-du-temps.eu # hosts anti-adware / pups

127.0.0.1 gagner-facile.net # hosts anti-adware / pups

127.0.0.1 gagner-rapidemen.ifrance.com # hosts anti-adware / pups

127.0.0.1 gagner-rapidement.ifrance.com # hosts anti-adware / pups

127.0.0.1 gains-complementaires.com # hosts anti-adware / pups

127.0.0.1 gamedue.fr # hosts anti-adware / pups

127.0.0.1 gamepoluss.eu # hosts anti-adware / pups

127.0.0.1 gamesxite.com # hosts anti-adware / pups

127.0.0.1 ganerecker.com # hosts anti-adware / pups

127.0.0.1 gapokga.com # hosts anti-adware / pups

127.0.0.1 gask.samo-project.com # hosts anti-adware / pups

127.0.0.1 gefendok.org # hosts anti-adware / pups

127.0.0.1 getfreemediaonline.com # hosts anti-adware / pups

127.0.0.1 gilikesex.com # hosts anti-adware / pups

127.0.0.1 gimp.soft32.fr # hosts anti-adware / pups

127.0.0.1 ging8.com # hosts anti-adware / pups

127.0.0.1 ginyas.com # hosts anti-adware / pups

127.0.0.1 girllikesex.com # hosts anti-adware / pups

127.0.0.1 giuna.info # hosts anti-adware / pups

127.0.0.1 glamorousgirl.net # hosts anti-adware / pups

127.0.0.1 glamorous-girls-models.net # hosts anti-adware / pups

127.0.0.1 glamorous-girls.net # hosts anti-adware / pups

127.0.0.1 glamorous-model.com # hosts anti-adware / pups

127.0.0.1 glamorousmodelsgirl.net # hosts anti-adware / pups

127.0.0.1 glamorous-models-girls.com # hosts anti-adware / pups

127.0.0.1 gogo20.cusi.fr # hosts anti-adware / pups

127.0.0.1 go.goforfiles.com # hosts anti-adware / pups

127.0.0.1 goldaa.com # hosts anti-adware / pups

127.0.0.1 gooofu.com # hosts anti-adware / pups

127.0.0.1 go.tvnoop.com # hosts anti-adware / pups

127.0.0.1 gratisporno69.info # hosts anti-adware / pups

127.0.0.1 greattubeporn.com # hosts anti-adware / pups

127.0.0.1 gudfaj.info # hosts anti-adware / pups

127.0.0.1 h4r3.hopto.org # hosts anti-adware / pups

127.0.0.1 hit.afficholder.com # hosts anti-adware / pups

127.0.0.1 hit-sex.com # hosts anti-adware / pups

127.0.0.1 hit-sex.com # hosts anti-adware / pups

127.0.0.1 homemadempegs.com # hosts anti-adware / pups

127.0.0.1 homevideonews.biz # hosts anti-adware / pups

127.0.0.1 hotandfreeporno.net # hosts anti-adware / pups

127.0.0.1 hotporngirls.com # hosts anti-adware / pups

127.0.0.1 hotporngis.com # hosts anti-adware / pups

127.0.0.1 hotxxx-gi.com # hosts anti-adware / pups

127.0.0.1 hotxxx-girl.com # hosts anti-adware / pups

127.0.0.1 hpm.tbm-ntwk.com # hosts anti-adware / pups

127.0.0.1 http://www.telecharger.org # hosts anti-adware / pups

127.0.0.1 icargent.com # hosts anti-adware / pups

127.0.0.1 ic.illyx.com # hosts anti-adware / pups

127.0.0.1 ie.conduit-download.com # hosts anti-adware / pups

127.0.0.1 ie.dealply.com # hosts anti-adware / pups

127.0.0.1 igvau.fr # hosts anti-adware / pups

127.0.0.1 imesh.com # hosts anti-adware / pups

127.0.0.1 img.planetsappho.net # hosts anti-adware / pups

127.0.0.1 imvux.com # hosts anti-adware / pups

127.0.0.1 index.myftp.org # hosts anti-adware / pups

127.0.0.1 insta2.optimum-installer.com # hosts anti-adware / pups

127.0.0.1 insta.blamcity.com # hosts anti-adware / pups

127.0.0.1 instaer.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 instaer.filebulldog.com # hosts anti-adware / pups

127.0.0.1 insta.iminent.com # hosts anti-adware / pups

127.0.0.1 installer.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 installer.filebulldog.com # hosts anti-adware / pups

127.0.0.1 installertechcontent.com # hosts anti-adware / pups

127.0.0.1 install.outbrowse.com # hosts anti-adware / pups

127.0.0.1 insta.optimum-installer.com # hosts anti-adware / pups

127.0.0.1 insta.optimuminstaller.com # hosts anti-adware / pups

127.0.0.1 institut-dulac.com # hosts anti-adware / pups

127.0.0.1 interdescargas.com # hosts anti-adware / pups

127.0.0.1 iogiciel.com # hosts anti-adware / pups

127.0.0.1 ip.freepiv.net # hosts anti-adware / pups

127.0.0.1 iyx.co # hosts anti-adware / pups

127.0.0.1 jdownloader.org # hosts anti-adware / pups

127.0.0.1 jeboost.com # hosts anti-adware / pups

127.0.0.1 je-mange-et-je-maigris.com # hosts anti-adware / pups

127.0.0.1 jlyxe.changeip.name # hosts anti-adware / pups

127.0.0.1 jscontent.com # hosts anti-adware / pups

127.0.0.1 jshref.com # hosts anti-adware / pups

127.0.0.1 jsmeta.com # hosts anti-adware / pups

127.0.0.1 kiyure.com # hosts anti-adware / pups

127.0.0.1 koyotstar.free.fr # hosts anti-adware / pups

127.0.0.1 krupse.info # hosts anti-adware / pups

127.0.0.1 kuyqen.info # hosts anti-adware / pups

127.0.0.1 landing.etype.com # hosts anti-adware / pups

127.0.0.1 lcstatx.dallasdroidapps.com # hosts anti-adware / pups

127.0.0.1 lecoindesinsiders.com # hosts anti-adware / pups

127.0.0.1 le-dire.tv # hosts anti-adware / pups

127.0.0.1 lerwik.info # hosts anti-adware / pups

127.0.0.1 lesexgir.com # hosts anti-adware / pups

127.0.0.1 lestutoriels-enarchives.com # hosts anti-adware / pups

127.0.0.1 lesvirus.fr # hosts anti-adware / pups

127.0.0.1 linkfixerplus.com # hosts anti-adware / pups

127.0.0.1 linkmeee.com # hosts anti-adware / pups

127.0.0.1 lishros.info # hosts anti-adware / pups

127.0.0.1 live-casino-online.org # hosts anti-adware / pups

127.0.0.1 live-sex-x.com # hosts anti-adware / pups

127.0.0.1 load.keygendb.net # hosts anti-adware / pups

127.0.0.1 load.scanscout.com # hosts anti-adware / pups

127.0.0.1 logi-secure.eu # hosts anti-adware / pups

127.0.0.1 lollipoporno.org # hosts anti-adware / pups

127.0.0.1 lp.ick2saveapp.com # hosts anti-adware / pups

127.0.0.1 lp.ilivid.com # hosts anti-adware / pups

127.0.0.1 lp.imesh.com # hosts anti-adware / pups

127.0.0.1 lp.sweetim.com # hosts anti-adware / pups

127.0.0.1 lp.torchbrowser.com # hosts anti-adware / pups

127.0.0.1 lsdgroupg.com # hosts anti-adware / pups

127.0.0.1 luda9wmsiteza.eu # hosts anti-adware / pups

127.0.0.1 lunarnewyearhouston.com # hosts anti-adware / pups

127.0.0.1 lyotir.info # hosts anti-adware / pups

127.0.0.1 maosvonring.net # hosts anti-adware / pups

127.0.0.1 maprado.com # hosts anti-adware / pups

127.0.0.1 mariavoyance.com # hosts anti-adware / pups

127.0.0.1 mariins.com # hosts anti-adware / pups

127.0.0.1 matureagent.com # hosts anti-adware / pups

127.0.0.1 matureboytubes.com # hosts anti-adware / pups

127.0.0.1 maturepornxtube.com # hosts anti-adware / pups

127.0.0.1 max-adult-tube.com # hosts anti-adware / pups

127.0.0.1 max-adu-tube.com # hosts anti-adware / pups

127.0.0.1 media-app.com # hosts anti-adware / pups

127.0.0.1 media.comesvita.com.es # hosts anti-adware / pups

127.0.0.1 mediaplayer-codecpack.com # hosts anti-adware / pups

127.0.0.1 media-player-helper.com # hosts anti-adware / pups

127.0.0.1 media.pussycash.com # hosts anti-adware / pups

127.0.0.1 medicumnnova.eu # hosts anti-adware / pups

127.0.0.1 medvenerologsz.eu # hosts anti-adware / pups

127.0.0.1 meetandlovesz.eu # hosts anti-adware / pups

127.0.0.1 mega-cool-bonus.org # hosts anti-adware / pups

127.0.0.1 megoads.eu # hosts anti-adware / pups

127.0.0.1 messenger.descargar.es # hosts anti-adware / pups

127.0.0.1 methode-cash.com # hosts anti-adware / pups

127.0.0.1 methodegagnante.com # hosts anti-adware / pups

127.0.0.1 mfd.malavida.com # hosts anti-adware / pups

127.0.0.1 mflashplayer.com # hosts anti-adware / pups

127.0.0.1 mfzplecp.changeip.name # hosts anti-adware / pups

127.0.0.1 milfscunt.com # hosts anti-adware / pups

127.0.0.1 mires.eorezo.com # hosts anti-adware / pups

127.0.0.1 mirfr.eorezo.com # hosts anti-adware / pups

127.0.0.1 mn.babcdn.com # hosts anti-adware / pups

127.0.0.1 moneywin24.biz # hosts anti-adware / pups

127.0.0.1 monij.info # hosts anti-adware / pups

127.0.0.1 muibar.me # hosts anti-adware / pups

127.0.0.1 mysexpalace.com # hosts anti-adware / pups

127.0.0.1 need4video.com # hosts anti-adware / pups

127.0.0.1 neo-bux.fr # hosts anti-adware / pups

127.0.0.1 new-2011.net # hosts anti-adware / pups

127.0.0.1 new-2012.net # hosts anti-adware / pups

127.0.0.1 new-club-casino.org # hosts anti-adware / pups

127.0.0.1 newt7.aduadworld.com # hosts anti-adware / pups

127.0.0.1 new-windows7.com # hosts anti-adware / pups

127.0.0.1 nocghnr.changeip.org # hosts anti-adware / pups

127.0.0.1 nomeraodessas.eu # hosts anti-adware / pups

127.0.0.1 nopebivernmss.eu # hosts anti-adware / pups

127.0.0.1 noproblemss.eu # hosts anti-adware / pups

127.0.0.1 nude-passion.com # hosts anti-adware / pups

127.0.0.1 obdurp.info # hosts anti-adware / pups

127.0.0.1 offagnopz.changeip.name # hosts anti-adware / pups

127.0.0.1 offers.avazuscd.net # hosts anti-adware / pups

127.0.0.1 offre-surprise.com # hosts anti-adware / pups

127.0.0.1 ogpal.com # hosts anti-adware / pups

127.0.0.1 ojan-killer.net # hosts anti-adware / pups

127.0.0.1 onedownloadspot.com # hosts anti-adware / pups

127.0.0.1 opalki.info # hosts anti-adware / pups

127.0.0.1 opasi.com # hosts anti-adware / pups

127.0.0.1 osbasedreceiva.pl # hosts anti-adware / pups

127.0.0.1 os.coolvideoconverter.com # hosts anti-adware / pups

127.0.0.1 oud4pc.com # hosts anti-adware / pups

127.0.0.1 out.popads.net # hosts anti-adware / pups

127.0.0.1 pageerror-download.com # hosts anti-adware / pups

127.0.0.1 pair.homecomputerrepair.ca # hosts anti-adware / pups

127.0.0.1 pcpitstop.com # hosts anti-adware / pups

127.0.0.1 pctuto.com # hosts anti-adware / pups

127.0.0.1 pdf-reader-eator.com # hosts anti-adware / pups

127.0.0.1 phprocket.net # hosts anti-adware / pups

127.0.0.1 phytolabel.com # hosts anti-adware / pups

127.0.0.1 phytolabel.fr # hosts anti-adware / pups

127.0.0.1 pikkolorgy.org # hosts anti-adware / pups

127.0.0.1 pio-data2.info # hosts anti-adware / pups

127.0.0.1 planscools.fr # hosts anti-adware / pups

127.0.0.1 playgil.org # hosts anti-adware / pups

127.0.0.1 plugnrex.info # hosts anti-adware / pups

127.0.0.1 plusrichedemain.fr # hosts anti-adware / pups

127.0.0.1 pnads.com # hosts anti-adware / pups

127.0.0.1 pognonfacile.com # hosts anti-adware / pups

127.0.0.1 p.online-hd.tv # hosts anti-adware / pups

127.0.0.1 popander.mobi # hosts anti-adware / pups

127.0.0.1 pornoinpark.net # hosts anti-adware / pups

127.0.0.1 pornoow.com # hosts anti-adware / pups

127.0.0.1 pornotube.grangnp.com # hosts anti-adware / pups

127.0.0.1 promoution231.ru # hosts anti-adware / pups

127.0.0.1 promo.vador.com # hosts anti-adware / pups

127.0.0.1 proteorlb-1556088852.us-east-1.elb.amazonaws.com # hosts anti-adware / pups

127.0.0.1 pu.plugrush.com # hosts anti-adware / pups

127.0.0.1 purebot2.sytes.net # hosts anti-adware / pups

127.0.0.1 push.ping.com # hosts anti-adware / pups

127.0.0.1 puto.com # hosts anti-adware / pups

127.0.0.1 qiweol.info # hosts anti-adware / pups

127.0.0.1 quad-anti-spyware.com # hosts anti-adware / pups

127.0.0.1 quad-eaner.com # hosts anti-adware / pups

127.0.0.1 quadriviuma.eu # hosts anti-adware / pups

127.0.0.1 qualityhqporn.com # hosts anti-adware / pups

127.0.0.1 quegeek.com # hosts anti-adware / pups

127.0.0.1 qumxav.changeip.name # hosts anti-adware / pups

127.0.0.1 qwe.goforfiles.com # hosts anti-adware / pups

127.0.0.1 real-boardsz.eu # hosts anti-adware / pups

127.0.0.1 real-cenesz.eu # hosts anti-adware / pups

127.0.0.1 real-centresz.eu # hosts anti-adware / pups

127.0.0.1 redir.ballysbs.com # hosts anti-adware / pups

127.0.0.1 redirect.ad-feeds.net # hosts anti-adware / pups

127.0.0.1 reedomparty.com # hosts anti-adware / pups

127.0.0.1 reedompay.com # hosts anti-adware / pups

127.0.0.1 regarder-tv.com # hosts anti-adware / pups

127.0.0.1 regisybooster2010.fr # hosts anti-adware / pups

127.0.0.1 regisyonwindows.com # hosts anti-adware / pups

127.0.0.1 regisywinner.com # hosts anti-adware / pups

127.0.0.1 reimage.com # hosts anti-adware / pups

127.0.0.1 repair-my-pc.info # hosts anti-adware / pups

127.0.0.1 repair-pc-eors.info # hosts anti-adware / pups

127.0.0.1 repare-internet-explorer.com # hosts anti-adware / pups

127.0.0.1 reparer-windowsvista.com # hosts anti-adware / pups

127.0.0.1 reparer-windowsxp.com # hosts anti-adware / pups

127.0.0.1 reparez-internet-explorer.com # hosts anti-adware / pups

127.0.0.1 reparez-windows.com # hosts anti-adware / pups

127.0.0.1 reparez-windows.info # hosts anti-adware / pups

127.0.0.1 reparez-windows-vista.com # hosts anti-adware / pups

127.0.0.1 reparez-windows-xp.com # hosts anti-adware / pups

127.0.0.1 rester-anquile.com # hosts anti-adware / pups

127.0.0.1 reussiteaffiliation.com # hosts anti-adware / pups

127.0.0.1 rezinovsap.co.cc # hosts anti-adware / pups

127.0.0.1 rezinovsap.co. # hosts anti-adware / pups

127.0.0.1 ron.protectorwide.asia # hosts anti-adware / pups

127.0.0.1 rpc.hitexchangeserver.com # hosts anti-adware / pups

127.0.0.1 rp.funmoodscdn.com # hosts anti-adware / pups

127.0.0.1 rp.telechargercdn.com # hosts anti-adware / pups

127.0.0.1 rztube.com # hosts anti-adware / pups

127.0.0.1 s58036.gridserver.com # hosts anti-adware / pups

127.0.0.1 samcro.fr # hosts anti-adware / pups

127.0.0.1 satch2cash.com # hosts anti-adware / pups

127.0.0.1 scache.regiedepub.com # hosts anti-adware / pups

127.0.0.1 scriptsname.com # hosts anti-adware / pups

127.0.0.1 sdgsdgsdg.at.tf # hosts anti-adware / pups

127.0.0.1 search.babylon.com # hosts anti-adware / pups

127.0.0.1 searchqu.com # hosts anti-adware / pups

127.0.0.1 sec-france.info # hosts anti-adware / pups

127.0.0.1 securelinkdownload.com # hosts anti-adware / pups

127.0.0.1 securisedownload.com # hosts anti-adware / pups

127.0.0.1 seet-internet.com # hosts anti-adware / pups

127.0.0.1 semsols123.comodo.revenuewire.net # hosts anti-adware / pups

127.0.0.1 semsols123.comodo.safeca.com # hosts anti-adware / pups

127.0.0.1 servicemap.conduit-services.com # hosts anti-adware / pups

127.0.0.1 service.yontoo.com # hosts anti-adware / pups

127.0.0.1 serw2.chujon.info # hosts anti-adware / pups

127.0.0.1 serw.icksor.com # hosts anti-adware / pups

127.0.0.1 serw.lunjli.info # hosts anti-adware / pups

127.0.0.1 serw.schworis.com # hosts anti-adware / pups

127.0.0.1 setup2.iminent.com # hosts anti-adware / pups

127.0.0.1 sexanaltube.com # hosts anti-adware / pups

127.0.0.1 sex-here.com # hosts anti-adware / pups

127.0.0.1 sex-lites.com # hosts anti-adware / pups

127.0.0.1 sexopartynow.biz # hosts anti-adware / pups

127.0.0.1 sexsweetie.com # hosts anti-adware / pups

127.0.0.1 sexvamnet.com # hosts anti-adware / pups

127.0.0.1 sexvideofile.com # hosts anti-adware / pups

127.0.0.1 sexvideomix.biz # hosts anti-adware / pups

127.0.0.1 sexwetgirls.com # hosts anti-adware / pups

127.0.0.1 sexwetgis.com # hosts anti-adware / pups

127.0.0.1 sexwu.com # hosts anti-adware / pups

127.0.0.1 sexycats18yearme.com # hosts anti-adware / pups

127.0.0.1 sexysatan.com # hosts anti-adware / pups

127.0.0.1 sexywally.com # hosts anti-adware / pups

127.0.0.1 sexyway.com # hosts anti-adware / pups

127.0.0.1 siterusza.eu # hosts anti-adware / pups

127.0.0.1 skype.telecharger-france.com # hosts anti-adware / pups

127.0.0.1 slotonlinecasino.org # hosts anti-adware / pups

127.0.0.1 sms-rostovs.eu # hosts anti-adware / pups

127.0.0.1 socialmediahelpme.info # hosts anti-adware / pups

127.0.0.1 soft-2011.com # hosts anti-adware / pups

127.0.0.1 soft2pcfr.com # hosts anti-adware / pups

127.0.0.1 soft4click.com # hosts anti-adware / pups

127.0.0.1 soft.foxtab.com # hosts anti-adware / pups

127.0.0.1 softgratuit.com # hosts anti-adware / pups

127.0.0.1 softigloo.com # hosts anti-adware / pups

127.0.0.1 softingo.com # hosts anti-adware / pups

127.0.0.1 softmor.org # hosts anti-adware / pups

127.0.0.1 soft.tc # hosts anti-adware / pups

127.0.0.1 soft.telecharger.com # hosts anti-adware / pups

127.0.0.1 software.cdnredire01.info # hosts anti-adware / pups

127.0.0.1 softwareprovisioning.com # hosts anti-adware / pups

127.0.0.1 softwares.the-ad.net # hosts anti-adware / pups

127.0.0.1 software.the-ad.net # hosts anti-adware / pups

127.0.0.1 solutionsmiions.com # hosts anti-adware / pups

127.0.0.1 sondages-remuneres.net # hosts anti-adware / pups

127.0.0.1 spamfighter.com # hosts anti-adware / pups

127.0.0.1 speedmaxpc.com # hosts anti-adware / pups

127.0.0.1 spoau.com # hosts anti-adware / pups

127.0.0.1 spybotseah-full.info # hosts anti-adware / pups

127.0.0.1 spynomore.com # hosts anti-adware / pups

127.0.0.1 spywareremove.com # hosts anti-adware / pups

127.0.0.1 static.bicdn.com # hosts anti-adware / pups

127.0.0.1 static.v2.madodls.com # hosts anti-adware / pups

127.0.0.1 step.yourfiledownloader.com # hosts anti-adware / pups

127.0.0.1 storage.conduit.com # hosts anti-adware / pups

127.0.0.1 storagenl.info # hosts anti-adware / pups

127.0.0.1 stp.babylon.com # hosts anti-adware / pups

127.0.0.1 stream-actu.com # hosts anti-adware / pups

127.0.0.1 streaming-direct.tv # hosts anti-adware / pups

127.0.0.1 streaming-vlc.com # hosts anti-adware / pups

127.0.0.1 suesliberte.net # hosts anti-adware / pups

127.0.0.1 suppo0070.homelinux.com # hosts anti-adware / pups

127.0.0.1 suppo211.dnsalias.com # hosts anti-adware / pups

127.0.0.1 suppo533333.homelinux.net # hosts anti-adware / pups

127.0.0.1 suppo8881.homelinux.com # hosts anti-adware / pups

127.0.0.1 support0070.homelinux.com # hosts anti-adware / pups

127.0.0.1 support211.dnsalias.com # hosts anti-adware / pups

127.0.0.1 support533333.homelinux.net # hosts anti-adware / pups

127.0.0.1 support8881.homelinux.com # hosts anti-adware / pups

127.0.0.1 supprimeevirus.blogspot.com # hosts anti-adware / pups

127.0.0.1 supprimeevirus.blogspot.fr # hosts anti-adware / pups

127.0.0.1 supprimer-spyware.com # hosts anti-adware / pups

127.0.0.1 sweethoneysexbaby.com # hosts anti-adware / pups

127.0.0.1 swetkittyxxx.biz # hosts anti-adware / pups

127.0.0.1 sybiedejanville.com # hosts anti-adware / pups

127.0.0.1 tarhankyte.info # hosts anti-adware / pups

127.0.0.1 telecharger-0.driverutilities.com # hosts anti-adware / pups

127.0.0.1 telecharger-2012.com # hosts anti-adware / pups

127.0.0.1 telecharger-gratuit.com # hosts anti-adware / pups

127.0.0.1 telecharger.logiciel.net # hosts anti-adware / pups

127.0.0.1 tele-charger.org # hosts anti-adware / pups

127.0.0.1 telecharger.toggle.com # hosts anti-adware / pups

127.0.0.1 test.auvixa.com # hosts anti-adware / pups

127.0.0.1 test.rooferslongislandroofing.com # hosts anti-adware / pups

127.0.0.1 the0606.com # hosts anti-adware / pups

127.0.0.1 thebestonlinecasino.org # hosts anti-adware / pups

127.0.0.1 theparadiseisland.net # hosts anti-adware / pups

127.0.0.1 tioblipla.com # hosts anti-adware / pups

127.0.0.1 todownloadcdn.com # hosts anti-adware / pups

127.0.0.1 top-2011.com # hosts anti-adware / pups

127.0.0.1 top-2012.com # hosts anti-adware / pups

127.0.0.1 top-regisy-cleaner.net # hosts anti-adware / pups

127.0.0.1 totaediaconverter-u.com # hosts anti-adware / pups

127.0.0.1 totalmediaconverter-u.com # hosts anti-adware / pups

127.0.0.1 totalmediaconverter-u.com # hosts anti-adware / pups

127.0.0.1 trackstatsnow.com # hosts anti-adware / pups

127.0.0.1 tradeartss.eu # hosts anti-adware / pups

127.0.0.1 trafficadward.homelinux.com # hosts anti-adware / pups

127.0.0.1 truitow.info # hosts anti-adware / pups

127.0.0.1 tube4free.zorfu.com # hosts anti-adware / pups

127.0.0.1 tuheyds.changeip.name # hosts anti-adware / pups

127.0.0.1 tuto4pc.com # hosts anti-adware / pups

127.0.0.1 tutoriales100.com # hosts anti-adware / pups

127.0.0.1 tv-dire.fr # hosts anti-adware / pups

127.0.0.1 tviexpress-france.com # hosts anti-adware / pups

127.0.0.1 tvuzz.com # hosts anti-adware / pups

127.0.0.1 tweaks-soft.com # hosts anti-adware / pups

127.0.0.1 ub-positif.com # hosts anti-adware / pups

127.0.0.1 ude.conduit-data.com # hosts anti-adware / pups

127.0.0.1 uitow.info # hosts anti-adware / pups

127.0.0.1 uniblue.com # hosts anti-adware / pups

127.0.0.1 universal-downloader.en.softonic.com # hosts anti-adware / pups

127.0.0.1 universal-downloader.softonic.fr # hosts anti-adware / pups

127.0.0.1 up.lollipop-network.com # hosts anti-adware / pups

127.0.0.1 uprsimy.changeip.org # hosts anti-adware / pups

127.0.0.1 usage.toolbar.conduit-services.com # hosts anti-adware / pups

127.0.0.1 us.mambasextube.com # hosts anti-adware / pups

127.0.0.1 us-vegascasino.org # hosts anti-adware / pups

127.0.0.1 utoent-net.info # hosts anti-adware / pups

127.0.0.1 utorrent.portalux.com # hosts anti-adware / pups

127.0.0.1 uwjem.info # hosts anti-adware / pups

127.0.0.1 vatsonandson.uk.to # hosts anti-adware / pups

127.0.0.1 vechernieb.co.cc # hosts anti-adware / pups

127.0.0.1 vechernieb.co. # hosts anti-adware / pups

127.0.0.1 version.etype.com # hosts anti-adware / pups

127.0.0.1 viccpm03.victoryproads.com # hosts anti-adware / pups

127.0.0.1 viccpm08.victoryproads.com # hosts anti-adware / pups

127.0.0.1 viccpm08.victoryproads.com # hosts anti-adware / pups

127.0.0.1 videodirectory9.info # hosts anti-adware / pups

127.0.0.1 videodownloadconveer.com # hosts anti-adware / pups

127.0.0.1 videofer.us # hosts anti-adware / pups

127.0.0.1 vipm03.victoryproads.com # hosts anti-adware / pups

127.0.0.1 vipm08.victoryproads.com # hosts anti-adware / pups

127.0.0.1 virbanks.com # hosts anti-adware / pups

127.0.0.1 visicommedia.com # hosts anti-adware / pups

127.0.0.1 vistacodec-2010.com # hosts anti-adware / pups

127.0.0.1 vizihq.info # hosts anti-adware / pups

127.0.0.1 vlc.load4free.net # hosts anti-adware / pups

127.0.0.1 voe-travail-a-domicile.com # hosts anti-adware / pups

127.0.0.1 vos-revenus-sur-internet.com # hosts anti-adware / pups

127.0.0.1 vsharetv.ouoolbar.com # hosts anti-adware / pups

127.0.0.1 wa2go.com # hosts anti-adware / pups

127.0.0.1 want.suck-my-candy.com # hosts anti-adware / pups

127.0.0.1 webplayerddl.com # hosts anti-adware / pups

127.0.0.1 webplayer.tv # hosts anti-adware / pups

127.0.0.1 wefightbadware.org # hosts anti-adware / pups

127.0.0.1 westopmalware.org # hosts anti-adware / pups

127.0.0.1 widgets.wizebar.com # hosts anti-adware / pups

127.0.0.1 wildmedianetwork.com # hosts anti-adware / pups

127.0.0.1 win1.winsprodco.info # hosts anti-adware / pups

127.0.0.1 wincr1.winsprodco.info # hosts anti-adware / pups

127.0.0.1 winpoal.fr # hosts anti-adware / pups

127.0.0.1 winskeat.fr # hosts anti-adware / pups

127.0.0.1 winzip-fu.net # hosts anti-adware / pups

127.0.0.1 wiseconve.com # hosts anti-adware / pups

127.0.0.1 wiseconvert15.greattoolbars.com # hosts anti-adware / pups

127.0.0.1 wiseconvert.com # hosts anti-adware / pups

127.0.0.1 wlroxe.changeip.name # hosts anti-adware / pups

127.0.0.1 wtseleions.com # hosts anti-adware / pups

127.0.0.1 www.01-telecharger.com # hosts anti-adware / pups

127.0.0.1 www.123mplayer.com # hosts anti-adware / pups

127.0.0.1 www.2012-plus.org # hosts anti-adware / pups

127.0.0.1 www.2607.cn # hosts anti-adware / pups

127.0.0.1 www2l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www.2-spyware.com # hosts anti-adware / pups

127.0.0.1 www3l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www.411-spyware.com # hosts anti-adware / pups

127.0.0.1 www4l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www5l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www.80worldnewstoday.info # hosts anti-adware / pups

127.0.0.1 www.ackdlstat.com # hosts anti-adware / pups

127.0.0.1 www.ackinn.com # hosts anti-adware / pups

127.0.0.1 www.acksguru.com # hosts anti-adware / pups

127.0.0.1 www.affiliation-france.com # hosts anti-adware / pups

127.0.0.1 www.affpx.com # hosts anti-adware / pups

127.0.0.1 www.agence-exusive.com # hosts anti-adware / pups

127.0.0.1 www.alcoporn.com # hosts anti-adware / pups

127.0.0.1 www.alterporn.com # hosts anti-adware / pups

127.0.0.1 www.americanpendulum.com # hosts anti-adware / pups

127.0.0.1 www.amonetizeinstaller.com # hosts anti-adware / pups

127.0.0.1 www.anti-spyware-101.com # hosts anti-adware / pups

127.0.0.1 www.anvisoft.com # hosts anti-adware / pups

127.0.0.1 www.aoporn.com # hosts anti-adware / pups

127.0.0.1 www.appround.biz # hosts anti-adware / pups

127.0.0.1 www.appround.net # hosts anti-adware / pups

127.0.0.1 www.asoftwareplus.com # hosts anti-adware / pups

127.0.0.1 www.assure-le.com # hosts anti-adware / pups

127.0.0.1 www.babesandgirls.com # hosts anti-adware / pups

127.0.0.1 www.babylon.com # hosts anti-adware / pups

127.0.0.1 www.bigspeedpro.com # hosts anti-adware / pups

127.0.0.1 www.bioartmed.com # hosts anti-adware / pups

127.0.0.1 www.bit89.com # hosts anti-adware / pups

127.0.0.1 www.bit-mania.com # hosts anti-adware / pups

127.0.0.1 www.boxore.com # hosts anti-adware / pups

127.0.0.1 www.byteseeder.com # hosts anti-adware / pups

127.0.0.1 www.chehe.us # hosts anti-adware / pups

127.0.0.1 www.cloud4widget.com # hosts anti-adware / pups

127.0.0.1 www.cojan13fast.com # hosts anti-adware / pups

127.0.0.1 www.cool-applications.com # hosts anti-adware / pups

127.0.0.1 www.coupon-miner.com # hosts anti-adware / pups

127.0.0.1 www.createstockdoingzero.biz # hosts anti-adware / pups

127.0.0.1 www.cyberfitex.com # hosts anti-adware / pups

127.0.0.1 www.danager.net # hosts anti-adware / pups

127.0.0.1 www.dataatimeast.com # hosts anti-adware / pups

127.0.0.1 www.deletevirus.net # hosts anti-adware / pups

127.0.0.1 www.dlsafebrowse.com # hosts anti-adware / pups

127.0.0.1 www.dmralumni.com # hosts anti-adware / pups

127.0.0.1 www.downlesoft.com # hosts anti-adware / pups

127.0.0.1 www.download-best-softwares.com # hosts anti-adware / pups

127.0.0.1 www.download-free.com # hosts anti-adware / pups

127.0.0.1 www.downloadsoftfr.com # hosts anti-adware / pups

127.0.0.1 www.downxsoft.com # hosts anti-adware / pups

127.0.0.1 www.downxsoft.com # hosts anti-adware / pups

127.0.0.1 www.drawingincests.com # hosts anti-adware / pups

127.0.0.1 www.eanallvirus.com # hosts anti-adware / pups

127.0.0.1 www.easycuisinevideo.com # hosts anti-adware / pups

127.0.0.1 www.easy-money-making-idea.info # hosts anti-adware / pups

127.0.0.1 www.e-downloader.net # hosts anti-adware / pups

127.0.0.1 www.enigmasoftware.com # hosts anti-adware / pups

127.0.0.1 www.eorezo.com # hosts anti-adware / pups

127.0.0.1 www.ericmok.ca # hosts anti-adware / pups

127.0.0.1 www.eximdownloadmanager.com # hosts anti-adware / pups

127.0.0.1 www.extreme-down.com # hosts anti-adware / pups

127.0.0.1 www.extrimdownloadmanager.com # hosts anti-adware / pups

127.0.0.1 www.fasterpleanclean.com # hosts anti-adware / pups

127.0.0.1 www.fcgoatcalear.us # hosts anti-adware / pups

127.0.0.1 www.fixie.com # hosts anti-adware / pups

127.0.0.1 www.flash-player-france.com # hosts anti-adware / pups

127.0.0.1 www.freeamateulub.org # hosts anti-adware / pups

127.0.0.1 www.freeamateurclub.org # hosts anti-adware / pups

127.0.0.1 www.freetadio.com # hosts anti-adware / pups

127.0.0.1 www.frflashplayer.com # hosts anti-adware / pups

127.0.0.1 www.getdatafromeast.com # hosts anti-adware / pups

127.0.0.1 www.getyoursoft.com # hosts anti-adware / pups

127.0.0.1 www.girlsfriendxxx.net # hosts anti-adware / pups

127.0.0.1 www.gisfriendxxx.net # hosts anti-adware / pups

127.0.0.1 www.globe7.com # hosts anti-adware / pups

127.0.0.1 www.gogetmoneynow.com # hosts anti-adware / pups

127.0.0.1 www.gpil.org # hosts anti-adware / pups

127.0.0.1 www.grabatimstat.us # hosts anti-adware / pups

127.0.0.1 www.grandwesternliquors.com # hosts anti-adware / pups

127.0.0.1 www.gratuit-telecharger.com # hosts anti-adware / pups

127.0.0.1 www.haycfld.us # hosts anti-adware / pups

127.0.0.1 www.haycfld.us/htmlscreens # hosts anti-adware / pups

127.0.0.1 www.herz-fuer-musik.de # hosts anti-adware / pups

127.0.0.1 www.homepa.ge # hosts anti-adware / pups

127.0.0.1 www.hubbywatcheswife.biz # hosts anti-adware / pups

127.0.0.1 www.ilivid.com # hosts anti-adware / pups

127.0.0.1 www.instatrk.com # hosts anti-adware / pups

127.0.0.1 www.kerasos.co # hosts anti-adware / pups

127.0.0.1 www.kerion.pt # hosts anti-adware / pups

127.0.0.1 www.keygendb.com # hosts anti-adware / pups

127.0.0.1 www.kiallvirus.com # hosts anti-adware / pups

127.0.0.1 www.koyotesoft.com # hosts anti-adware / pups

127.0.0.1 www.lavideobuzz.com # hosts anti-adware / pups

127.0.0.1 www.livecamsxxxnow.com # hosts anti-adware / pups

127.0.0.1 www.mature-vulva.org # hosts anti-adware / pups

127.0.0.1 www.media-app.com # hosts anti-adware / pups

127.0.0.1 www.messengerdusexe.com # hosts anti-adware / pups

127.0.0.1 www.messyxxxtube.biz # hosts anti-adware / pups

127.0.0.1 www.messyxxxtube.biz # hosts anti-adware / pups

127.0.0.1 www.mickyfastdl.com # hosts anti-adware / pups

127.0.0.1 www.milfbeach.net # hosts anti-adware / pups

127.0.0.1 www.milkiwaytuber.com # hosts anti-adware / pups

127.0.0.1 www.mljanthrunorth.us # hosts anti-adware / pups

127.0.0.1 www.moviehuts.com # hosts anti-adware / pups

127.0.0.1 www.moviewodsite.com # hosts anti-adware / pups

127.0.0.1 www.mspyapps.com # hosts anti-adware / pups

127.0.0.1 www.mspylogs.com # hosts anti-adware / pups

127.0.0.1 www.mybestpenis.com # hosts anti-adware / pups

127.0.0.1 www.mypussygirls.com # hosts anti-adware / pups

127.0.0.1 www.mypussygis.com # hosts anti-adware / pups

127.0.0.1 www.mysexysister.biz # hosts anti-adware / pups

127.0.0.1 www.nbconsuing.nl # hosts anti-adware / pups

127.0.0.1 www.nbconsulting.nl # hosts anti-adware / pups

127.0.0.1 www.neoyersonpc.org # hosts anti-adware / pups

127.0.0.1 www.nlstorage.info # hosts anti-adware / pups

127.0.0.1 www.nouveau-avast.com # hosts anti-adware / pups

127.0.0.1 www.officialvideoconverter.com # hosts anti-adware / pups

127.0.0.1 www.oldmo.org # hosts anti-adware / pups

127.0.0.1 www.openadserving.com # hosts anti-adware / pups

127.0.0.1 www.piraterfacebook.ws # hosts anti-adware / pups

127.0.0.1 www.pisk.com # hosts anti-adware / pups

127.0.0.1 www.playerplus.com # hosts anti-adware / pups

127.0.0.1 www.pornuv.net # hosts anti-adware / pups

127.0.0.1 www.powerpackdl.com # hosts anti-adware / pups

127.0.0.1 www.premiumdownload.org # hosts anti-adware / pups

127.0.0.1 www.putlocker-downloader.com # hosts anti-adware / pups

127.0.0.1 www.puto.com # hosts anti-adware / pups

127.0.0.1 www.reallycoolapp.com # hosts anti-adware / pups

127.0.0.1 www.realtinypussy.org # hosts anti-adware / pups

127.0.0.1 www.rediremylink.com # hosts anti-adware / pups

127.0.0.1 www.removeonline.com # hosts anti-adware / pups

127.0.0.1 www.retrogamer.com # hosts anti-adware / pups

127.0.0.1 www.sckarteast.us # hosts anti-adware / pups

127.0.0.1 www.sendfilesapp.com # hosts anti-adware / pups

127.0.0.1 www.sexoss.net # hosts anti-adware / pups

127.0.0.1 www.silentpornotube.com # hosts anti-adware / pups

127.0.0.1 www.smuss.net # hosts anti-adware / pups

127.0.0.1 www.softesdown.com # hosts anti-adware / pups

127.0.0.1 www.softologic.com # hosts anti-adware / pups

127.0.0.1 www.softologicsc.com # hosts anti-adware / pups

127.0.0.1 www.software-files.net # hosts anti-adware / pups

127.0.0.1 www.softwaresbay.com # hosts anti-adware / pups

127.0.0.1 www.speedypc.com # hosts anti-adware / pups

127.0.0.1 www.sps-experten.de # hosts anti-adware / pups

127.0.0.1 www.spywarehelpcenter.com # hosts anti-adware / pups

127.0.0.1 www.spywarehelpcenter.com # hosts anti-adware / pups

127.0.0.1 www.spywareremove.com # hosts anti-adware / pups

127.0.0.1 www.streaminghds.com # hosts anti-adware / pups

127.0.0.1 www.supprimer-spyware.org # hosts anti-adware / pups

127.0.0.1 www.telecharger-facile.com # hosts anti-adware / pups

127.0.0.1 www.telechargers.net # hosts anti-adware / pups

127.0.0.1 www.thelivetech.com # hosts anti-adware / pups

127.0.0.1 www.tiptopsoft.org # hosts anti-adware / pups

127.0.0.1 www.toplugs.com # hosts anti-adware / pups

127.0.0.1 www.tuto4pc.com # hosts anti-adware / pups

127.0.0.1 www.uniblue.com # hosts anti-adware / pups

127.0.0.1 www.videoconveertool.net # hosts anti-adware / pups

127.0.0.1 www.videodownloadconverter.com # hosts anti-adware / pups

127.0.0.1 www.videoipa.com # hosts anti-adware / pups

127.0.0.1 www.videoplusmusic.com # hosts anti-adware / pups

127.0.0.1 www.vioplayer.com # hosts anti-adware / pups

127.0.0.1 www.viuagirl.com # hosts anti-adware / pups

127.0.0.1 www.wajam.com # hosts anti-adware / pups

127.0.0.1 www.wiki-security.com # hosts anti-adware / pups

127.0.0.1 www.windownloader24.com # hosts anti-adware / pups

127.0.0.1 www.winload.de # hosts anti-adware / pups

127.0.0.1 www.winpoal.fr # hosts anti-adware / pups

127.0.0.1 www.wisedownloads.com # hosts anti-adware / pups

127.0.0.1 www.wslinx.com # hosts anti-adware / pups

127.0.0.1 www.xlplayer.com # hosts anti-adware / pups

127.0.0.1 xmlinsp.ddbbvt.eu # hosts anti-adware / pups

127.0.0.1 xmlinstcp.ddbbvt.eu # hosts anti-adware / pups

127.0.0.1 xxxgifan.com # hosts anti-adware / pups

127.0.0.1 xxxgirlfan.com # hosts anti-adware / pups

127.0.0.1 xxx-values.com # hosts anti-adware / pups

127.0.0.1 youngporn.it # hosts anti-adware / pups

127.0.0.1 youngporn.it # hosts anti-adware / pups

127.0.0.1 yourfiledownloader.net # hosts anti-adware / pups

127.0.0.1 youwatch.org # hosts anti-adware / pups

127.0.0.1 yrueo.info # hosts anti-adware / pups

127.0.0.1 zvswmqoh.changeip.name # hosts anti-adware / pups

# Copyright © 1993-2009 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.

# 127.0.0.1 localhost

# ::1 localhost

#74.208.10.249 gs.apple.com

Share this post


Link to post
Share on other sites

Hello frozengamer and :welcome:! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Please post the content of Attach.txt .

Share this post


Link to post
Share on other sites

Conflicting info so i am pasting contents of attached.txt as well.

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Ultimate

Boot Device: \Device\HarddiskVolume3

Install Date: 4/15/2011 11:42:30 AM

System Uptime: 5/21/2013 8:02:13 AM (4 hours ago)

.

Motherboard: ASRock | | P67 Extreme6

Processor: Intel® Core i5-2500K CPU @ 3.30GHz | CPUSocket | 3301/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 238 GiB total, 5.716 GiB free.

D: is FIXED (NTFS) - 1397 GiB total, 1172.174 GiB free.

E: is FIXED (NTFS) - 1397 GiB total, 994.452 GiB free.

F: is FIXED (NTFS) - 1397 GiB total, 487.476 GiB free.

G: is CDROM ()

H: is FIXED (NTFS) - 0 GiB total, 0.06 GiB free.

I: is FIXED (NTFS) - 2794 GiB total, 37.044 GiB free.

J: is FIXED (NTFS) - 2795 GiB total, 1663.123 GiB free.

K: is FIXED (NTFS) - 0 GiB total, 0.06 GiB free.

L: is FIXED (NTFS) - 2795 GiB total, 2373.684 GiB free.

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Installed Programs ======================

.

"Vivisector" (Remove Only)

4 Elements

A Game of Dwarves

ABBYY FineReader for ScanSnap 4.1

ACE COMBAT™ ASSAULT HORIZON Enhanced Edition

AcroPano Photo Stitcher, Panorama software

Adam's Venture Episode 1: The Search For The Lost Garden

Adam's Venture Episode 2: Solomon's Secret

Adam's Venture Episode 3: Revelations

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Photoshop Lightroom 5 Beta 64-bit

Adobe Reader X (10.1.7)

Aeon Command version 1.0.0.563

Air Forte

AirBuccaneers

Aiseesoft Blu-ray Ripper 6.3.62

Aiseesoft iTunes Backup Genius 2.1.2

Aiseesoft Total Media Converter 6.2.26

Alan Wake

Alan Wake's American Nightmare

Alawar Game Box

Alice Madness Returns

Alice: Madness Returns

Alien Shooter: Revisited

Alter Ego

Amazon Kindle

Amazon MP3 Downloader 1.0.17

AMD Accelerated Video Transcoding

AMD APP SDK Runtime

AMD Catalyst Install Manager

AMD Drag and Drop Transcoding

AMD Media Foundation Decoders

American Conquest

American Conquest - Fight Back

Annie's Millions

Anodyne

AnVir Task Manager

AOMEI Partition Assistant Pro Edition 5.1

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Application Profiles

Arma 2: Free

Around the World in 80 Days

Ashampoo Snap 4 v.4.3.1

ASRock eXtreme Tuner v0.1.54

Audiobook Downloader Pro 1.3

Autonomous Prototype

AutoUnpack 4.5.2

Autumn's Treasures the Jade Coin

Avadon: The Black Fortress

Avery Wizard 4.0

Awesomenauts

Aztaka

Back to the Future: Ep 1 - It's About Time

Back to the Future: Ep 2 - Get Tannen!

Back to the Future: Ep 3 - Citizen Brown

Back to the Future: Ep 4 - Double Visions

Back to the Future: Ep 5 - OUTATIME

Barricade 3.5.1

Batman - Arkham City

Batman: Arkham City™

Battlefield 3™

Battlefield: Bad Company™ 2

BeamDog Launcher 1.8.1.0

Bigasoft Total Video Converter 3.5.18.4353

BioShock Infinite

Black Lake Prototype

Blades of Time

Blockland

Blood Bowl: Legendary Edition

Boilsoft Video Splitter 6.34

Bonjour

Bonjour Print Services

Breach

Brütal Legend

Bulletstorm

BYclouder Data Recovery Pro

calibre

CardMinder

CardMinder V4.1

Cargo Commander

Catalyst Control Center

Catalyst Control Center - Branding

Catalyst Control Center Graphics Previews Common

Catalyst Control Center InstallProxy

Catalyst Control Center Localization All

ccc-utility64

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

CCleaner

CDRWIN 9

Cities XL Platinum

CleverPrint

Closure

Coastal Explorer

Codename Gordon

Coil

Colour Bind

Command & Conquer The First Decade

Company of Heroes (New Steam Version)

Condemned: Criminal Origins

Conquest of Elysium 3

Cossacks II: Battle for Europe

Cossacks II: Napoleonic Wars

Cossacks: Art of War

Cossacks: Back to War

Cossacks: European Wars

CPUID HWMonitor Pro 1.12

CrashPlan

Crazy Machines

Crazy Machines 1.5 Inventors Training Camp

Crazy Machines 1.5 New from the Lab

Crazy Machines 2

Crazy Machines Elements

Crusader Kings II

Crysis® 2

Crysis®3

Dark Souls: Prepare to Die Edition

Darksiders II

DarksidersInstaller

Darkspore™

Dawn of Discovery - Venice

Dawn of Fantasy: Kingdom Wars

dBpoweramp Music Converter

Dead Pixels

Dead Space™ 2

Deadlight

Debenu PDF Maximus 1.1.0.28

Defenders of Ardania

Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition

Demigod

Deponia

Desura

Desura:

Desura: 3079

Desura: 8-Bit Commando

Desura: 99 Levels To Hell

Desura: A Kingdom for Keflings

Desura: Acceleration Of Suguri X-Edition

Desura: AlterEgo: DreamWalker

Desura: Arkhelom 3D

Desura: Band of Bugs

Desura: Bionic Heart

Desura: Bullet Candy Perfect

Desura: Cardinal Quest

Desura: Caveman Craig 2

Desura: Corril Slayer

Desura: Da New Guys

Desura: Dino Run SE

Desura: Dysis

Desura: Enola

Desura: ERIE

Desura: Escape Goat

Desura: Fireball

Desura: Gentrieve 2

Desura: Haunt

Desura: Heileen

Desura: Helena The 3rd

Desura: Hitogata Happa

Desura: Ichi

Desura: Inferno+

Desura: Influence

Desura: Knytt Underground

Desura: Koya Rift

Desura: Lair of the Evildoer

Desura: Little Racers STREET

Desura: Love, By Fred Wood

Desura: Lunnye Devitsy 2013

Desura: Manhunter

Desura: Metal Dead

Desura: Miner Wars Arena

Desura: MiniFlake

Desura: moon.chase.star

Desura: Mutant Mudds

Desura: One Night: Full Circle

Desura: Oozi: Earth Adventure

Desura: Orczz

Desura: Outpost Kaloki

Desura: Pathologic

Desura: Pitman

Desura: Platformance: Castle Pain

Desura: Platformance: Temple Death

Desura: Private Infiltrator

Desura: Pushcat

Desura: Qasir Al-Wasat: A Night in-Between

Desura: Recruits

Desura: Reprisal

Desura: RobotRiot

Desura: Salvation Prophecy

Desura: Savage XR

Desura: Slender's Woods

Desura: Soulcaster

Desura: Soulcaster II

Desura: SQUIDS

Desura: stay dead

Desura: Super Crossfire

Desura: Super Space Rubbish

Desura: Talisman Prologue

Desura: The Network

Desura: The Real Texas

Desura: The Shivah

Desura: Tompi Jones

Desura: Towns

Desura: Unepic

Desura: Vitrum

Desura: Wake 2013

Desura: Warzone 2100

Desura: Weird Worlds: Return to Infinite Space

Desura: Wimp: Who Stole My Pants?

Desura: Wyv and Keep

Desura: Zafehouse: Diaries

Desura: Zombies.

Diablo III

Discord Times

Dishonored

DLC Quest

DOOM 3: BFG Edition

Dragon Age II

Drakensang

Drakensang 2 - Phileasson's Secret

Driver Magician 3.65

Driver San Francisco

Driver Sweeper 2.1.0

Dropbox

Dungeon Hearts

DUNGEONS - The Dark Lord (Steam Special Edition)

Dungeons and Dragons Anthology: The Master Collection

Duplicate Cleaner 2.1b

Duplicate Cleaner Pro 3.0.4

EA Shared Game Component: Activation

Earth Defense Force: Insect Armageddon

EaseUS Data Recovery Wizard 5.6.5

EASEUS Data Recovery Wizard Free Edition 5.5.1

EaseUS Partition Master 9.2.1 Professional

Easy Drive Data Recovery

Edna & Harvey: Harvey's New Eyes

Enclave

ESN Sonar

eSupport UndeletePlus 3.0.2.1214

Etron USB3.0 Host Controller

Evernote v. 4.6.3

Everything 1.2.1.371

Evochron Mercenary

Explodemon

ExplorerXP (remove only)

F.lux

Fairy Bloom Freesia

Fantapper Player

Far Cry 3

Far Cry 3 Blood Dragon

Farmscapes

Fashion Season

ffdshow [rev 3154] [2009-12-09]

FileAlyzer 2

FileToFolder

Fishdom

Fishdom H2O - Hidden Odyssey

Forge

Forge Beta version 1.0

FreeArc 0.666

Freespace 2

FTL: Faster Than Light

Galactic Civilizations I: Ultimate Edition

Game Booster 3

GameFly

GameSave Manager

GameStop App

Gatling Gears

Gettysburg: Armored Warfare

Glary Utilities 2.54.0.1759

GOG.com Downloader version 3.4.8

GOG.com Powerslide

Google Chrome

Google Talk Plugin

Google Update Helper

Gratuitous Space Battles

Grotesque Tactics 2 - Dungeons and Donuts

Guns of Icarus Online

Hack n Slash Prototype

Hamlet or the last game without MMORPG features, shaders and product placement

HD Tune 2.55

HD Tune Pro 5.00

Hinterland

Hotel Giant 2

Hotline Miami

HP webOS® Doctor Build 71.68, webOS 3.0.2

I Am Alive

iBomber Attack

iBomber Defense Pacific

ImgBurn

Inca Ball

Inpaint 4.3

Intel® Control Center

Intel® Rapid Storage Technology

Inversion™

Iron Brigade

Ironclads: American Civil War

Ironclads: Anglo Russian War 1866

Ironclads: Chincha Islands War 1866

Ironclads: High Seas

Ironclads: Schleswig War 1864

iTunes

Java 7 Update 21

Java Auto Updater

Java 6 Update 26

Jet Downloader

just another nasty editor

Kao - 2nd round

Killing Floor

Killing Floor Mod: Defence Alliance 2

King's Bounty: Warriors of the North

King Arthur II - The Role-playing Wargame

Kingdoms of Amalur: Reckoning

Kingdoms of Amalur: Reckoning™

Knytt Underground 1.0

Krater

Kung Fu Strike: The Warrior's Rise

La-Mulana

LangoMax Adult Advantage

LastPass (uninstall only)

LEGO Lord of the Rings

Link Shell Extension

Logitech Gaming Software

Logitech Gaming Software 8.40

Lucius

Lunnye Devitsy

Magi version 1.4

MahJong Suite 2012 v9.0

Malwarebytes Anti-Malware version 1.75.0.1300

Mark of the Ninja

marvell 91xx driver

Mass Effect 2

Mata Hari

Melomania

Mercenaries 2 World in Flames™

Microsoft .NET Framework 1.1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Games for Windows - LIVE Redistributable

Microsoft Games for Windows Marketplace

Microsoft IntelliPoint 8.2

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Groove MUI (English) 2010

Microsoft Office InfoPath MUI (English) 2010

Microsoft Office Office 32-bit Components 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared 32-bit MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Word MUI (English) 2010

Microsoft Security Client

Microsoft Security Essentials

Microsoft Silverlight

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft Windows SDK for Windows 7 (7.0)

Microsoft Windows SDK for Windows 7 Common Utilities (40715)

Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (40715)

Microsoft Windows SDK Intellisense and Reference Assemblies (40715)

Microsoft Xbox 360 Accessories 1.2

Microsoft XNA Framework Redistributable 3.0

Microsoft XNA Framework Redistributable 3.1

Microsoft XNA Framework Redistributable 4.0

Mightier

Miner Wars 2081

Miner Wars Arena Special Edition

Moonbase Alpha

Mozilla Firefox 20.0.1 (x86 en-US)

Mozilla Maintenance Service

Mp3tag v2.50

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MSXML 4.0 SP3 Parser

MSXML 4.0 SP3 Parser (KB2721691)

MSXML 4.0 SP3 Parser (KB2758694)

MUD - FIM Motocross World Championship™

MusicIP Mixer 1.9

My Game Long Name

MyKeyFinder

Mystery of Mortlake Mansion

Naval War: Arctic Circle

Need for Speed Hot Pursuit

Nethergate: Resurrection

Neverwinter

nGlide 1.00

NiGHTS into Dreams...

NirSoft BlueScreenView

nito Installer

Nitronic Rush (2012-06-19) version 20120619.0

Novacomd

NVIDIA Install Application

NVIDIA PhysX

Offspring Fling!

Ontrack EasyRecovery Professional

OpenAL

Oracle VM VirtualBox 4.2.12

Origin

Painkiller Hell & Damnation

Pando Media Booster

Par-N-Rar 1.3

Paragon Backup and Recovery™ 11 Compact Edition

Party of Sin

Path of Exile

PDF24 Creator 5.2.0

Peggle Extreme

Penny Arcade's On the Rain-Slick Precipice of Darkness 3

Perimeter

Peter Jackson's King Kong - Gamers Edition

Picasa 3

Picasa Uploader

Pid

Pirates of Black Cove

Planets Under Attack

Plex

Plus Pack for Acronis True Image Home 2012

POSTAL

Powerslide

Primal Carnage

Primal Fears

Process Lasso

Project S

PunkBuster Services

QuickPar 0.9

QuickSFV (Remove only)

Race Cars - The Extreme Rally

Rainlendar2 (remove only)

Rapture3D 2.4.8 Game

Rayman 3 version 1.0

Realtek Ethernet Controller Driver

Realtek High Definition Audio Driver

RecoveryDesk 3.7.1

Recuva

Red Orchestra 2: Heroes of Stalingrad

Red Orchestra 2: Heroes of Stalingrad Beta

Resonance

Retouch Pilot Free 3.4.1

Rhapsody

Ridge Racer™ Unbounded

RidNacs 2.0.3

RIFT™

Roblox for Chris

Rocketbirds: Hardboiled Chicken

Rocksmith

Rockstar Games Social Club

Royal Envoy

Sacrifice

Sandboxie 3.56 (64-bit)

Satazius

ScanSnap

ScanSnap Manager

ScanSnap Organizer

Scrapland

Scribblenauts Unlimited

SeaTools for Windows

Secunia PSI (3.0.0.3001)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft Excel 2010 (KB2597126) 64-Bit Edition

Security Update for Microsoft Filter Pack 2.0 (KB2553501) 64-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2687422) 64-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2760406) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2553371) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2553447) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2589320) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2598243) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2687501) 64-Bit Edition

Security Update for Microsoft Office 2010 (KB2687510) 64-Bit Edition

Security Update for Microsoft OneNote 2010 (KB2760600) 64-Bit Edition

Security Update for Microsoft Publisher 2010 (KB2553147) 64-Bit Edition

Security Update for Microsoft Visio 2010 (KB2810068) 64-Bit Edition

Security Update for Microsoft Visio Viewer 2010 (KB2687505) 64-Bit Edition

Security Update for Microsoft Word 2010 (KB2760410) 64-Bit Edition

SEGA Genesis & Mega Drive Classics

Serif PanoramaPlus Starter Edition

Shad'O

Shadow Defender

Shadow Harvest: Phantom Ops

Shank 2

Shift 2 Unleashed

SHIFT 2 UNLEASHED™

Skype™ 5.10

Slam Bolt Scrappers

Snapshot

Sniper: Ghost Warrior

Snuggle Truck

Spacebase DF-9 Prototype

Spacewar

Spartan

Spirit Of Wandering

Splice

Split/Second

Spotify

Spybot - Search & Destroy

Star Prospector 1.01

Steam

Still Life

Storm in a Teacup

STORM: Frontline Nation

Sugar Cube: Bittersweet Factory

Super Hexagon

Super House of Dead Ninjas

SUPERAntiSpyware

SuperCopier2

Sword of the Stars II: Enhanced Edition

System Requirements Lab for Intel

Tag&Rename 3.6.1

TagScanner 5.1.610

TeamSpeak 3 Client

TeamViewer 8

The Basement Collection

The Chronicles of Riddick - Assault on Dark Athena

The Journey Down: Chapter One

The Lost Inca Prophecy

The Saboteur™

The Secret World

The Tiny Bang Story

The Whispered World

The White Birch Prototype

The Witcher 2 - Assassins of Kings

Thirty Flights of Loving

Ticket to Ride

Tides & Currents

Tiny and Big - Grandpa's Leftovers (remove only)

Tiny Troopers

Tipard Video Converter Platinum 6.2.16

Tom Clancy's Rainbow Six 3: Athena Sword

Tomb Raider

TomTom HOME 2.8.3.2499

TomTom HOME Visual Studio Merge Modules

Total Annihilation Kingdoms

TrackMania² Stadium Open Beta

Transcripted

truShuffle 1.5

Two Worlds II Castle Defense

Ubisoft Game Launcher

UE3Redist

Undelete 360

Unity Web Player

Unmechanical

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft Office 2010 (KB2494150)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553092)

Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition

Update for Microsoft Office 2010 (KB2553378) 64-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition

Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition

Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition

Update for Microsoft Outlook 2010 (KB2597090) 64-Bit Edition

Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2598240) 64-Bit Edition

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition

Uplay

Video Cutter 1.0

Viking: Battle for Asgard

VirtualCloneDrive

VLC media player 2.0.6

Voxatron 0.1.3

Wake

Waking Mars

Warcraft III

Warhammer 40,000: Dawn of War - Game of the Year Edition

Warhammer® 40,000™: Dawn of War® II - Chaos Rising™

Warhammer® 40,000™: Dawn of War® II – Retribution™

Warlock - Master of the Arcane

Weird Worlds: Return to Infinite Space

WhereIsIt? 2011

Winamp

Winamp Detector Plug-in

Windows Driver Package - Palm (WinUSB) Palm Devices (10/09/2009 1.0.1)

Windows Live ID Sign-in Assistant

Windows SDK Intellidocs

WinISO

WinRAR 4.01 (64-bit)

WinX DVD Copy Pro 3.4.3

Wondershare PDF Converter (Build 3.0.0)

Wondershare Video Studio Express(Build 1.2.0.5)

World's Greatest Places Mahjong

XBMCHUB Wizard

Xfire (remove only)

XYplorer 11.90

Yahoo! BrowserPlus 2.9.8

YOU DON'T KNOW JACK

Zombie Driver HD

Zombie Pirates

.

==== Event Viewer Messages From Past Week ========

.

5/21/2013 8:45:10 AM, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file.

5/21/2013 8:09:15 AM, Error: Service Control Manager [7030] - The HOSTS Anti-PUPs service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

5/21/2013 8:02:44 AM, Error: Service Control Manager [7000] - The NVIDIA Stereoscopic 3D Driver Service service failed to start due to the following error: The system cannot find the file specified.

5/20/2013 8:44:59 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.

5/20/2013 8:44:59 AM, Error: Service Control Manager [7000] - The Steam Client Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

.

==== End Of File ===========================

Share this post


Link to post
Share on other sites

Step 1

Please uninstall this application: Fantapper Player

Step 2

Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

Step 3

  • Launch Malwarebytes' Anti-Malware
  • Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
  • Go to Scanner tab and select Perform Quick Scan, then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

Step 4

Please download AdwCleaner from here and save it on your Desktop.

  1. Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
  2. Now click on the Search tab.
  3. Please post the contents of the log-file created in your next post.

Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.

Step 5

  • Download on the desktop RogueKiller
  • Quit all programs
  • Start RogueKiller.exe
  • Wait until Prescan has finished ...
  • Click on Scan. Click on Report and copy/paste the content of the notepad in your next reply.

In your next reply, post the following log files:

  • Junkware Removal Tool log
  • Malwarebytes' Anti-Malware log
  • AdwCleaner log
  • RogueKiller log

Share this post


Link to post
Share on other sites

I ran into at least one problem. Roguekiller crashes on MBR scan, i have attached the log of everything but MBR scan. I tried this quite a few times, also something filled my C drive and brought it to zero space a few times and at least once hosts file was infected while i have been working on the steps. I changed hosts file back to original and then i made it read only and it hasn't been infected since.

Here are the logs.

Fantapper player uninstalled successfully according to add remove programs.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.9.4 (05.06.2013:1)

OS: Windows 7 Ultimate x64

Ran by Chris on Wed 05/22/2013 at 7:13:27.34

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\wondershare"

~~~ FireFox

Successfully deleted: [File] "C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\vwt9s9m4.default\extensions\sabnzbdstatus@dq5studios.com.xpi"

Successfully deleted: [Folder] C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\vwt9s9m4.default\jetpack

Successfully deleted: [Folder] C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\vwt9s9m4.default\extensions\staged

Emptied folder: C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\vwt9s9m4.default\minidumps [39 files]

~~~ Event Viewer Logs were cleared

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

Database version: v2013.05.21.06

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16576

Chris :: BOSS [administrator]

5/22/2013 8:55:56 AM

mbam-log-2013-05-22 (08-55-56).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 228664

Time elapsed: 2 minute(s), 38 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

# AdwCleaner v2.301 - Logfile created 05/22/2013 at 09:18:51

# Updated 16/05/2013 by Xplode

# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)

# User : Chris - BOSS

# Boot Mode : Normal

# Running from : C:\Users\Chris\Desktop\adwcleaner(1).exe

# Option [search]

***** [services] *****

***** [Files / Folders] *****

Folder Found : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\staged

***** [Registry] *****

***** [internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16576

[OK] Registry is clean.

-\\ Mozilla Firefox v21.0 (en-US)

File : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v26.0.1410.64

File : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [2844 octets] - [21/05/2013 08:00:05]

AdwCleaner[R2].txt - [1138 octets] - [21/05/2013 08:37:34]

AdwCleaner[R3].txt - [1031 octets] - [22/05/2013 09:18:51]

AdwCleaner[s1].txt - [2793 octets] - [21/05/2013 08:00:41]

########## EOF - C:\AdwCleaner[R3].txt - [1151 octets] ##########

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Chris [Admin rights]

Mode : Scan -- Date : 05/22/2013 13:56:30

| ARK || FAK |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 4 ¤¤¤

[HJPOL] HKCU\[...]\System : DisableTaskMgr (0) -> FOUND

[HJPOL] HKCU\[...]\System : DisableRegistryTools (0) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ Extern Hives: ¤¤¤

-> D:\windows\system32\config\SOFTWARE

-> D:\windows\system32\config\SYSTEM

-> D:\Users\chris\NTUSER.DAT

-> D:\Users\Default\NTUSER.DAT

-> D:\Users\Default User\NTUSER.DAT

-> D:\Documents and Settings\Default\NTUSER.DAT

-> D:\Documents and Settings\Default User\NTUSER.DAT

¤¤¤ HOSTS File: ¤¤¤

--> C:\Windows\system32\drivers\etc\hosts

¤¤¤ MBR Check: ¤¤¤

Finished : << RKreport[2]_S_05222013_02d1356.txt >>

RKreport[1]_S_05222013_02d1343.txt ; RKreport[2]_S_05222013_02d1356.txt

Share this post


Link to post
Share on other sites

Step 1

  1. Please re-run AdwCleaner
  2. Click on Delete button.
  3. Confirm each time with OK.
  4. Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.

Note: You can find the logfile at C:\AdwCleaner[sn].txt as well - n is the order number.

Step 2

Please scan your machine with ESET OnlineScan

  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer.
      Save it to your Desktop.
    • Double click on the esetsmartinstaller_enu.png to download the ESET Smart Installer. icon on your Desktop.

    [*]Check "YES, I accept the Terms of Use."

    [*]Click the Start button.

    [*]Accept any security warnings from your browser.

    [*]Under Scan Settings, check "Scan Archives" and "Remove found threats"

    [*]Click Advanced settings and select the following:

    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology

    [*]ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.

    [*]When the scan completes, click List Threats

    [*]Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

    [*]Click the Back button.

    [*]Click the Finish button.

In your next reply, post the following log files:

  • AdwCleaner log
  • ESET Online Scanner log

Share this post


Link to post
Share on other sites

Here are the scans,

Please note that since i have made hosts file to read only that every time i reboot a corrupted hosts.txt file shows up in C:/windows/temp/ with the following text, but does not successfully change the hosts file.

127.0.0.1 00aaf101a7.gougava.asia # hosts anti-adware / pups

127.0.0.1 08sr.combineads.info # hosts anti-adware / pups

127.0.0.1 08srvr.combineads.info # hosts anti-adware / pups

127.0.0.1 12srvr.combineads.info # hosts anti-adware / pups

127.0.0.1 1a2e115593.efacen.pro # hosts anti-adware / pups

127.0.0.1 1f1.fr # hosts anti-adware / pups

127.0.0.1 1facebookhackeronline.blogspot.no # hosts anti-adware / pups

127.0.0.1 2010-fr.com # hosts anti-adware / pups

127.0.0.1 2012-new.biz # hosts anti-adware / pups

127.0.0.1 2319825.ourtoolbar.com # hosts anti-adware / pups

127.0.0.1 24h00business.com # hosts anti-adware / pups

127.0.0.1 33black.porn-quest.net # hosts anti-adware / pups

127.0.0.1 4672ee0bc8.laibritec.waw.pl # hosts anti-adware / pups

127.0.0.1 4990usd.com # hosts anti-adware / pups

127.0.0.1 4xp.com # hosts anti-adware / pups

127.0.0.1 74.80.131.123 # hosts anti-adware / pups

127.0.0.1 78031d2298.tradorad.waw.pl # hosts anti-adware / pups

127.0.0.1 80323fcc6e.starsogor.waw.pl # hosts anti-adware / pups

127.0.0.1 888.rahon.org # hosts anti-adware / pups

127.0.0.1 8e47c22037.temavi.pro # hosts anti-adware / pups

127.0.0.1 94eb028571.eimeefiewe.pisz.pl # hosts anti-adware / pups

127.0.0.1 96910cbcd4.nicero.pro # hosts anti-adware / pups

127.0.0.1 96fb625592.tysofque.waw.pl:82 # hosts anti-adware / pups

127.0.0.1 98eu.info # hosts anti-adware / pups

127.0.0.1 ack.cdnperformance.info # hosts anti-adware / pups

127.0.0.1 acking.conversionads.com # hosts anti-adware / pups

127.0.0.1 a.daasafterdusk.com # hosts anti-adware / pups

127.0.0.1 ad.adn360.com # hosts anti-adware / pups

127.0.0.1 adeartss.eu # hosts anti-adware / pups

127.0.0.1 adesoeasy.eu # hosts anti-adware / pups

127.0.0.1 adf.girldatesforfree.net # hosts anti-adware / pups

127.0.0.1 adomicileavail.googlepages.com # hosts anti-adware / pups

127.0.0.1 ads7.complexadveising.com # hosts anti-adware / pups

127.0.0.1 ads.aff.co # hosts anti-adware / pups

127.0.0.1 ads.alpha00001.com # hosts anti-adware / pups

127.0.0.1 ads.cloud4ads.com # hosts anti-adware / pups

127.0.0.1 ads.eorezo.com # hosts anti-adware / pups

127.0.0.1 ads.hooqy.com # hosts anti-adware / pups

127.0.0.1 ads.icksor.com # hosts anti-adware / pups

127.0.0.1 ads.regiedepub.com # hosts anti-adware / pups

127.0.0.1 ads.sucomspot.com # hosts anti-adware / pups

127.0.0.1 ads.tersecta.com # hosts anti-adware / pups

127.0.0.1 aduatnight.com # hosts anti-adware / pups

127.0.0.1 adultatnight.com # hosts anti-adware / pups

127.0.0.1 adultsextools.com # hosts anti-adware / pups

127.0.0.1 a.dungtank.com # hosts anti-adware / pups

127.0.0.1 adwareale.com # hosts anti-adware / pups

127.0.0.1 aff.foxtab.com # hosts anti-adware / pups

127.0.0.1 affilibot.eu # hosts anti-adware / pups

127.0.0.1 afhhhfegd.co.cc # hosts anti-adware / pups

127.0.0.1 afhhhfegd.co. # hosts anti-adware / pups

127.0.0.1 afoula.biz # hosts anti-adware / pups

127.0.0.1 agence-exusive.com # hosts anti-adware / pups

127.0.0.1 a.juiceknowledge.com # hosts anti-adware / pups

127.0.0.1 ak.imgfa.com # hosts anti-adware / pups

127.0.0.1 ak.imgfarm.com # hosts anti-adware / pups

127.0.0.1 amaranth-plant.ru # hosts anti-adware / pups

127.0.0.1 antivirusgratuit.vg # hosts anti-adware / pups

127.0.0.1 antivirus.nouvee-version.net # hosts anti-adware / pups

127.0.0.1 anygadget.info # hosts anti-adware / pups

127.0.0.1 api.downloadmr.com # hosts anti-adware / pups

127.0.0.1 api.yontoo.com # hosts anti-adware / pups

127.0.0.1 apnmedia.ask.com # hosts anti-adware / pups

127.0.0.1 application-eor.net # hosts anti-adware / pups

127.0.0.1 application-error.net # hosts anti-adware / pups

127.0.0.1 app.media-app.com # hosts anti-adware / pups

127.0.0.1 app.offerbox.com # hosts anti-adware / pups

127.0.0.1 app.softimizer.com # hosts anti-adware / pups

127.0.0.1 app.wideseam6.com # hosts anti-adware / pups

127.0.0.1 argentastuce.com # hosts anti-adware / pups

127.0.0.1 argent-avail-domicile.fr # hosts anti-adware / pups

127.0.0.1 argent-domicile.eu # hosts anti-adware / pups

127.0.0.1 argent-vital.com # hosts anti-adware / pups

127.0.0.1 ascentive.com # hosts anti-adware / pups

127.0.0.1 atelecharger.info # hosts anti-adware / pups

127.0.0.1 augmentersesrevenus.pyie.com # hosts anti-adware / pups

127.0.0.1 auto-webcash.com # hosts anti-adware / pups

127.0.0.1 avaaffic.com # hosts anti-adware / pups

127.0.0.1 availchezsoi.onlc.fr # hosts anti-adware / pups

127.0.0.1 avail-d-equipe.com # hosts anti-adware / pups

127.0.0.1 availleur-a-domicile.com # hosts anti-adware / pups

127.0.0.1 avigora.com # hosts anti-adware / pups

127.0.0.1 avs4you.com # hosts anti-adware / pups

127.0.0.1 bababiz.com # hosts anti-adware / pups

127.0.0.1 badusoft.com # hosts anti-adware / pups

127.0.0.1 banner.kuliyev.com # hosts anti-adware / pups

127.0.0.1 b.bestofmedia.com # hosts anti-adware / pups

127.0.0.1 be2.fr # hosts anti-adware / pups

127.0.0.1 bestflvplayer.net # hosts anti-adware / pups

127.0.0.1 bfd34af056e54c8abcb9dd50862f0b9b.integration.download.conduit-services.com # hosts anti-adware / pups

127.0.0.1 bidfun.fr # hosts anti-adware / pups

127.0.0.1 bisexywoman.biz # hosts anti-adware / pups

127.0.0.1 b.juiceknowledge.com # hosts anti-adware / pups

127.0.0.1 blacksxxx.org # hosts anti-adware / pups

127.0.0.1 blog.upoharbd.com # hosts anti-adware / pups

127.0.0.1 boolu.springjapan.info # hosts anti-adware / pups

127.0.0.1 boostersonpc.com # hosts anti-adware / pups

127.0.0.1 buzz-france.info # hosts anti-adware / pups

127.0.0.1 byteseeder.com # hosts anti-adware / pups

127.0.0.1 c756514600.phailifaiy.nysa.pl # hosts anti-adware / pups

127.0.0.1 c8783b9ac3.ebafap.pro # hosts anti-adware / pups

127.0.0.1 cache-download.real.com # hosts anti-adware / pups

127.0.0.1 caefourinternet.com # hosts anti-adware / pups

127.0.0.1 cash-avalanches.com # hosts anti-adware / pups

127.0.0.1 cash-methodes.be # hosts anti-adware / pups

127.0.0.1 cash-professor.com # hosts anti-adware / pups

127.0.0.1 casinoonlinecash.org # hosts anti-adware / pups

127.0.0.1 cdn.appround.biz # hosts anti-adware / pups

127.0.0.1 cdn.bigspeedpro.com # hosts anti-adware / pups

127.0.0.1 cdn.bispd.com # hosts anti-adware / pups

127.0.0.1 cdn.bisrv.com # hosts anti-adware / pups

127.0.0.1 cdn.download.sweetpacks.com # hosts anti-adware / pups

127.0.0.1 cdneu.bestflvplayer.net # hosts anti-adware / pups

127.0.0.1 cdneu.coolvideoconveer.com # hosts anti-adware / pups

127.0.0.1 cdneu.coolvideoconverter.com # hosts anti-adware / pups

127.0.0.1 cdneu.driverpackcdn.com # hosts anti-adware / pups

127.0.0.1 cdneu.friedcookiescdn.com # hosts anti-adware / pups

127.0.0.1 cdneu.onedownloadspot.com # hosts anti-adware / pups

127.0.0.1 cdneu.telechargercdn.com # hosts anti-adware / pups

127.0.0.1 cdn.guttastatdk.us # hosts anti-adware / pups

127.0.0.1 cdn.inskinmedia.com # hosts anti-adware / pups

127.0.0.1 cdn.insta.oibundles2.com # hosts anti-adware / pups

127.0.0.1 cdn.insta.playbryte.com # hosts anti-adware / pups

127.0.0.1 cdn.llogetfastcach.us # hosts anti-adware / pups

127.0.0.1 cdn.montiera.com # hosts anti-adware / pups

127.0.0.1 cdn.msdwnld.com # hosts anti-adware / pups

127.0.0.1 cdn.shyapotato.us # hosts anti-adware / pups

127.0.0.1 cdn.solimba.com # hosts anti-adware / pups

127.0.0.1 cdn.tuto4pc.com # hosts anti-adware / pups

127.0.0.1 cdnus.bestflvplayer.net # hosts anti-adware / pups

127.0.0.1 cdnus.coolflvplayer.com # hosts anti-adware / pups

127.0.0.1 cdnus.driverpackcdn.com # hosts anti-adware / pups

127.0.0.1 cdnus.extrimdownloadmanager.com # hosts anti-adware / pups

127.0.0.1 cdnus.ironcdn.com # hosts anti-adware / pups

127.0.0.1 cdnus.onedownloadspot.com # hosts anti-adware / pups

127.0.0.1 cdnus.telechargercdn.com # hosts anti-adware / pups

127.0.0.1 c.download-best-softwares.com # hosts anti-adware / pups

127.0.0.1 cen.incredibar.com # hosts anti-adware / pups

127.0.0.1 centerblog.net # hosts anti-adware / pups

127.0.0.1 cf1.vuze.com # hosts anti-adware / pups

127.0.0.1 cfnmhdtube.net # hosts anti-adware / pups

127.0.0.1 cfnmhdtube.org # hosts anti-adware / pups

127.0.0.1 c-full.info # hosts anti-adware / pups

127.0.0.1 checkmate121.com # hosts anti-adware / pups

127.0.0.1 chevaux8.free.fr # hosts anti-adware / pups

127.0.0.1 choiceadu.com # hosts anti-adware / pups

127.0.0.1 choiceadult.com # hosts anti-adware / pups

127.0.0.1 cia.mediahubaffiliates.biz # hosts anti-adware / pups

127.0.0.1 clubcasino.biz # hosts anti-adware / pups

127.0.0.1 c-mediaplayer-2010.com # hosts anti-adware / pups

127.0.0.1 cms.distributionengine.conduit-services.com # hosts anti-adware / pups

127.0.0.1 coachforlife.info # hosts anti-adware / pups

127.0.0.1 commeneussir.com # hosts anti-adware / pups

127.0.0.1 comment-gagner-argent-internet.fr # hosts anti-adware / pups

127.0.0.1 content.sweetim.com # hosts anti-adware / pups

127.0.0.1 couplefree.com # hosts anti-adware / pups

127.0.0.1 cpafixadvertiser.info # hosts anti-adware / pups

127.0.0.1 cp.tuguu.com # hosts anti-adware / pups

127.0.0.1 crakkkus.tk # hosts anti-adware / pups

127.0.0.1 crazyspandacasino.com # hosts anti-adware / pups

127.0.0.1 create-ringtones.com # hosts anti-adware / pups

127.0.0.1 cs.adxpansion.com # hosts anti-adware / pups

127.0.0.1 c.vg # hosts anti-adware / pups

127.0.0.1 d1m9ge5vns34so.oudfront.net # hosts anti-adware / pups

127.0.0.1 d1w467en2eqqh2.oudfront.net # hosts anti-adware / pups

127.0.0.1 d2qsma9t6l5kt7.oudfront.net # hosts anti-adware / pups

127.0.0.1 d30p0quhwpvm.cloudfront.net # hosts anti-adware / pups

127.0.0.1 d61.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d62.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d63.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d64.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d71.newplaysite.com # hosts anti-adware / pups

127.0.0.1 d74.newplaysite.com # hosts anti-adware / pups

127.0.0.1 dagence.com # hosts anti-adware / pups

127.0.0.1 data.downloadstaer.net # hosts anti-adware / pups

127.0.0.1 data.oa-software.com # hosts anti-adware / pups

127.0.0.1 datefks.info # hosts anti-adware / pups

127.0.0.1 dating-adult-sex.com # hosts anti-adware / pups

127.0.0.1 dating-club.biz # hosts anti-adware / pups

127.0.0.1 dating.marmaladepark.com # hosts anti-adware / pups

127.0.0.1 datingpoland.com # hosts anti-adware / pups

127.0.0.1 datingsitenow.com # hosts anti-adware / pups

127.0.0.1 dating.voltesempre.org # hosts anti-adware / pups

127.0.0.1 db.nordicx.net # hosts anti-adware / pups

127.0.0.1 db.prepay-africa.com # hosts anti-adware / pups

127.0.0.1 dde.integration.storage.conduit-services.com # hosts anti-adware / pups

127.0.0.1 dec.pcvideosfreedownload.com # hosts anti-adware / pups

127.0.0.1 delargenapide.canalblog.com # hosts anti-adware / pups

127.0.0.1 delivery.afficbroker.com # hosts anti-adware / pups

127.0.0.1 delta.goforfiles.com # hosts anti-adware / pups

127.0.0.1 depanne-pc.com # hosts anti-adware / pups

127.0.0.1 depanne-pc.info # hosts anti-adware / pups

127.0.0.1 dereteweret.org # hosts anti-adware / pups

127.0.0.1 dev.oud4pc.com # hosts anti-adware / pups

127.0.0.1 dfast.us # hosts anti-adware / pups

127.0.0.1 dfc.mediaformatconverter.com # hosts anti-adware / pups

127.0.0.1 d.freevideosfordownload.com # hosts anti-adware / pups

127.0.0.1 dfr.eorezo.com # hosts anti-adware / pups

127.0.0.1 dhc.freewindowsmediaconverter.com # hosts anti-adware / pups

127.0.0.1 direct.excellerater.com # hosts anti-adware / pups

127.0.0.1 dl01.socdn.com # hosts anti-adware / pups

127.0.0.1 dl6.iq7download.com # hosts anti-adware / pups

127.0.0.1 dl.babylon.com # hosts anti-adware / pups

127.0.0.1 dl.cdn-services.com # hosts anti-adware / pups

127.0.0.1 dlfr.tuto4pc.com # hosts anti-adware / pups

127.0.0.1 dl.instaiq.com # hosts anti-adware / pups

127.0.0.1 dlmanager.net # hosts anti-adware / pups

127.0.0.1 dl-plugin.com # hosts anti-adware / pups

127.0.0.1 dls.nicdls.com # hosts anti-adware / pups

127.0.0.1 dls.softgratuit.com # hosts anti-adware / pups

127.0.0.1 dls.softlate.com # hosts anti-adware / pups

127.0.0.1 dl.v2.domaiq.com # hosts anti-adware / pups

127.0.0.1 dn.download-manage.com # hosts anti-adware / pups

127.0.0.1 dnld.instacore.com # hosts anti-adware / pups

127.0.0.1 dofus-kamas.net # hosts anti-adware / pups

127.0.0.1 domaiq.com # hosts anti-adware / pups

127.0.0.1 downlesoft.com # hosts anti-adware / pups

127.0.0.1 download2.us # hosts anti-adware / pups

127.0.0.1 downloadcdn.beerinstaller.com # hosts anti-adware / pups

127.0.0.1 downloadcdn.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 downloadcdn.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 downloadcdn.filebulldog.com # hosts anti-adware / pups

127.0.0.1 download.cdn.ftalk.com # hosts anti-adware / pups

127.0.0.1 download.cdn.imesh.com # hosts anti-adware / pups

127.0.0.1 download.cdn.koyotesoft.com # hosts anti-adware / pups

127.0.0.1 download.cdnperfoance.info # hosts anti-adware / pups

127.0.0.1 download.cdnperformance.info # hosts anti-adware / pups

127.0.0.1 download.cdn.torchbrowser.com # hosts anti-adware / pups

127.0.0.1 do-wn-lo-ad.com # hosts anti-adware / pups

127.0.0.1 download.fr.filewin.com # hosts anti-adware / pups

127.0.0.1 download.fuzezip.com # hosts anti-adware / pups

127.0.0.1 download.ilivid.com # hosts anti-adware / pups

127.0.0.1 download.imesh.com # hosts anti-adware / pups

127.0.0.1 download.instabrain.com # hosts anti-adware / pups

127.0.0.1 download.ircfast.com # hosts anti-adware / pups

127.0.0.1 download.jzip.com # hosts anti-adware / pups

127.0.0.1 download.loipop-network.com # hosts anti-adware / pups

127.0.0.1 download.lollipop-network.com # hosts anti-adware / pups

127.0.0.1 downloadsecurise.com # hosts anti-adware / pups

127.0.0.1 download.shoptowin.net # hosts anti-adware / pups

127.0.0.1 downloads.malavida.net # hosts anti-adware / pups

127.0.0.1 downloadsoftfr.com # hosts anti-adware / pups

127.0.0.1 download.softiglu.com # hosts anti-adware / pups

127.0.0.1 download.telechargers.net # hosts anti-adware / pups

127.0.0.1 download.televisionfanatic.com # hosts anti-adware / pups

127.0.0.1 download.toggle.com # hosts anti-adware / pups

127.0.0.1 download.wajam.com # hosts anti-adware / pups

127.0.0.1 download.winds10.com # hosts anti-adware / pups

127.0.0.1 driverutilities.com # hosts anti-adware / pups

127.0.0.1 dt3j8jg8ei6zr.oudfront.net # hosts anti-adware / pups

127.0.0.1 durable.com # hosts anti-adware / pups

127.0.0.1 e446c146c2.artrardf.su # hosts anti-adware / pups

127.0.0.1 easyformulaforsuccess.org # hosts anti-adware / pups

127.0.0.1 easyfoulaforsuccess.org # hosts anti-adware / pups

127.0.0.1 ebook-generation.com # hosts anti-adware / pups

127.0.0.1 ebooks-reussite.com # hosts anti-adware / pups

127.0.0.1 eee791ae0f.iffica.waw.pl # hosts anti-adware / pups

127.0.0.1 egirlsex.com # hosts anti-adware / pups

127.0.0.1 egisex.com # hosts anti-adware / pups

127.0.0.1 elecharger.superfiles.com # hosts anti-adware / pups

127.0.0.1 enigmasoftware.com # hosts anti-adware / pups

127.0.0.1 eorezo.com # hosts anti-adware / pups

127.0.0.1 ero-odnoklassniki.info # hosts anti-adware / pups

127.0.0.1 eu.paydaycashloanadvancea2478.com # hosts anti-adware / pups

127.0.0.1 explorer-2010.com # hosts anti-adware / pups

127.0.0.1 facebookmotdepasse.blogspot.fr # hosts anti-adware / pups

127.0.0.1 facebook-piraters.blogspot.fr # hosts anti-adware / pups

127.0.0.1 facenouf.com # hosts anti-adware / pups

127.0.0.1 fafrenzyforwindows.com # hosts anti-adware / pups

127.0.0.1 farmfrenzyforwindows.com # hosts anti-adware / pups

127.0.0.1 fatihkocyigit.com.tr # hosts anti-adware / pups

127.0.0.1 fedrekpolik.org # hosts anti-adware / pups

127.0.0.1 feed.extremelyorange.com # hosts anti-adware / pups

127.0.0.1 feed.gadarnews.com # hosts anti-adware / pups

127.0.0.1 fetolbus.ru # hosts anti-adware / pups

127.0.0.1 ff.conduit-download.com # hosts anti-adware / pups

127.0.0.1 fichier1.easycommander.com # hosts anti-adware / pups

127.0.0.1 file-exactor.com # hosts anti-adware / pups

127.0.0.1 files123321.uk.to # hosts anti-adware / pups

127.0.0.1 files.download1ick.ws # hosts anti-adware / pups

127.0.0.1 files.iranapps.com # hosts anti-adware / pups

127.0.0.1 files.vaultnoir.com # hosts anti-adware / pups

127.0.0.1 find2download.fr # hosts anti-adware / pups

127.0.0.1 flexweb.getyoursoft.com # hosts anti-adware / pups

127.0.0.1 flintporn.com # hosts anti-adware / pups

127.0.0.1 flirtube.com # hosts anti-adware / pups

127.0.0.1 flvmplayer.com # hosts anti-adware / pups

127.0.0.1 flvmplayer.s3-website-us-east-1.amazonaws.com # hosts anti-adware / pups

127.0.0.1 fmccijsu.changeip.org # hosts anti-adware / pups

127.0.0.1 founeacademie.com # hosts anti-adware / pups

127.0.0.1 francais.babylon.com # hosts anti-adware / pups

127.0.0.1 fr.ask.com # hosts anti-adware / pups

127.0.0.1 freeaddons.free.fr # hosts anti-adware / pups

127.0.0.1 freecompressor.com # hosts anti-adware / pups

127.0.0.1 freecensoredvidz.org # hosts anti-adware / pups

127.0.0.1 freemomsexxx7.com # hosts anti-adware / pups

127.0.0.1 french.ircfast.com # hosts anti-adware / pups

127.0.0.1 fr.excite.eu # hosts anti-adware / pups

127.0.0.1 fr.iminent.com # hosts anti-adware / pups

127.0.0.1 fr.malavida.com # hosts anti-adware / pups

127.0.0.1 fr.phreat.com # hosts anti-adware / pups

127.0.0.1 fr.smeet.com # hosts anti-adware / pups

127.0.0.1 fr.winds10.com # hosts anti-adware / pups

127.0.0.1 ftp2solls.org # hosts anti-adware / pups

127.0.0.1 functionjs.com # hosts anti-adware / pups

127.0.0.1 functionjs.com # hosts anti-adware / pups

127.0.0.1 fupackcodecs.com # hosts anti-adware / pups

127.0.0.1 fupackvista.com # hosts anti-adware / pups

127.0.0.1 gagner-argent.blog4ever.com # hosts anti-adware / pups

127.0.0.1 gagnerargent.blog4ever.com # hosts anti-adware / pups

127.0.0.1 gagner-argent-domicile.be # hosts anti-adware / pups

127.0.0.1 gagnerargentnet.canalblog.com # hosts anti-adware / pups

127.0.0.1 gagner-de-l-argent-facile.net # hosts anti-adware / pups

127.0.0.1 gagner-de-l-argent.org # hosts anti-adware / pups

127.0.0.1 gagner-du-temps.eu # hosts anti-adware / pups

127.0.0.1 gagner-facile.net # hosts anti-adware / pups

127.0.0.1 gagner-rapidemen.ifrance.com # hosts anti-adware / pups

127.0.0.1 gagner-rapidement.ifrance.com # hosts anti-adware / pups

127.0.0.1 gains-complementaires.com # hosts anti-adware / pups

127.0.0.1 gamedue.fr # hosts anti-adware / pups

127.0.0.1 gamepoluss.eu # hosts anti-adware / pups

127.0.0.1 gamesxite.com # hosts anti-adware / pups

127.0.0.1 ganerecker.com # hosts anti-adware / pups

127.0.0.1 gapokga.com # hosts anti-adware / pups

127.0.0.1 gask.samo-project.com # hosts anti-adware / pups

127.0.0.1 gefendok.org # hosts anti-adware / pups

127.0.0.1 getfreemediaonline.com # hosts anti-adware / pups

127.0.0.1 gilikesex.com # hosts anti-adware / pups

127.0.0.1 gimp.soft32.fr # hosts anti-adware / pups

127.0.0.1 ging8.com # hosts anti-adware / pups

127.0.0.1 ginyas.com # hosts anti-adware / pups

127.0.0.1 girllikesex.com # hosts anti-adware / pups

127.0.0.1 giuna.info # hosts anti-adware / pups

127.0.0.1 glamorousgirl.net # hosts anti-adware / pups

127.0.0.1 glamorous-girls-models.net # hosts anti-adware / pups

127.0.0.1 glamorous-girls.net # hosts anti-adware / pups

127.0.0.1 glamorous-model.com # hosts anti-adware / pups

127.0.0.1 glamorousmodelsgirl.net # hosts anti-adware / pups

127.0.0.1 glamorous-models-girls.com # hosts anti-adware / pups

127.0.0.1 gogo20.cusi.fr # hosts anti-adware / pups

127.0.0.1 go.goforfiles.com # hosts anti-adware / pups

127.0.0.1 goldaa.com # hosts anti-adware / pups

127.0.0.1 gooofu.com # hosts anti-adware / pups

127.0.0.1 go.tvnoop.com # hosts anti-adware / pups

127.0.0.1 gratisporno69.info # hosts anti-adware / pups

127.0.0.1 greattubeporn.com # hosts anti-adware / pups

127.0.0.1 gudfaj.info # hosts anti-adware / pups

127.0.0.1 h4r3.hopto.org # hosts anti-adware / pups

127.0.0.1 hit.afficholder.com # hosts anti-adware / pups

127.0.0.1 hit-sex.com # hosts anti-adware / pups

127.0.0.1 hit-sex.com # hosts anti-adware / pups

127.0.0.1 homemadempegs.com # hosts anti-adware / pups

127.0.0.1 homevideonews.biz # hosts anti-adware / pups

127.0.0.1 hotandfreeporno.net # hosts anti-adware / pups

127.0.0.1 hotporngirls.com # hosts anti-adware / pups

127.0.0.1 hotporngis.com # hosts anti-adware / pups

127.0.0.1 hotxxx-gi.com # hosts anti-adware / pups

127.0.0.1 hotxxx-girl.com # hosts anti-adware / pups

127.0.0.1 hpm.tbm-ntwk.com # hosts anti-adware / pups

127.0.0.1 http://www.telecharger.org # hosts anti-adware / pups

127.0.0.1 icargent.com # hosts anti-adware / pups

127.0.0.1 ic.illyx.com # hosts anti-adware / pups

127.0.0.1 ie.conduit-download.com # hosts anti-adware / pups

127.0.0.1 ie.dealply.com # hosts anti-adware / pups

127.0.0.1 igvau.fr # hosts anti-adware / pups

127.0.0.1 imesh.com # hosts anti-adware / pups

127.0.0.1 img.planetsappho.net # hosts anti-adware / pups

127.0.0.1 imvux.com # hosts anti-adware / pups

127.0.0.1 index.myftp.org # hosts anti-adware / pups

127.0.0.1 insta2.optimum-installer.com # hosts anti-adware / pups

127.0.0.1 insta.blamcity.com # hosts anti-adware / pups

127.0.0.1 instaer.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 instaer.filebulldog.com # hosts anti-adware / pups

127.0.0.1 insta.iminent.com # hosts anti-adware / pups

127.0.0.1 installer.betterinstaller.com # hosts anti-adware / pups

127.0.0.1 installer.filebulldog.com # hosts anti-adware / pups

127.0.0.1 installertechcontent.com # hosts anti-adware / pups

127.0.0.1 install.outbrowse.com # hosts anti-adware / pups

127.0.0.1 insta.optimum-installer.com # hosts anti-adware / pups

127.0.0.1 insta.optimuminstaller.com # hosts anti-adware / pups

127.0.0.1 institut-dulac.com # hosts anti-adware / pups

127.0.0.1 interdescargas.com # hosts anti-adware / pups

127.0.0.1 iogiciel.com # hosts anti-adware / pups

127.0.0.1 ip.freepiv.net # hosts anti-adware / pups

127.0.0.1 iyx.co # hosts anti-adware / pups

127.0.0.1 jdownloader.org # hosts anti-adware / pups

127.0.0.1 jeboost.com # hosts anti-adware / pups

127.0.0.1 je-mange-et-je-maigris.com # hosts anti-adware / pups

127.0.0.1 jlyxe.changeip.name # hosts anti-adware / pups

127.0.0.1 jscontent.com # hosts anti-adware / pups

127.0.0.1 jshref.com # hosts anti-adware / pups

127.0.0.1 jsmeta.com # hosts anti-adware / pups

127.0.0.1 kiyure.com # hosts anti-adware / pups

127.0.0.1 koyotstar.free.fr # hosts anti-adware / pups

127.0.0.1 krupse.info # hosts anti-adware / pups

127.0.0.1 kuyqen.info # hosts anti-adware / pups

127.0.0.1 landing.etype.com # hosts anti-adware / pups

127.0.0.1 lcstatx.dallasdroidapps.com # hosts anti-adware / pups

127.0.0.1 lecoindesinsiders.com # hosts anti-adware / pups

127.0.0.1 le-dire.tv # hosts anti-adware / pups

127.0.0.1 lerwik.info # hosts anti-adware / pups

127.0.0.1 lesexgir.com # hosts anti-adware / pups

127.0.0.1 lestutoriels-enarchives.com # hosts anti-adware / pups

127.0.0.1 lesvirus.fr # hosts anti-adware / pups

127.0.0.1 linkfixerplus.com # hosts anti-adware / pups

127.0.0.1 linkmeee.com # hosts anti-adware / pups

127.0.0.1 lishros.info # hosts anti-adware / pups

127.0.0.1 live-casino-online.org # hosts anti-adware / pups

127.0.0.1 live-sex-x.com # hosts anti-adware / pups

127.0.0.1 load.keygendb.net # hosts anti-adware / pups

127.0.0.1 load.scanscout.com # hosts anti-adware / pups

127.0.0.1 logi-secure.eu # hosts anti-adware / pups

127.0.0.1 lollipoporno.org # hosts anti-adware / pups

127.0.0.1 lp.ick2saveapp.com # hosts anti-adware / pups

127.0.0.1 lp.ilivid.com # hosts anti-adware / pups

127.0.0.1 lp.imesh.com # hosts anti-adware / pups

127.0.0.1 lp.sweetim.com # hosts anti-adware / pups

127.0.0.1 lp.torchbrowser.com # hosts anti-adware / pups

127.0.0.1 lsdgroupg.com # hosts anti-adware / pups

127.0.0.1 luda9wmsiteza.eu # hosts anti-adware / pups

127.0.0.1 lunarnewyearhouston.com # hosts anti-adware / pups

127.0.0.1 lyotir.info # hosts anti-adware / pups

127.0.0.1 maosvonring.net # hosts anti-adware / pups

127.0.0.1 maprado.com # hosts anti-adware / pups

127.0.0.1 mariavoyance.com # hosts anti-adware / pups

127.0.0.1 mariins.com # hosts anti-adware / pups

127.0.0.1 matureagent.com # hosts anti-adware / pups

127.0.0.1 matureboytubes.com # hosts anti-adware / pups

127.0.0.1 maturepornxtube.com # hosts anti-adware / pups

127.0.0.1 max-adult-tube.com # hosts anti-adware / pups

127.0.0.1 max-adu-tube.com # hosts anti-adware / pups

127.0.0.1 media-app.com # hosts anti-adware / pups

127.0.0.1 media.comesvita.com.es # hosts anti-adware / pups

127.0.0.1 mediaplayer-codecpack.com # hosts anti-adware / pups

127.0.0.1 media-player-helper.com # hosts anti-adware / pups

127.0.0.1 media.pussycash.com # hosts anti-adware / pups

127.0.0.1 medicumnnova.eu # hosts anti-adware / pups

127.0.0.1 medvenerologsz.eu # hosts anti-adware / pups

127.0.0.1 meetandlovesz.eu # hosts anti-adware / pups

127.0.0.1 mega-cool-bonus.org # hosts anti-adware / pups

127.0.0.1 megoads.eu # hosts anti-adware / pups

127.0.0.1 messenger.descargar.es # hosts anti-adware / pups

127.0.0.1 methode-cash.com # hosts anti-adware / pups

127.0.0.1 methodegagnante.com # hosts anti-adware / pups

127.0.0.1 mfd.malavida.com # hosts anti-adware / pups

127.0.0.1 mflashplayer.com # hosts anti-adware / pups

127.0.0.1 mfzplecp.changeip.name # hosts anti-adware / pups

127.0.0.1 milfscunt.com # hosts anti-adware / pups

127.0.0.1 mires.eorezo.com # hosts anti-adware / pups

127.0.0.1 mirfr.eorezo.com # hosts anti-adware / pups

127.0.0.1 mn.babcdn.com # hosts anti-adware / pups

127.0.0.1 moneywin24.biz # hosts anti-adware / pups

127.0.0.1 monij.info # hosts anti-adware / pups

127.0.0.1 muibar.me # hosts anti-adware / pups

127.0.0.1 mysexpalace.com # hosts anti-adware / pups

127.0.0.1 need4video.com # hosts anti-adware / pups

127.0.0.1 neo-bux.fr # hosts anti-adware / pups

127.0.0.1 new-2011.net # hosts anti-adware / pups

127.0.0.1 new-2012.net # hosts anti-adware / pups

127.0.0.1 new-club-casino.org # hosts anti-adware / pups

127.0.0.1 newt7.aduadworld.com # hosts anti-adware / pups

127.0.0.1 new-windows7.com # hosts anti-adware / pups

127.0.0.1 nocghnr.changeip.org # hosts anti-adware / pups

127.0.0.1 nomeraodessas.eu # hosts anti-adware / pups

127.0.0.1 nopebivernmss.eu # hosts anti-adware / pups

127.0.0.1 noproblemss.eu # hosts anti-adware / pups

127.0.0.1 nude-passion.com # hosts anti-adware / pups

127.0.0.1 obdurp.info # hosts anti-adware / pups

127.0.0.1 offagnopz.changeip.name # hosts anti-adware / pups

127.0.0.1 offers.avazuscd.net # hosts anti-adware / pups

127.0.0.1 offre-surprise.com # hosts anti-adware / pups

127.0.0.1 ogpal.com # hosts anti-adware / pups

127.0.0.1 ojan-killer.net # hosts anti-adware / pups

127.0.0.1 onedownloadspot.com # hosts anti-adware / pups

127.0.0.1 opalki.info # hosts anti-adware / pups

127.0.0.1 opasi.com # hosts anti-adware / pups

127.0.0.1 osbasedreceiva.pl # hosts anti-adware / pups

127.0.0.1 os.coolvideoconverter.com # hosts anti-adware / pups

127.0.0.1 oud4pc.com # hosts anti-adware / pups

127.0.0.1 out.popads.net # hosts anti-adware / pups

127.0.0.1 pageerror-download.com # hosts anti-adware / pups

127.0.0.1 pair.homecomputerrepair.ca # hosts anti-adware / pups

127.0.0.1 pcpitstop.com # hosts anti-adware / pups

127.0.0.1 pctuto.com # hosts anti-adware / pups

127.0.0.1 pdf-reader-eator.com # hosts anti-adware / pups

127.0.0.1 phprocket.net # hosts anti-adware / pups

127.0.0.1 phytolabel.com # hosts anti-adware / pups

127.0.0.1 phytolabel.fr # hosts anti-adware / pups

127.0.0.1 pikkolorgy.org # hosts anti-adware / pups

127.0.0.1 pio-data2.info # hosts anti-adware / pups

127.0.0.1 planscools.fr # hosts anti-adware / pups

127.0.0.1 playgil.org # hosts anti-adware / pups

127.0.0.1 plugnrex.info # hosts anti-adware / pups

127.0.0.1 plusrichedemain.fr # hosts anti-adware / pups

127.0.0.1 pnads.com # hosts anti-adware / pups

127.0.0.1 pognonfacile.com # hosts anti-adware / pups

127.0.0.1 p.online-hd.tv # hosts anti-adware / pups

127.0.0.1 popander.mobi # hosts anti-adware / pups

127.0.0.1 pornoinpark.net # hosts anti-adware / pups

127.0.0.1 pornoow.com # hosts anti-adware / pups

127.0.0.1 pornotube.grangnp.com # hosts anti-adware / pups

127.0.0.1 promoution231.ru # hosts anti-adware / pups

127.0.0.1 promo.vador.com # hosts anti-adware / pups

127.0.0.1 proteorlb-1556088852.us-east-1.elb.amazonaws.com # hosts anti-adware / pups

127.0.0.1 pu.plugrush.com # hosts anti-adware / pups

127.0.0.1 purebot2.sytes.net # hosts anti-adware / pups

127.0.0.1 push.ping.com # hosts anti-adware / pups

127.0.0.1 puto.com # hosts anti-adware / pups

127.0.0.1 qiweol.info # hosts anti-adware / pups

127.0.0.1 quad-anti-spyware.com # hosts anti-adware / pups

127.0.0.1 quad-eaner.com # hosts anti-adware / pups

127.0.0.1 quadriviuma.eu # hosts anti-adware / pups

127.0.0.1 qualityhqporn.com # hosts anti-adware / pups

127.0.0.1 quegeek.com # hosts anti-adware / pups

127.0.0.1 qumxav.changeip.name # hosts anti-adware / pups

127.0.0.1 qwe.goforfiles.com # hosts anti-adware / pups

127.0.0.1 real-boardsz.eu # hosts anti-adware / pups

127.0.0.1 real-cenesz.eu # hosts anti-adware / pups

127.0.0.1 real-centresz.eu # hosts anti-adware / pups

127.0.0.1 redir.ballysbs.com # hosts anti-adware / pups

127.0.0.1 redirect.ad-feeds.net # hosts anti-adware / pups

127.0.0.1 reedomparty.com # hosts anti-adware / pups

127.0.0.1 reedompay.com # hosts anti-adware / pups

127.0.0.1 regarder-tv.com # hosts anti-adware / pups

127.0.0.1 regisybooster2010.fr # hosts anti-adware / pups

127.0.0.1 regisyonwindows.com # hosts anti-adware / pups

127.0.0.1 regisywinner.com # hosts anti-adware / pups

127.0.0.1 reimage.com # hosts anti-adware / pups

127.0.0.1 repair-my-pc.info # hosts anti-adware / pups

127.0.0.1 repair-pc-eors.info # hosts anti-adware / pups

127.0.0.1 repare-internet-explorer.com # hosts anti-adware / pups

127.0.0.1 reparer-windowsvista.com # hosts anti-adware / pups

127.0.0.1 reparer-windowsxp.com # hosts anti-adware / pups

127.0.0.1 reparez-internet-explorer.com # hosts anti-adware / pups

127.0.0.1 reparez-windows.com # hosts anti-adware / pups

127.0.0.1 reparez-windows.info # hosts anti-adware / pups

127.0.0.1 reparez-windows-vista.com # hosts anti-adware / pups

127.0.0.1 reparez-windows-xp.com # hosts anti-adware / pups

127.0.0.1 rester-anquile.com # hosts anti-adware / pups

127.0.0.1 reussiteaffiliation.com # hosts anti-adware / pups

127.0.0.1 rezinovsap.co.cc # hosts anti-adware / pups

127.0.0.1 rezinovsap.co. # hosts anti-adware / pups

127.0.0.1 ron.protectorwide.asia # hosts anti-adware / pups

127.0.0.1 rpc.hitexchangeserver.com # hosts anti-adware / pups

127.0.0.1 rp.funmoodscdn.com # hosts anti-adware / pups

127.0.0.1 rp.telechargercdn.com # hosts anti-adware / pups

127.0.0.1 rztube.com # hosts anti-adware / pups

127.0.0.1 s58036.gridserver.com # hosts anti-adware / pups

127.0.0.1 samcro.fr # hosts anti-adware / pups

127.0.0.1 satch2cash.com # hosts anti-adware / pups

127.0.0.1 scache.regiedepub.com # hosts anti-adware / pups

127.0.0.1 scriptsname.com # hosts anti-adware / pups

127.0.0.1 sdgsdgsdg.at.tf # hosts anti-adware / pups

127.0.0.1 search.babylon.com # hosts anti-adware / pups

127.0.0.1 searchqu.com # hosts anti-adware / pups

127.0.0.1 sec-france.info # hosts anti-adware / pups

127.0.0.1 securelinkdownload.com # hosts anti-adware / pups

127.0.0.1 securisedownload.com # hosts anti-adware / pups

127.0.0.1 seet-internet.com # hosts anti-adware / pups

127.0.0.1 semsols123.comodo.revenuewire.net # hosts anti-adware / pups

127.0.0.1 semsols123.comodo.safeca.com # hosts anti-adware / pups

127.0.0.1 servicemap.conduit-services.com # hosts anti-adware / pups

127.0.0.1 service.yontoo.com # hosts anti-adware / pups

127.0.0.1 serw2.chujon.info # hosts anti-adware / pups

127.0.0.1 serw.icksor.com # hosts anti-adware / pups

127.0.0.1 serw.lunjli.info # hosts anti-adware / pups

127.0.0.1 serw.schworis.com # hosts anti-adware / pups

127.0.0.1 setup2.iminent.com # hosts anti-adware / pups

127.0.0.1 sexanaltube.com # hosts anti-adware / pups

127.0.0.1 sex-here.com # hosts anti-adware / pups

127.0.0.1 sex-lites.com # hosts anti-adware / pups

127.0.0.1 sexopartynow.biz # hosts anti-adware / pups

127.0.0.1 sexsweetie.com # hosts anti-adware / pups

127.0.0.1 sexvamnet.com # hosts anti-adware / pups

127.0.0.1 sexvideofile.com # hosts anti-adware / pups

127.0.0.1 sexvideomix.biz # hosts anti-adware / pups

127.0.0.1 sexwetgirls.com # hosts anti-adware / pups

127.0.0.1 sexwetgis.com # hosts anti-adware / pups

127.0.0.1 sexwu.com # hosts anti-adware / pups

127.0.0.1 sexycats18yearme.com # hosts anti-adware / pups

127.0.0.1 sexysatan.com # hosts anti-adware / pups

127.0.0.1 sexywally.com # hosts anti-adware / pups

127.0.0.1 sexyway.com # hosts anti-adware / pups

127.0.0.1 siterusza.eu # hosts anti-adware / pups

127.0.0.1 skype.telecharger-france.com # hosts anti-adware / pups

127.0.0.1 slotonlinecasino.org # hosts anti-adware / pups

127.0.0.1 sms-rostovs.eu # hosts anti-adware / pups

127.0.0.1 socialmediahelpme.info # hosts anti-adware / pups

127.0.0.1 soft-2011.com # hosts anti-adware / pups

127.0.0.1 soft2pcfr.com # hosts anti-adware / pups

127.0.0.1 soft4click.com # hosts anti-adware / pups

127.0.0.1 soft.foxtab.com # hosts anti-adware / pups

127.0.0.1 softgratuit.com # hosts anti-adware / pups

127.0.0.1 softigloo.com # hosts anti-adware / pups

127.0.0.1 softingo.com # hosts anti-adware / pups

127.0.0.1 softmor.org # hosts anti-adware / pups

127.0.0.1 soft.tc # hosts anti-adware / pups

127.0.0.1 soft.telecharger.com # hosts anti-adware / pups

127.0.0.1 software.cdnredire01.info # hosts anti-adware / pups

127.0.0.1 softwareprovisioning.com # hosts anti-adware / pups

127.0.0.1 softwares.the-ad.net # hosts anti-adware / pups

127.0.0.1 software.the-ad.net # hosts anti-adware / pups

127.0.0.1 solutionsmiions.com # hosts anti-adware / pups

127.0.0.1 sondages-remuneres.net # hosts anti-adware / pups

127.0.0.1 spamfighter.com # hosts anti-adware / pups

127.0.0.1 speedmaxpc.com # hosts anti-adware / pups

127.0.0.1 spoau.com # hosts anti-adware / pups

127.0.0.1 spybotseah-full.info # hosts anti-adware / pups

127.0.0.1 spynomore.com # hosts anti-adware / pups

127.0.0.1 spywareremove.com # hosts anti-adware / pups

127.0.0.1 static.bicdn.com # hosts anti-adware / pups

127.0.0.1 static.v2.madodls.com # hosts anti-adware / pups

127.0.0.1 step.yourfiledownloader.com # hosts anti-adware / pups

127.0.0.1 storage.conduit.com # hosts anti-adware / pups

127.0.0.1 storagenl.info # hosts anti-adware / pups

127.0.0.1 stp.babylon.com # hosts anti-adware / pups

127.0.0.1 stream-actu.com # hosts anti-adware / pups

127.0.0.1 streaming-direct.tv # hosts anti-adware / pups

127.0.0.1 streaming-vlc.com # hosts anti-adware / pups

127.0.0.1 suesliberte.net # hosts anti-adware / pups

127.0.0.1 suppo0070.homelinux.com # hosts anti-adware / pups

127.0.0.1 suppo211.dnsalias.com # hosts anti-adware / pups

127.0.0.1 suppo533333.homelinux.net # hosts anti-adware / pups

127.0.0.1 suppo8881.homelinux.com # hosts anti-adware / pups

127.0.0.1 support0070.homelinux.com # hosts anti-adware / pups

127.0.0.1 support211.dnsalias.com # hosts anti-adware / pups

127.0.0.1 support533333.homelinux.net # hosts anti-adware / pups

127.0.0.1 support8881.homelinux.com # hosts anti-adware / pups

127.0.0.1 supprimeevirus.blogspot.com # hosts anti-adware / pups

127.0.0.1 supprimeevirus.blogspot.fr # hosts anti-adware / pups

127.0.0.1 supprimer-spyware.com # hosts anti-adware / pups

127.0.0.1 sweethoneysexbaby.com # hosts anti-adware / pups

127.0.0.1 swetkittyxxx.biz # hosts anti-adware / pups

127.0.0.1 sybiedejanville.com # hosts anti-adware / pups

127.0.0.1 tarhankyte.info # hosts anti-adware / pups

127.0.0.1 telecharger-0.driverutilities.com # hosts anti-adware / pups

127.0.0.1 telecharger-2012.com # hosts anti-adware / pups

127.0.0.1 telecharger-gratuit.com # hosts anti-adware / pups

127.0.0.1 telecharger.logiciel.net # hosts anti-adware / pups

127.0.0.1 tele-charger.org # hosts anti-adware / pups

127.0.0.1 telecharger.toggle.com # hosts anti-adware / pups

127.0.0.1 test.auvixa.com # hosts anti-adware / pups

127.0.0.1 test.rooferslongislandroofing.com # hosts anti-adware / pups

127.0.0.1 the0606.com # hosts anti-adware / pups

127.0.0.1 thebestonlinecasino.org # hosts anti-adware / pups

127.0.0.1 theparadiseisland.net # hosts anti-adware / pups

127.0.0.1 tioblipla.com # hosts anti-adware / pups

127.0.0.1 todownloadcdn.com # hosts anti-adware / pups

127.0.0.1 top-2011.com # hosts anti-adware / pups

127.0.0.1 top-2012.com # hosts anti-adware / pups

127.0.0.1 top-regisy-cleaner.net # hosts anti-adware / pups

127.0.0.1 totaediaconverter-u.com # hosts anti-adware / pups

127.0.0.1 totalmediaconverter-u.com # hosts anti-adware / pups

127.0.0.1 totalmediaconverter-u.com # hosts anti-adware / pups

127.0.0.1 trackstatsnow.com # hosts anti-adware / pups

127.0.0.1 tradeartss.eu # hosts anti-adware / pups

127.0.0.1 trafficadward.homelinux.com # hosts anti-adware / pups

127.0.0.1 truitow.info # hosts anti-adware / pups

127.0.0.1 tube4free.zorfu.com # hosts anti-adware / pups

127.0.0.1 tuheyds.changeip.name # hosts anti-adware / pups

127.0.0.1 tuto4pc.com # hosts anti-adware / pups

127.0.0.1 tutoriales100.com # hosts anti-adware / pups

127.0.0.1 tv-dire.fr # hosts anti-adware / pups

127.0.0.1 tviexpress-france.com # hosts anti-adware / pups

127.0.0.1 tvuzz.com # hosts anti-adware / pups

127.0.0.1 tweaks-soft.com # hosts anti-adware / pups

127.0.0.1 ub-positif.com # hosts anti-adware / pups

127.0.0.1 ude.conduit-data.com # hosts anti-adware / pups

127.0.0.1 uitow.info # hosts anti-adware / pups

127.0.0.1 uniblue.com # hosts anti-adware / pups

127.0.0.1 universal-downloader.en.softonic.com # hosts anti-adware / pups

127.0.0.1 universal-downloader.softonic.fr # hosts anti-adware / pups

127.0.0.1 up.lollipop-network.com # hosts anti-adware / pups

127.0.0.1 uprsimy.changeip.org # hosts anti-adware / pups

127.0.0.1 usage.toolbar.conduit-services.com # hosts anti-adware / pups

127.0.0.1 us.mambasextube.com # hosts anti-adware / pups

127.0.0.1 us-vegascasino.org # hosts anti-adware / pups

127.0.0.1 utoent-net.info # hosts anti-adware / pups

127.0.0.1 utorrent.portalux.com # hosts anti-adware / pups

127.0.0.1 uwjem.info # hosts anti-adware / pups

127.0.0.1 vatsonandson.uk.to # hosts anti-adware / pups

127.0.0.1 vechernieb.co.cc # hosts anti-adware / pups

127.0.0.1 vechernieb.co. # hosts anti-adware / pups

127.0.0.1 version.etype.com # hosts anti-adware / pups

127.0.0.1 viccpm03.victoryproads.com # hosts anti-adware / pups

127.0.0.1 viccpm08.victoryproads.com # hosts anti-adware / pups

127.0.0.1 viccpm08.victoryproads.com # hosts anti-adware / pups

127.0.0.1 videodirectory9.info # hosts anti-adware / pups

127.0.0.1 videodownloadconveer.com # hosts anti-adware / pups

127.0.0.1 videofer.us # hosts anti-adware / pups

127.0.0.1 vipm03.victoryproads.com # hosts anti-adware / pups

127.0.0.1 vipm08.victoryproads.com # hosts anti-adware / pups

127.0.0.1 virbanks.com # hosts anti-adware / pups

127.0.0.1 visicommedia.com # hosts anti-adware / pups

127.0.0.1 vistacodec-2010.com # hosts anti-adware / pups

127.0.0.1 vizihq.info # hosts anti-adware / pups

127.0.0.1 vlc.load4free.net # hosts anti-adware / pups

127.0.0.1 voe-travail-a-domicile.com # hosts anti-adware / pups

127.0.0.1 vos-revenus-sur-internet.com # hosts anti-adware / pups

127.0.0.1 vsharetv.ouoolbar.com # hosts anti-adware / pups

127.0.0.1 wa2go.com # hosts anti-adware / pups

127.0.0.1 want.suck-my-candy.com # hosts anti-adware / pups

127.0.0.1 webplayerddl.com # hosts anti-adware / pups

127.0.0.1 webplayer.tv # hosts anti-adware / pups

127.0.0.1 wefightbadware.org # hosts anti-adware / pups

127.0.0.1 westopmalware.org # hosts anti-adware / pups

127.0.0.1 widgets.wizebar.com # hosts anti-adware / pups

127.0.0.1 wildmedianetwork.com # hosts anti-adware / pups

127.0.0.1 win1.winsprodco.info # hosts anti-adware / pups

127.0.0.1 wincr1.winsprodco.info # hosts anti-adware / pups

127.0.0.1 winpoal.fr # hosts anti-adware / pups

127.0.0.1 winskeat.fr # hosts anti-adware / pups

127.0.0.1 winzip-fu.net # hosts anti-adware / pups

127.0.0.1 wiseconve.com # hosts anti-adware / pups

127.0.0.1 wiseconvert15.greattoolbars.com # hosts anti-adware / pups

127.0.0.1 wiseconvert.com # hosts anti-adware / pups

127.0.0.1 wlroxe.changeip.name # hosts anti-adware / pups

127.0.0.1 wtseleions.com # hosts anti-adware / pups

127.0.0.1 www.01-telecharger.com # hosts anti-adware / pups

127.0.0.1 www.123mplayer.com # hosts anti-adware / pups

127.0.0.1 www.2012-plus.org # hosts anti-adware / pups

127.0.0.1 www.2607.cn # hosts anti-adware / pups

127.0.0.1 www2l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www.2-spyware.com # hosts anti-adware / pups

127.0.0.1 www3l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www.411-spyware.com # hosts anti-adware / pups

127.0.0.1 www4l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www5l.incredimail.com # hosts anti-adware / pups

127.0.0.1 www.80worldnewstoday.info # hosts anti-adware / pups

127.0.0.1 www.ackdlstat.com # hosts anti-adware / pups

127.0.0.1 www.ackinn.com # hosts anti-adware / pups

127.0.0.1 www.acksguru.com # hosts anti-adware / pups

127.0.0.1 www.affiliation-france.com # hosts anti-adware / pups

127.0.0.1 www.affpx.com # hosts anti-adware / pups

127.0.0.1 www.agence-exusive.com # hosts anti-adware / pups

127.0.0.1 www.alcoporn.com # hosts anti-adware / pups

127.0.0.1 www.alterporn.com # hosts anti-adware / pups

127.0.0.1 www.americanpendulum.com # hosts anti-adware / pups

127.0.0.1 www.amonetizeinstaller.com # hosts anti-adware / pups

127.0.0.1 www.anti-spyware-101.com # hosts anti-adware / pups

127.0.0.1 www.anvisoft.com # hosts anti-adware / pups

127.0.0.1 www.aoporn.com # hosts anti-adware / pups

127.0.0.1 www.appround.biz # hosts anti-adware / pups

127.0.0.1 www.appround.net # hosts anti-adware / pups

127.0.0.1 www.asoftwareplus.com # hosts anti-adware / pups

127.0.0.1 www.assure-le.com # hosts anti-adware / pups

127.0.0.1 www.babesandgirls.com # hosts anti-adware / pups

127.0.0.1 www.babylon.com # hosts anti-adware / pups

127.0.0.1 www.bigspeedpro.com # hosts anti-adware / pups

127.0.0.1 www.bioartmed.com # hosts anti-adware / pups

127.0.0.1 www.bit89.com # hosts anti-adware / pups

127.0.0.1 www.bit-mania.com # hosts anti-adware / pups

127.0.0.1 www.boxore.com # hosts anti-adware / pups

127.0.0.1 www.byteseeder.com # hosts anti-adware / pups

127.0.0.1 www.chehe.us # hosts anti-adware / pups

127.0.0.1 www.cloud4widget.com # hosts anti-adware / pups

127.0.0.1 www.cojan13fast.com # hosts anti-adware / pups

127.0.0.1 www.cool-applications.com # hosts anti-adware / pups

127.0.0.1 www.coupon-miner.com # hosts anti-adware / pups

127.0.0.1 www.createstockdoingzero.biz # hosts anti-adware / pups

127.0.0.1 www.cyberfitex.com # hosts anti-adware / pups

127.0.0.1 www.danager.net # hosts anti-adware / pups

127.0.0.1 www.dataatimeast.com # hosts anti-adware / pups

127.0.0.1 www.deletevirus.net # hosts anti-adware / pups

127.0.0.1 www.dlsafebrowse.com # hosts anti-adware / pups

127.0.0.1 www.dmralumni.com # hosts anti-adware / pups

127.0.0.1 www.downlesoft.com # hosts anti-adware / pups

127.0.0.1 www.download-best-softwares.com # hosts anti-adware / pups

127.0.0.1 www.download-free.com # hosts anti-adware / pups

127.0.0.1 www.downloadsoftfr.com # hosts anti-adware / pups

127.0.0.1 www.downxsoft.com # hosts anti-adware / pups

127.0.0.1 www.downxsoft.com # hosts anti-adware / pups

127.0.0.1 www.drawingincests.com # hosts anti-adware / pups

127.0.0.1 www.eanallvirus.com # hosts anti-adware / pups

127.0.0.1 www.easycuisinevideo.com # hosts anti-adware / pups

127.0.0.1 www.easy-money-making-idea.info # hosts anti-adware / pups

127.0.0.1 www.e-downloader.net # hosts anti-adware / pups

127.0.0.1 www.enigmasoftware.com # hosts anti-adware / pups

127.0.0.1 www.eorezo.com # hosts anti-adware / pups

127.0.0.1 www.ericmok.ca # hosts anti-adware / pups

127.0.0.1 www.eximdownloadmanager.com # hosts anti-adware / pups

127.0.0.1 www.extreme-down.com # hosts anti-adware / pups

127.0.0.1 www.extrimdownloadmanager.com # hosts anti-adware / pups

127.0.0.1 www.fasterpleanclean.com # hosts anti-adware / pups

127.0.0.1 www.fcgoatcalear.us # hosts anti-adware / pups

127.0.0.1 www.fixie.com # hosts anti-adware / pups

127.0.0.1 www.flash-player-france.com # hosts anti-adware / pups

127.0.0.1 www.freeamateulub.org # hosts anti-adware / pups

127.0.0.1 www.freeamateurclub.org # hosts anti-adware / pups

127.0.0.1 www.freetadio.com # hosts anti-adware / pups

127.0.0.1 www.frflashplayer.com # hosts anti-adware / pups

127.0.0.1 www.getdatafromeast.com # hosts anti-adware / pups

127.0.0.1 www.getyoursoft.com # hosts anti-adware / pups

127.0.0.1 www.girlsfriendxxx.net # hosts anti-adware / pups

127.0.0.1 www.gisfriendxxx.net # hosts anti-adware / pups

127.0.0.1 www.globe7.com # hosts anti-adware / pups

127.0.0.1 www.gogetmoneynow.com # hosts anti-adware / pups

127.0.0.1 www.gpil.org # hosts anti-adware / pups

127.0.0.1 www.grabatimstat.us # hosts anti-adware / pups

127.0.0.1 www.grandwesternliquors.com # hosts anti-adware / pups

127.0.0.1 www.gratuit-telecharger.com # hosts anti-adware / pups

127.0.0.1 www.haycfld.us # hosts anti-adware / pups

127.0.0.1 www.haycfld.us/htmlscreens # hosts anti-adware / pups

127.0.0.1 www.herz-fuer-musik.de # hosts anti-adware / pups

127.0.0.1 www.homepa.ge # hosts anti-adware / pups

127.0.0.1 www.hubbywatcheswife.biz # hosts anti-adware / pups

127.0.0.1 www.ilivid.com # hosts anti-adware / pups

127.0.0.1 www.instatrk.com # hosts anti-adware / pups

127.0.0.1 www.kerasos.co # hosts anti-adware / pups

127.0.0.1 www.kerion.pt # hosts anti-adware / pups

127.0.0.1 www.keygendb.com # hosts anti-adware / pups

127.0.0.1 www.kiallvirus.com # hosts anti-adware / pups

127.0.0.1 www.koyotesoft.com # hosts anti-adware / pups

127.0.0.1 www.lavideobuzz.com # hosts anti-adware / pups

127.0.0.1 www.livecamsxxxnow.com # hosts anti-adware / pups

127.0.0.1 www.mature-vulva.org # hosts anti-adware / pups

127.0.0.1 www.media-app.com # hosts anti-adware / pups

127.0.0.1 www.messengerdusexe.com # hosts anti-adware / pups

127.0.0.1 www.messyxxxtube.biz # hosts anti-adware / pups

127.0.0.1 www.messyxxxtube.biz # hosts anti-adware / pups

127.0.0.1 www.mickyfastdl.com # hosts anti-adware / pups

127.0.0.1 www.milfbeach.net # hosts anti-adware / pups

127.0.0.1 www.milkiwaytuber.com # hosts anti-adware / pups

127.0.0.1 www.mljanthrunorth.us # hosts anti-adware / pups

127.0.0.1 www.moviehuts.com # hosts anti-adware / pups

127.0.0.1 www.moviewodsite.com # hosts anti-adware / pups

127.0.0.1 www.mspyapps.com # hosts anti-adware / pups

127.0.0.1 www.mspylogs.com # hosts anti-adware / pups

127.0.0.1 www.mybestpenis.com # hosts anti-adware / pups

127.0.0.1 www.mypussygirls.com # hosts anti-adware / pups

127.0.0.1 www.mypussygis.com # hosts anti-adware / pups

127.0.0.1 www.mysexysister.biz # hosts anti-adware / pups

127.0.0.1 www.nbconsuing.nl # hosts anti-adware / pups

127.0.0.1 www.nbconsulting.nl # hosts anti-adware / pups

127.0.0.1 www.neoyersonpc.org # hosts anti-adware / pups

127.0.0.1 www.nlstorage.info # hosts anti-adware / pups

127.0.0.1 www.nouveau-avast.com # hosts anti-adware / pups

127.0.0.1 www.officialvideoconverter.com # hosts anti-adware / pups

127.0.0.1 www.oldmo.org # hosts anti-adware / pups

127.0.0.1 www.openadserving.com # hosts anti-adware / pups

127.0.0.1 www.piraterfacebook.ws # hosts anti-adware / pups

127.0.0.1 www.pisk.com # hosts anti-adware / pups

127.0.0.1 www.playerplus.com # hosts anti-adware / pups

127.0.0.1 www.pornuv.net # hosts anti-adware / pups

127.0.0.1 www.powerpackdl.com # hosts anti-adware / pups

127.0.0.1 www.premiumdownload.org # hosts anti-adware / pups

127.0.0.1 www.putlocker-downloader.com # hosts anti-adware / pups

127.0.0.1 www.puto.com # hosts anti-adware / pups

127.0.0.1 www.reallycoolapp.com # hosts anti-adware / pups

127.0.0.1 www.realtinypussy.org # hosts anti-adware / pups

127.0.0.1 www.rediremylink.com # hosts anti-adware / pups

127.0.0.1 www.removeonline.com # hosts anti-adware / pups

127.0.0.1 www.retrogamer.com # hosts anti-adware / pups

127.0.0.1 www.sckarteast.us # hosts anti-adware / pups

127.0.0.1 www.sendfilesapp.com # hosts anti-adware / pups

127.0.0.1 www.sexoss.net # hosts anti-adware / pups

127.0.0.1 www.silentpornotube.com # hosts anti-adware / pups

127.0.0.1 www.smuss.net # hosts anti-adware / pups

127.0.0.1 www.softesdown.com # hosts anti-adware / pups

127.0.0.1 www.softologic.com # hosts anti-adware / pups

127.0.0.1 www.softologicsc.com # hosts anti-adware / pups

127.0.0.1 www.software-files.net # hosts anti-adware / pups

127.0.0.1 www.softwaresbay.com # hosts anti-adware / pups

127.0.0.1 www.speedypc.com # hosts anti-adware / pups

127.0.0.1 www.sps-experten.de # hosts anti-adware / pups

127.0.0.1 www.spywarehelpcenter.com # hosts anti-adware / pups

127.0.0.1 www.spywarehelpcenter.com # hosts anti-adware / pups

127.0.0.1 www.spywareremove.com # hosts anti-adware / pups

127.0.0.1 www.streaminghds.com # hosts anti-adware / pups

127.0.0.1 www.supprimer-spyware.org # hosts anti-adware / pups

127.0.0.1 www.telecharger-facile.com # hosts anti-adware / pups

127.0.0.1 www.telechargers.net # hosts anti-adware / pups

127.0.0.1 www.thelivetech.com # hosts anti-adware / pups

127.0.0.1 www.tiptopsoft.org # hosts anti-adware / pups

127.0.0.1 www.toplugs.com # hosts anti-adware / pups

127.0.0.1 www.tuto4pc.com # hosts anti-adware / pups

127.0.0.1 www.uniblue.com # hosts anti-adware / pups

127.0.0.1 www.videoconveertool.net # hosts anti-adware / pups

127.0.0.1 www.videodownloadconverter.com # hosts anti-adware / pups

127.0.0.1 www.videoipa.com # hosts anti-adware / pups

127.0.0.1 www.videoplusmusic.com # hosts anti-adware / pups

127.0.0.1 www.vioplayer.com # hosts anti-adware / pups

127.0.0.1 www.viuagirl.com # hosts anti-adware / pups

127.0.0.1 www.wajam.com # hosts anti-adware / pups

127.0.0.1 www.wiki-security.com # hosts anti-adware / pups

127.0.0.1 www.windownloader24.com # hosts anti-adware / pups

127.0.0.1 www.winload.de # hosts anti-adware / pups

127.0.0.1 www.winpoal.fr # hosts anti-adware / pups

127.0.0.1 www.wisedownloads.com # hosts anti-adware / pups

127.0.0.1 www.wslinx.com # hosts anti-adware / pups

127.0.0.1 www.xlplayer.com # hosts anti-adware / pups

127.0.0.1 xmlinsp.ddbbvt.eu # hosts anti-adware / pups

127.0.0.1 xmlinstcp.ddbbvt.eu # hosts anti-adware / pups

127.0.0.1 xxxgifan.com # hosts anti-adware / pups

127.0.0.1 xxxgirlfan.com # hosts anti-adware / pups

127.0.0.1 xxx-values.com # hosts anti-adware / pups

127.0.0.1 youngporn.it # hosts anti-adware / pups

127.0.0.1 youngporn.it # hosts anti-adware / pups

127.0.0.1 yourfiledownloader.net # hosts anti-adware / pups

127.0.0.1 youwatch.org # hosts anti-adware / pups

127.0.0.1 yrueo.info # hosts anti-adware / pups

127.0.0.1 zvswmqoh.changeip.name # hosts anti-adware / pups

ADWcleaner scan

# AdwCleaner v2.301 - Logfile created 05/23/2013 at 06:52:14

# Updated 16/05/2013 by Xplode

# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)

# User : Chris - BOSS

# Boot Mode : Normal

# Running from : F:\Downloads\AdwCleaner.exe

# Option [search]

***** [services] *****

***** [Files / Folders] *****

***** [Registry] *****

***** [internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16576

[OK] Registry is clean.

-\\ Mozilla Firefox v21.0 (en-US)

File : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v26.0.1410.64

File : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.2949] : urls_to_restore_on_startup = [ "hxxp://www.google.com", "hxxp://www.mystart.com/?pr=vmn&id=toolbarcleaner&v=1_1" ]

*************************

AdwCleaner[R1].txt - [2844 octets] - [21/05/2013 08:00:05]

AdwCleaner[R2].txt - [1138 octets] - [21/05/2013 08:37:34]

AdwCleaner[R3].txt - [1220 octets] - [22/05/2013 09:18:51]

AdwCleaner[R4].txt - [1083 octets] - [23/05/2013 06:52:14]

AdwCleaner[s1].txt - [2793 octets] - [21/05/2013 08:00:41]

########## EOF - C:\AdwCleaner[R4].txt - [1203 octets] ##########

ESET scan

C:\del\mmCM ver 04.05.00 FULL (20120821)\apps_pc\aldo's tools\misc tools\install_ps3tools.exe probably unknown NewHeur_PE virus deleted - quarantined

C:\My Games\Alawar\Downloads\DiscordTimes_2509.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

C:\My Games\Alawar\Downloads\FashionSeason_2509.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

C:\Program Files (x86)\RealArcade\Installer\bin\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined

D:\Users\chris\Downloads\SetupImgBurn_2.5.5.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

D:\Users\chris\Dropbox\Programs\cpu-z_1.57-setup-en.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

D:\Users\chris\Dropbox\Programs\eac-0.99pb5.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

D:\Users\chris\Dropbox\Programs\Top 30 Freeware programs\cdbxp_setup_4.3.5.2256.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

D:\Users\chris\Dropbox\Programs\Top 30 Freeware programs\Hirens.BootCD.10.4.zip Win32/PSWTool.KonBoot.A application deleted - quarantined

D:\Users\chris\Dropbox\Programs\Top 30 Freeware programs\kmp.exe multiple threats cleaned by deleting - quarantined

E:\Goginst\The Chronicles of Riddick - Assault on Dark Athena\System\Win32_x86\dvm.dll a variant of Win32/HackTool.Crack.D application cleaned by deleting - quarantined

F:\Downloads\cnet_JoyToKey_en_zip.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined

F:\Downloads\DriverSweeper_3.2.0.exe Win32/OpenCandy application cleaned by deleting - quarantined

F:\Downloads\duplicate-file-finder-setup.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Downloads\DuplicateCleaner_setup.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Downloads\Facemoods.exe a variant of Win32/SweetIM.B application cleaned by deleting - quarantined

F:\Downloads\LiGHTFORCE.rar a variant of MSIL/Kryptik.HU trojan deleted - quarantined

F:\Downloads\mmCM ver 04.05.00 FULL 20120821.rar.exe Win32/InstallMate application cleaned by deleting - quarantined

F:\Downloads\mmCM ver 04.05.00 FULL (20120821).rar probably unknown NewHeur_PE virus deleted - quarantined

F:\Downloads\Power_Data_Recovery.exe MSIL/Solimba application cleaned by deleting - quarantined

F:\Downloads\SetupImgBurn_2.5.5.0_001.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Downloads\SetupImgBurn_2.5.6.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Downloads\undeleteplus_setup_ask(1).exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Downloads\undeleteplus_setup_ask.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Downloads\VideoCutterSetup.exe multiple threats cleaned by deleting - quarantined

F:\Downloads\winamp5622_full_emusic-7plus_en-us.exe Win32/OpenCandy application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\cpu-z_1.57-setup-en.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\DriverSweeper_3.2.0.exe Win32/OpenCandy application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\eac-0.99pb5.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\SetupImgBurn_2.5.5.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\Unlocker1[1].9.0-x64.exe Win32/Adware.ADON application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\Audiograbber\agsetup183se.exe a variant of Win32/Toolbar.Funmoods application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\Free Undelete\cbsidlm-cbsi4_1_4-Wise_Data_Recovery-75715872.exe a variant of Win32/CNETInstaller.A application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\Top 30 Freeware programs\cdbxp_setup_4.3.5.2256.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

F:\Dropbox\Dropbox\Programs\Top 30 Freeware programs\Hirens.BootCD.10.4.zip Win32/PSWTool.KonBoot.A application deleted - quarantined

F:\Dropbox\Dropbox\Programs\Top 30 Freeware programs\kmp.exe multiple threats cleaned by deleting - quarantined

F:\process\Avery Wizard 4.01 - US 20111209.exe a variant of Win32/Bundled.Toolbar.Ask application deleted - quarantined

F:\process\cdbxp_setup_4.5.0.3717.exe Win32/OpenCandy application cleaned by deleting - quarantined

F:\_kingston mem stick\progs\purplera1n.exe probably a variant of Win32/Agent.ENLPEUB trojan cleaned by deleting - quarantined

Share this post


Link to post
Share on other sites

Download AVPTool from Here to your desktop

Run the programme you have just downloaded to your desktop (it will be randomly named)

Click the cog in the upper right

AVPfront.gif

Select down to and including your main drive, once done select the Automatic scan tab and press Start Scan

avpsettings.gif

Allow AVP to delete all infections found

Once it has finished select report tab (last tab)

Select Detected threads report from the left and press Save button

Save it to your desktop and post it in your next reply.

Share this post


Link to post
Share on other sites

Kaspersky crashed after 36 hours, nothing detected. I will rerun it.

Share this post


Link to post
Share on other sites

Let me know how are things after that.

Share this post


Link to post
Share on other sites

After 2 or 3 days it crashed again, i haven't seen signs of detected viruses with kaspersky before the crash. Is there a log i can find even if it crashed? What step should i do next or should i do a reduced scan (i did one with all of the boxes you suggested checked with the exception of "My Computer" - no virus's detected and that included the C drive.

Share this post


Link to post
Share on other sites

Hello again Maniac,

Thanks for your help so far. Here is a summary of where i am since i haven't seen a reply since May 27th - I am thinking of reformatting.

There are currently no detections on any of the programs you have had me run however 2 of them have crashed (Kaspersky crashes after 2 days, but didn't crash when i unchecked "My computer" - It detects nothing when i have all checked as you suggested including C drive, but not "My computer". Also Roguekiller crashes on MBR scan. I am able to run roguekiller successfully with all but mbr scan.

The only symptom i have of being hacked is that each time i reboot, it attempts to create a new hosts file (which it cannot because i have made the hosts file read only) - I can tell this by finding a hosts file in c:\windows\temp created upon reboot after being deleted. I do not know which process is making this file.

Where shall i proceed now? Thanks

Christian

Share this post


Link to post
Share on other sites

Here is a current Hijackthis scan

Logfile of Trend Micro HijackThis v2.0.5

Scan saved at 7:58:39 AM, on 6/5/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16576)

FIREFOX: 21.0 (en-US)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Everything\Everything.exe

C:\Program Files (x86)\ASRock Utility\AXTU\Bin\AsrXTU.exe

C:\Program Files (x86)\AnVir Task Manager\anvir.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\System32\PrintDisp.exe

C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe

C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe

C:\hotkeyp\HotkeyP.exe

C:\Program Files (x86)\Origin\Origin.exe

I:\Steam\Steam.exe

C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe

C:\Program Files\CrashPlan\CrashPlanTray.exe

C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe

C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

C:\Users\Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Windows\SSDriver\fi5110\SsWiaChecker.exe

C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

C:\Program Files (x86)\PDF24\pdf24.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\PROGRA~2\Raptr\raptr.exe

C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe

C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe

C:\PROGRA~2\Raptr\raptr_im.exe

C:\Program Files (x86)\Desura\desura.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Users\Chris\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe

C:\Program Files (x86)\iTunes\iTunes.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe

C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe

C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

F:\Downloads\HijackThis(2).exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll

O2 - BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60

O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s

O4 - HKLM\..\Run: [scanSnap WIA Service Checker] C:\Windows\SSDriver\fi5110\SsWiaChecker.exe

O4 - HKLM\..\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [HOSTS Anti-Adware_PUPs] C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe

O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\Chris\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [superCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe

O4 - HKCU\..\Run: [F.lux] "C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe" /noshow

O4 - HKCU\..\Run: [HotkeyP] C:\hotkeyp\HotkeyP.exe 0

O4 - HKCU\..\Run: [Desura] C:\Program Files (x86)\Desura\desura.exe -autostart

O4 - HKCU\..\Run: [GOG.com Downloader] C:\Program Files (x86)\GOG.com\GOG.com Downloader.exe -autostart

O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

O4 - HKCU\..\Run: [steam] "I:\Steam\steam.exe" -silent

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

O4 - Global Startup: CardMinder Viewer.lnk = ?

O4 - Global Startup: Conversion to PDF with ScanSnap Organizer.lnk = ?

O4 - Global Startup: CrashPlan Tray.lnk = C:\Program Files\CrashPlan\CrashPlanTray.exe

O4 - Global Startup: ScanSnap Manager.lnk = ?

O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3

O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1

O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000

O8 - Extra context menu item: LastPass - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=lastpass

O8 - Extra context menu item: LastPass Fill Forms - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=fillforms

O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html

O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O9 - Extra 'Tools' menuitem: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: CrashPlan Backup Service (CrashPlanService) - CrashPlan - C:\Program Files\CrashPlan\CrashPlanService.exe

O23 - Service: Desura Install Service - Desura Pty Ltd - C:\Program Files (x86)\Common Files\Desura\desura_service.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HOSTS Anti-PUPs - Unknown owner - C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe

O23 - Service: Printer Control - Unknown owner - C:\Windows\system32\PrintCtrl.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - C:\Program Files\Sandboxie\SbieSvc.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe

O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - Unknown owner - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (file missing)

O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

O23 - Service: TomTomHOMEService - TomTom - d:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 16951 bytes

Share this post


Link to post
Share on other sites

Here is the roguekiller crash - as you can see there are 4 detections in registry when it crashes on the MBR scan.

post-140203-0-62615300-1370450724.png

Share this post


Link to post
Share on other sites

Here is roguekiller report without the MBR Scan

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Chris [Admin rights]

Mode : Scan -- Date : 06/05/2013 08:52:29

| ARK || FAK |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 4 ¤¤¤

[services][ROGUE ST] HKLM\[...]\ControlSet001\Services\66687245 (C:\Windows\system32\DRIVERS\66687245.sys) -> FOUND

[services][ROGUE ST] HKLM\[...]\ControlSet002\Services\66687245 (C:\Windows\system32\DRIVERS\66687245.sys) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ Extern Hives: ¤¤¤

-> D:\windows\system32\config\SOFTWARE

-> D:\windows\system32\config\SYSTEM

-> D:\Users\chris\NTUSER.DAT

-> D:\Users\Default\NTUSER.DAT

-> D:\Users\Default User\NTUSER.DAT

-> D:\Documents and Settings\Default\NTUSER.DAT

-> D:\Documents and Settings\Default User\NTUSER.DAT

¤¤¤ HOSTS File: ¤¤¤

--> C:\Windows\system32\drivers\etc\hosts

¤¤¤ MBR Check: ¤¤¤

Finished : << RKreport[3]_S_06052013_02d0852.txt >>

RKreport[1]_S_05222013_02d1343.txt ; RKreport[2]_S_05222013_02d1356.txt ; RKreport[3]_S_06052013_02d0852.txt

Share this post


Link to post
Share on other sites

Download aswMBR.exe to your desktop.

Double click the aswMBR.exe to run it

Click the "Scan" button to start scan

aswMBR2-1.gif

On completion of the scan click save log, save it to your desktop and post in your next reply

aswMBR2.png

Share this post


Link to post
Share on other sites

Log from aswMBR - i don't think i can attach MBR.DAT

aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software

Run date: 2013-06-05 17:17:11

-----------------------------

17:17:11.181 OS Version: Windows x64 6.1.7601 Service Pack 1

17:17:11.181 Number of processors: 4 586 0x2A07

17:17:11.182 ComputerName: BOSS UserName:

17:17:11.422 Initialize success

17:17:20.186 AVAST engine defs: 13060502

17:17:29.640 Disk 0 \Device\Harddisk0\DR0 -> \Device\Scsi\mv91xx1Port0Path0Target1Lun0

17:17:29.642 Disk 0 Vendor: ST3000DM CC24 Size: 2861588MB BusType: 11

17:17:29.644 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\00000077

17:17:29.645 Disk 1 Vendor: ATA_____ 0309 Size: 244198MB BusType: 11

17:17:29.647 Disk 2 \Device\Harddisk2\DR2 -> \Device\00000078

17:17:29.649 Disk 2 Vendor: ATA_____ CC1J Size: 1430799MB BusType: 11

17:17:29.651 Disk 3 \Device\Harddisk3\DR3 -> \Device\00000079

17:17:29.652 Disk 3 Vendor: ATA_____ CC1H Size: 1430799MB BusType: 11

17:17:29.655 Disk 4 \Device\Harddisk4\DR4 -> \Device\0000007a

17:17:29.657 Disk 4 Vendor: ATA_____ CC1H Size: 1430799MB BusType: 11

17:17:29.664 Disk 1 MBR read successfully

17:17:29.667 Disk 1 MBR scan

17:17:29.671 Disk 1 Windows 7 default MBR code

17:17:29.674 Disk 1 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048

17:17:29.690 Disk 1 Partition 2 00 07 HPFS/NTFS NTFS 244097 MB offset 206848

17:17:29.725 Disk 1 scanning C:\Windows\system32\drivers

17:17:35.227 Service scanning

17:17:54.485 Modules scanning

17:17:54.489 Disk 1 trace - called modules:

17:17:54.493 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStorF.sys vsflt61.sys ACPI.sys storport.sys hal.dll iaStorA.sys

17:17:54.496 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0xfffffa800fc1f060]

17:17:54.499 3 CLASSPNP.SYS[fffff88001c0143f] -> nt!IofCallDriver -> [0xfffffa800fb2ac50]

17:17:54.502 5 iaStorF.sys[fffff88001fe4168] -> nt!IofCallDriver -> [0xfffffa800fb27920]

17:17:54.505 7 vsflt61.sys[fffff88000fa80fd] -> nt!IofCallDriver -> [0xfffffa800fa1b040]

17:17:54.508 9 ACPI.sys[fffff88000ef77a1] -> nt!IofCallDriver -> \Device\00000077[0xfffffa800ea194d0]

17:17:54.708 AVAST engine scan C:\Windows

17:17:55.689 AVAST engine scan C:\Windows\system32

17:19:48.997 AVAST engine scan C:\Windows\system32\drivers

17:19:55.373 AVAST engine scan C:\Users\Chris

17:24:38.904 AVAST engine scan C:\ProgramData

17:25:24.441 Scan finished successfully

17:36:57.456 Disk 1 MBR has been saved successfully to "F:\Dropbox\Dropbox\spyware logs\MBR.dat"

17:36:57.490 The log file has been saved successfully to "F:\Dropbox\Dropbox\spyware logs\aswMBR.txt"

Share this post


Link to post
Share on other sites

I found through the process of elimination using msconfig that the following service was causing the system to attempt to rewrite the host file, when i uncheck on msconfig services the hosts file changes are not attempted when the machine reboots .

O23 - Service: HOSTS Anti-PUPs - Unknown owner - C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe.

In addition i sent the 2 files in that folder to virustotal.com and tthese are the virus positives that it returned me -

for hosts_anti-adware.exe

Antivirus

Result

Update

AVG

Worm/Autoit.AZCH

20130604

Commtouch

W32/Backdoor.BKTX-6301

20130604

Comodo

UnclassifiedMalware

20130604

Ikarus

Worm.Win32.AutoIt

20130604

McAfee

Artemis!59538D76EA7D

20130604

McAfee-GW-Edition

Artemis!59538D76EA7D

20130603

Norman

Suspicious_Gen2.VJEQF

20130604

TrendMicro-HouseCall

TROJ_GEN.RCBH1B1

20130604

VBA32

Trojan-Downloader.Autoit.gen

20130604

VIPRE

Trojan.Win32.Generic!BT

20130604

For HOSTS_Anti-Adware_main.exe which i do not see loaded as a service but is in the same directory -

AVG

Worm/Autoit.AZCI

20130603

Commtouch

W32/GenBl.C1DB9BDF!Olympus

20130603

Comodo

UnclassifiedMalware

20130603

Ikarus

Win32.SuspectCrc

20130603

McAfee

Artemis!C1DB9BDF885C

20130603

McAfee-GW-Edition

Artemis!C1DB9BDF885C

20130603

MicroWorld-eScan

Win32.SuspectCrc (ES)

20130603

Norman

BlacoleRef.Z

20130603

SUPERAntiSpyware

20130602

Symantec

WS.Reputation.1

20130603

TheHacker

20130601

TotalDefense

20130603

TrendMicro

20130603

TrendMicro-HouseCall

TROJ_GEN.R6AH1B9

20130603

VBA32

Trojan-Downloader.Autoit.gen

20130603

VIPRE

20130603

ViRobot

20130603

Share this post


Link to post
Share on other sites

Download OTL to your Desktop

  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Please tick the Scan All users. Next, click the Quick Scan button. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

Share this post


Link to post
Share on other sites

OTL.txt - 1 of 2 (too long)

dTimer - Version 3.2.69.0 Folder = F:\Downloads

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16576)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.98 Gb Total Physical Memory | 9.36 Gb Available Physical Memory | 58.56% Memory free

31.95 Gb Paging File | 27.03 Gb Available in Paging File | 84.60% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 238.38 Gb Total Space | 24.40 Gb Free Space | 10.24% Space Free | Partition Type: NTFS

Drive D: | 1397.17 Gb Total Space | 1172.36 Gb Free Space | 83.91% Space Free | Partition Type: NTFS

Drive E: | 1397.26 Gb Total Space | 896.92 Gb Free Space | 64.19% Space Free | Partition Type: NTFS

Drive F: | 1397.26 Gb Total Space | 357.21 Gb Free Space | 25.57% Space Free | Partition Type: NTFS

Drive H: | 100.00 Mb Total Space | 61.82 Mb Free Space | 61.82% Space Free | Partition Type: NTFS

Drive I: | 2794.39 Gb Total Space | 29.08 Gb Free Space | 1.04% Space Free | Partition Type: NTFS

Drive J: | 2794.51 Gb Total Space | 1605.90 Gb Free Space | 57.47% Space Free | Partition Type: NTFS

Drive K: | 100.00 Mb Total Space | 61.86 Mb Free Space | 61.86% Space Free | Partition Type: NTFS

Drive L: | 2794.51 Gb Total Space | 422.32 Gb Free Space | 15.11% Space Free | Partition Type: NTFS

Drive M: | 2794.51 Gb Total Space | 2630.59 Gb Free Space | 94.13% Space Free | Partition Type: NTFS

Computer Name: BOSS | User Name: Chris | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found --

PRC - [2013/06/08 16:15:58 | 000,540,784 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\OriginClientService.exe

PRC - [2013/06/08 16:15:57 | 003,456,080 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\Origin.exe

PRC - [2013/06/08 13:36:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\Downloads\OTL.exe

PRC - [2013/06/06 14:06:24 | 001,641,896 | ---- | M] (Valve Corporation) -- I:\Steam\Steam.exe

PRC - [2013/06/06 14:06:24 | 000,543,656 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe

PRC - [2013/05/27 12:36:06 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe

PRC - [2013/05/27 12:36:01 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe

PRC - [2013/05/24 16:47:30 | 027,776,968 | ---- | M] (Dropbox, Inc.) -- C:\Users\Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe

PRC - [2013/05/20 09:19:32 | 000,046,144 | ---- | M] (Raptr, Inc) -- C:\Program Files (x86)\Raptr\raptr_im.exe

PRC - [2013/05/20 09:19:30 | 000,064,576 | ---- | M] (Raptr, Inc) -- C:\Program Files (x86)\Raptr\raptr.exe

PRC - [2013/05/09 23:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2013/04/22 23:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

PRC - [2013/03/02 10:33:04 | 001,086,816 | ---- | M] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) -- C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

PRC - [2012/12/12 11:28:14 | 000,163,000 | ---- | M] (Geek Software GmbH) -- C:\Program Files (x86)\PDF24\pdf24.exe

PRC - [2012/11/28 16:10:08 | 000,661,304 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe

PRC - [2012/09/01 19:07:22 | 000,285,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

PRC - [2012/09/01 19:07:22 | 000,014,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

PRC - [2012/07/25 00:46:44 | 001,326,176 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psia.exe

PRC - [2012/07/25 00:46:42 | 000,681,056 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\sua.exe

PRC - [2012/07/25 00:46:42 | 000,572,000 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

PRC - [2012/03/23 19:16:00 | 000,131,912 | ---- | M] (Desura Pty Ltd) -- C:\Program Files (x86)\Common Files\Desura\desura_service.exe

PRC - [2012/03/23 19:15:59 | 002,529,096 | ---- | M] (Desura Pty Ltd) -- C:\Program Files (x86)\Desura\desura.exe

PRC - [2012/03/14 03:04:52 | 006,041,192 | ---- | M] (AnVir Software) -- C:\Program Files (x86)\AnVir Task Manager\AnVir.exe

PRC - [2011/10/04 11:11:40 | 001,081,344 | ---- | M] (PFU LIMITED) -- C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe

PRC - [2011/03/16 07:17:57 | 000,217,088 | ---- | M] (Code 42 Software, Inc.) -- C:\Program Files\CrashPlan\CrashPlanTray.exe

PRC - [2011/02/04 05:24:32 | 002,346,496 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

PRC - [2009/09/30 10:07:34 | 000,086,016 | ---- | M] (PFU LIMITED) -- C:\Windows\SSDriver\fi5110\SsWiaChecker.exe

PRC - [2009/08/28 22:00:12 | 000,966,656 | ---- | M] () -- C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe

PRC - [2009/08/16 11:36:06 | 000,955,392 | ---- | M] (SFX TEAM) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe

PRC - [2009/03/12 17:18:48 | 000,602,624 | ---- | M] () -- C:\Program Files (x86)\Everything\Everything.exe

PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

========== Modules (No Company Name) ==========

MOD - [2013/06/08 16:15:59 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\Origin\tufao.dll

MOD - [2013/06/06 14:06:24 | 001,114,536 | ---- | M] () -- I:\Steam\bin\chromehtml.dll

MOD - [2013/05/15 03:11:54 | 001,140,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\0e5d2997438866de453e8b1401d84398\System.ServiceModel.Discovery.ni.dll

MOD - [2013/05/15 03:11:54 | 000,369,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\98e8641e2ca570f03352a91836b0b97a\System.ServiceModel.Routing.ni.dll

MOD - [2013/05/15 03:11:53 | 000,082,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\3a75004c8363a598f4997686c16ae55e\System.ServiceModel.Channels.ni.dll

MOD - [2013/05/15 03:11:48 | 001,085,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\66cd1f52f3d80e02efa25c0fd795a278\System.ServiceModel.Web.ni.dll

MOD - [2013/05/15 03:10:44 | 001,393,152 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\4dbbfceeddfc9180d5f621f0fc586e2c\System.ServiceModel.Activities.ni.dll

MOD - [2013/05/15 03:10:42 | 018,080,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\be692307d47b83000bba8bb6b484aff0\System.ServiceModel.ni.dll

MOD - [2013/05/15 03:10:42 | 001,078,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\6ff6bd832b03b5d6ea275ba9bee2d3ef\System.IdentityModel.ni.dll

MOD - [2013/05/15 03:10:21 | 002,647,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\2609614ca03927f7a99418c74844059b\System.Runtime.Serialization.ni.dll

MOD - [2013/05/15 03:10:21 | 001,021,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\019ed4a55ecc7d1f5b933c27970dce9b\System.Runtime.DurableInstancing.ni.dll

MOD - [2013/05/15 03:03:15 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\153143f74d840484b510d8cf5187796b\System.Windows.Forms.ni.dll

MOD - [2013/05/15 03:03:13 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\2f9e0112e10f9e70d3430d0be9863976\System.Core.ni.dll

MOD - [2013/05/15 03:03:08 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\233661f3a2b632e9553915c8639637d0\System.Configuration.ni.dll

MOD - [2013/05/09 15:52:58 | 001,183,699 | ---- | M] () -- C:\Program Files (x86)\Raptr\liboscar.dll

MOD - [2013/05/09 15:52:58 | 000,483,306 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libicq.dll

MOD - [2013/05/09 15:52:56 | 000,495,680 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libaim.dll

MOD - [2013/05/06 17:05:20 | 000,654,848 | ---- | M] () -- I:\Steam\SDL2.dll

MOD - [2013/05/03 10:57:16 | 001,640,221 | ---- | M] () -- C:\Program Files (x86)\Raptr\libjabber.dll

MOD - [2013/05/03 10:57:14 | 001,053,730 | ---- | M] () -- C:\Program Files (x86)\Raptr\libymsg.dll

MOD - [2013/05/03 10:57:06 | 000,655,356 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libirc.dll

MOD - [2013/05/03 10:57:04 | 000,603,326 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

MOD - [2013/05/03 10:57:02 | 000,474,199 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\ssl.dll

MOD - [2013/05/03 10:57:00 | 000,497,782 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

MOD - [2013/05/03 10:56:50 | 001,306,387 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libmsn.dll

MOD - [2013/05/03 10:56:46 | 000,565,461 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

MOD - [2013/05/03 10:56:44 | 000,506,276 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

MOD - [2013/03/26 16:16:40 | 020,341,672 | ---- | M] () -- I:\Steam\bin\libcef.dll

MOD - [2013/03/13 12:48:52 | 024,978,944 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\Dropbox\bin\libcef.dll

MOD - [2013/02/13 04:07:40 | 001,226,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\46c1da3f2c4c666140a414394e1cb20b\System.WorkflowServices.ni.dll

MOD - [2013/02/13 04:07:10 | 000,361,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorUtil\32c3c1ab0c865403bd47b0e4b8c6adf1\IAStorUtil.ni.dll

MOD - [2013/01/09 04:38:55 | 000,027,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorDataMgrSvcInt#\c86f9a0e5c9ac27363065da766d5670e\IAStorDataMgrSvcInterfaces.ni.dll

MOD - [2013/01/09 04:38:54 | 000,026,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorCommon\f073337386f694d16928fe7ccf0c5e50\IAStorCommon.ni.dll

MOD - [2013/01/09 04:38:46 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\866894ebe5258bf9f45d6b063229e990\System.Xaml.ni.dll

MOD - [2013/01/09 04:38:39 | 000,143,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\ef7642a4f2724135d445e2ea36582e78\SMDiagnostics.ni.dll

MOD - [2013/01/09 04:06:32 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\43cd41484df96d15df949eb17dd88152\System.Xml.ni.dll

MOD - [2013/01/09 04:06:30 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll

MOD - [2013/01/09 04:06:29 | 009,094,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll

MOD - [2013/01/09 04:06:25 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll

MOD - [2012/12/11 09:51:10 | 001,100,800 | ---- | M] () -- I:\Steam\bin\avcodec-53.dll

MOD - [2012/12/11 09:51:10 | 000,192,000 | ---- | M] () -- I:\Steam\bin\avformat-53.dll

MOD - [2012/12/11 09:51:10 | 000,124,416 | ---- | M] () -- I:\Steam\bin\avutil-51.dll

MOD - [2012/11/13 15:32:50 | 003,558,400 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll

MOD - [2012/10/26 23:53:18 | 002,717,595 | ---- | M] () -- C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

MOD - [2012/09/08 12:16:30 | 000,433,664 | ---- | M] () -- C:\Program Files (x86)\Evernote\Evernote\libxml2.dll

MOD - [2012/09/08 12:16:20 | 000,315,392 | ---- | M] () -- C:\Program Files (x86)\Evernote\Evernote\libtidy.dll

MOD - [2012/06/22 13:59:52 | 000,313,856 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

MOD - [2012/06/22 13:55:58 | 000,494,592 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

MOD - [2012/06/22 13:53:22 | 005,812,736 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

MOD - [2012/06/22 13:39:06 | 001,662,464 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

MOD - [2012/06/22 13:24:28 | 000,067,584 | ---- | M] () -- C:\Program Files (x86)\Raptr\sip.pyd

MOD - [2012/03/23 19:16:06 | 014,289,408 | ---- | M] () -- C:\Program Files (x86)\Desura\bin\wxmsw290u_vc_desura.dll

MOD - [2012/03/23 19:16:01 | 018,300,416 | ---- | M] () -- C:\Program Files (x86)\Desura\bin\cef_desura.dll

MOD - [2012/03/23 19:16:00 | 001,577,761 | ---- | M] () -- C:\Program Files (x86)\Desura\bin\avcodec-53.dll

MOD - [2012/03/23 19:16:00 | 000,213,022 | ---- | M] () -- C:\Program Files (x86)\Desura\bin\avformat-53.dll

MOD - [2012/03/23 19:16:00 | 000,134,035 | ---- | M] () -- C:\Program Files (x86)\Desura\bin\avutil-51.dll

MOD - [2012/02/20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

MOD - [2012/02/20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

MOD - [2012/02/06 12:28:48 | 000,011,264 | ---- | M] () -- C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd

MOD - [2012/02/06 12:28:42 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd

MOD - [2012/02/06 12:28:34 | 000,010,752 | ---- | M] () -- C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd

MOD - [2011/08/31 08:41:12 | 000,376,832 | ---- | M] () -- C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsConfig.dll

MOD - [2011/05/28 22:04:56 | 000,140,288 | ---- | M] () -- C:\Program Files\WinRAR\RarExt32.dll

MOD - [2011/05/10 11:01:42 | 000,030,208 | ---- | M] () -- C:\Program Files (x86)\Raptr\simplejson._speedups.pyd

MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

MOD - [2011/03/16 15:30:58 | 000,233,472 | ---- | M] () -- C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsExtention.dll

MOD - [2011/02/15 10:17:28 | 001,213,633 | ---- | M] () -- C:\Program Files (x86)\Raptr\libxml2-2.dll

MOD - [2011/02/15 10:17:28 | 000,417,501 | ---- | M] () -- C:\Program Files (x86)\Raptr\sqlite3.dll

MOD - [2011/02/04 05:25:18 | 000,242,176 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\plugins\RTMPlugin.dll

MOD - [2011/02/04 05:25:06 | 000,244,224 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\plugins\GooglePlugin.dll

MOD - [2011/02/04 05:24:38 | 000,195,584 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\plugins\iCalendarPlugin.dll

MOD - [2011/02/04 05:24:32 | 002,346,496 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe

MOD - [2010/12/12 02:58:14 | 000,502,784 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\wxmsw28u_xrc_vc_rny.dll

MOD - [2010/12/12 02:58:00 | 000,131,584 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\wxbase28u_xml_vc_rny.dll

MOD - [2010/12/12 02:57:56 | 000,485,376 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\wxmsw28u_html_vc_rny.dll

MOD - [2010/12/12 02:57:44 | 000,707,584 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\wxmsw28u_adv_vc_rny.dll

MOD - [2010/12/12 02:57:36 | 002,633,216 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\wxmsw28u_core_vc_rny.dll

MOD - [2010/12/12 02:56:46 | 001,205,760 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\wxbase28u_vc_rny.dll

MOD - [2010/11/22 15:06:22 | 000,055,808 | ---- | M] () -- C:\Program Files (x86)\Raptr\zlib1.dll

MOD - [2010/11/22 14:57:34 | 000,167,936 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32gui.pyd

MOD - [2010/11/22 14:57:34 | 000,111,104 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32file.pyd

MOD - [2010/11/22 14:57:34 | 000,096,256 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32api.pyd

MOD - [2010/11/22 14:57:34 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32process.pyd

MOD - [2010/11/22 14:57:18 | 000,141,312 | ---- | M] () -- C:\Program Files (x86)\Raptr\gobject._gobject.pyd

MOD - [2010/11/22 14:56:56 | 000,110,592 | ---- | M] () -- C:\Program Files (x86)\Raptr\pywintypes26.dll

MOD - [2010/11/22 14:56:26 | 000,324,608 | ---- | M] () -- C:\Program Files (x86)\Raptr\PIL._imaging.pyd

MOD - [2010/11/22 14:56:02 | 000,805,376 | ---- | M] () -- C:\Program Files (x86)\Raptr\_ssl.pyd

MOD - [2010/11/22 14:56:02 | 000,583,680 | ---- | M] () -- C:\Program Files (x86)\Raptr\unicodedata.pyd

MOD - [2010/11/22 14:56:02 | 000,356,864 | ---- | M] () -- C:\Program Files (x86)\Raptr\_hashlib.pyd

MOD - [2010/11/22 14:56:02 | 000,127,488 | ---- | M] () -- C:\Program Files (x86)\Raptr\pyexpat.pyd

MOD - [2010/11/22 14:56:02 | 000,124,928 | ---- | M] () -- C:\Program Files (x86)\Raptr\_elementtree.pyd

MOD - [2010/11/22 14:56:02 | 000,087,040 | ---- | M] () -- C:\Program Files (x86)\Raptr\_ctypes.pyd

MOD - [2010/11/22 14:56:02 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\Raptr\_sqlite3.pyd

MOD - [2010/11/22 14:56:02 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\Raptr\_socket.pyd

MOD - [2010/11/22 14:56:02 | 000,009,216 | ---- | M] () -- C:\Program Files (x86)\Raptr\winsound.pyd

MOD - [2010/10/20 15:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

MOD - [2010/08/24 16:56:50 | 000,167,936 | ---- | M] () -- C:\Program Files (x86)\PFU\ScanSnap\Driver\SSsltsa.dll

MOD - [2010/05/23 10:20:08 | 000,012,288 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\lfs.dll

MOD - [2010/05/23 10:20:04 | 000,126,976 | ---- | M] () -- C:\Program Files (x86)\Rainlendar2\lua51.dll

MOD - [2009/12/08 18:50:04 | 003,565,056 | ---- | M] () -- C:\Program Files (x86)\ffdshow\ffdshow.ax

MOD - [2009/08/28 22:00:12 | 000,966,656 | ---- | M] () -- C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe

MOD - [2009/03/12 17:18:48 | 000,602,624 | ---- | M] () -- C:\Program Files (x86)\Everything\Everything.exe

MOD - [2003/04/21 14:19:42 | 000,851,968 | ---- | M] () -- C:\Windows\SSDriver\fi5110\fjiplA6.dll

MOD - [2003/04/21 14:19:40 | 000,020,480 | ---- | M] () -- C:\Windows\SSDriver\fi5110\fjipl.dll

MOD - [2003/03/26 18:46:36 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsImgIO.dll

========== Services (SafeList) ==========

SRV:64bit: - [2013/04/16 06:01:58 | 000,241,152 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2013/01/27 12:34:32 | 000,379,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)

SRV:64bit: - [2013/01/27 12:34:32 | 000,022,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)

SRV:64bit: - [2012/07/11 10:54:58 | 000,140,672 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE)

SRV:64bit: - [2011/06/17 05:30:54 | 000,094,480 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)

SRV:64bit: - [2011/03/16 07:19:38 | 000,222,720 | ---- | M] (CrashPlan) [Auto | Running] -- C:\Program Files\CrashPlan\CrashPlanService.exe -- (CrashPlanService)

SRV:64bit: - [2010/05/07 05:16:22 | 000,078,848 | ---- | M] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) [Auto | Running] -- C:\Windows\SysNative\PrintCtrl.exe -- (Printer Control)

SRV:64bit: - [2009/07/13 17:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2009/07/13 17:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2013/06/06 14:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2013/05/27 12:36:06 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)

SRV - [2013/05/27 12:36:01 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)

SRV - [2013/05/21 21:08:40 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2013/05/21 08:09:08 | 000,285,795 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe -- (HOSTS Anti-PUPs)

SRV - [2013/05/15 11:36:15 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013/05/09 23:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2013/04/22 23:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)

SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2012/09/01 19:07:22 | 000,014,904 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)

SRV - [2012/07/25 00:46:44 | 001,326,176 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\psia.exe -- (Secunia PSI Agent)

SRV - [2012/07/25 00:46:42 | 000,681,056 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\sua.exe -- (Secunia Update Agent)

SRV - [2012/07/13 14:14:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2012/03/23 19:16:00 | 000,131,912 | ---- | M] (Desura Pty Ltd) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Desura\desura_service.exe -- (Desura Install Service)

SRV - [2012/01/22 20:43:08 | 000,092,592 | ---- | M] (TomTom) [Disabled | Stopped] -- d:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)

SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009/06/10 13:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/04/19 20:12:35 | 000,263,912 | ---- | M] (SHADOWDEFENDER.COM) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\diskpt.sys -- (diskpt)

DRV:64bit: - [2013/04/16 06:51:54 | 011,653,632 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2013/04/16 05:35:20 | 000,581,120 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2013/04/12 11:41:28 | 000,131,856 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)

DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)

DRV:64bit: - [2013/02/14 03:41:10 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2013/01/20 16:59:04 | 000,130,008 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)

DRV:64bit: - [2012/12/21 14:53:58 | 000,017,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)

DRV:64bit: - [2012/12/21 14:53:58 | 000,009,800 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)

DRV:64bit: - [2012/11/01 18:12:55 | 000,276,256 | ---- | M] (Digiarty Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DigiartyVirtualCDBus.sys -- (DigiartyVirtualCDBus)

DRV:64bit: - [2012/10/02 14:26:46 | 000,066,360 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)

DRV:64bit: - [2012/09/28 11:32:56 | 000,053,760 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2012/09/01 19:01:56 | 000,647,736 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)

DRV:64bit: - [2012/09/01 19:01:56 | 000,028,216 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorF.sys -- (iaStorF)

DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012/02/29 22:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2012/01/19 17:58:35 | 000,142,944 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vsflt61.sys -- (vidsflt61)

DRV:64bit: - [2012/01/19 17:58:31 | 000,133,728 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fltsrv.sys -- (fltsrv)

DRV:64bit: - [2011/12/26 16:27:24 | 000,015,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\ampa.sys -- (ampa)

DRV:64bit: - [2011/11/24 00:02:20 | 000,648,808 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2011/11/14 09:11:10 | 000,572,336 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Uim_IMx64.sys -- (Uim_IM)

DRV:64bit: - [2011/11/14 09:11:10 | 000,352,816 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uim_vimx64.sys -- (Uim_VIM)

DRV:64bit: - [2011/11/14 09:11:10 | 000,059,184 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uimx64.sys -- (UimBus)

DRV:64bit: - [2011/11/14 09:11:10 | 000,039,728 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hotcore3.sys -- (hotcore3)

DRV:64bit: - [2011/10/24 13:49:37 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)

DRV:64bit: - [2011/10/24 13:49:37 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)

DRV:64bit: - [2011/10/24 13:49:36 | 000,410,184 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfGSCamd64.sys -- (LADF_CaptureOnly)

DRV:64bit: - [2011/10/24 13:49:36 | 000,341,832 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfGSRamd64.sys -- (LADF_RenderOnly)

DRV:64bit: - [2011/10/17 15:55:32 | 000,559,384 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2011/08/02 16:38:44 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)

DRV:64bit: - [2011/08/01 15:59:06 | 000,045,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)

DRV:64bit: - [2011/07/22 08:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)

DRV:64bit: - [2011/07/12 13:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)

DRV:64bit: - [2011/06/17 05:30:50 | 000,154,752 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)

DRV:64bit: - [2011/06/15 22:10:58 | 000,015,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\ddmdrv.sys -- (ddmdrv)

DRV:64bit: - [2011/03/18 17:20:22 | 000,410,184 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfBakerCamd64.sys -- (LADF_BakerCOnly)

DRV:64bit: - [2011/03/18 14:33:48 | 000,335,688 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfBakerRamd64.sys -- (LADF_BakerROnly)

DRV:64bit: - [2011/03/10 22:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/10 22:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011/02/08 13:30:52 | 000,064,512 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)

DRV:64bit: - [2011/02/08 13:30:52 | 000,039,936 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)

DRV:64bit: - [2011/01/15 08:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)

DRV:64bit: - [2010/12/27 16:36:32 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)

DRV:64bit: - [2010/12/16 14:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)

DRV:64bit: - [2010/11/21 23:09:06 | 000,303,408 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mv91xx.sys -- (mv91xx)

DRV:64bit: - [2010/11/20 19:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2010/11/20 19:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010/11/20 19:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)

DRV:64bit: - [2010/11/20 19:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)

DRV:64bit: - [2010/11/20 19:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)

DRV:64bit: - [2010/11/20 19:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)

DRV:64bit: - [2010/11/20 19:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/11/20 19:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2010/10/19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)

DRV:64bit: - [2010/09/01 00:30:58 | 000,017,976 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)

DRV:64bit: - [2010/07/29 00:25:10 | 000,029,720 | ---- | M] (Initio Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ivusb.sys -- (ivusb)

DRV:64bit: - [2009/08/21 01:52:10 | 000,079,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)

DRV:64bit: - [2009/07/13 17:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 17:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 17:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/06/10 12:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 12:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 12:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 12:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)

DRV - [2012/12/21 14:54:00 | 000,014,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)

DRV - [2012/12/21 14:53:58 | 000,009,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)

DRV - [2011/12/26 16:27:22 | 000,012,728 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\ampa.sys -- (ampa)

DRV - [2011/06/15 22:09:42 | 000,012,728 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\ddmdrv.sys -- (ddmdrv)

DRV - [2010/11/01 06:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)

DRV - [2009/07/13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie'>http://www.google.com/ie

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie'>http://www.google.com/ie

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 42 58 34 99 47 FF CC 01 [binary data]

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie'>http://www.google.com/ie

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie'>http://www.google.com/ie

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\..\SearchScopes,DefaultScope = {9BC81998-9BF0-4A0C-9DE0-4A9D5AF0D188}

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\..\SearchScopes\{9BC81998-9BF0-4A0C-9DE0-4A9D5AF0D188}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.startup.homepage: "about:home"

FF - prefs.js..extensions.enabledAddons: MafiaaFire%40mafiaafire.com:0.9d

FF - prefs.js..extensions.enabledAddons: morningCoffee%40shaneliesegang:1.35

FF - prefs.js..extensions.enabledAddons: support%40lastpass.com:2.0.20

FF - prefs.js..extensions.enabledAddons: %7B249df6a2-e336-47d1-b6c3-ec711ad140ca%7D:1.3.2.0041

FF - prefs.js..extensions.enabledAddons: %7BDDC359D1-844A-42a7-9AA1-88A850A938A8%7D:2.0.16

FF - prefs.js..extensions.enabledAddons: foxmarks%40kei.com:4.2.1

FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.15

FF - prefs.js..extensions.enabledAddons: %7BE0B8C461-F8FB-49b4-8373-FE32E9252800%7D:5.7

FF - prefs.js..extensions.enabledAddons: sabnzbdstatus%40dq5studios.com:1.0.15.1

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0

FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.4: C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll File not found

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Users\Chris\AppData\Local\Roblox\Versions\version-d2e4e6e567c64738\\NPRobloxProxy.dll ()

FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Chris\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Chris\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Chris\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: C:\Users\Chris\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)

FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10171.dll (Amazon.com, Inc.)

FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/05/21 21:08:22 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\SoundFrost@helper.com: C:\Program Files (x86)\SoundFrost\SoundFrost.xpi

[2011/09/30 15:02:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions

[2011/09/30 15:02:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com

[2013/06/03 15:49:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions

[2013/05/29 14:50:26 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2011/09/04 15:39:53 | 000,000,000 | ---D | M] (LiveClick) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\{d166ee2a-36bb-4f33-aff7-e85f912df509}

[2013/06/02 15:49:21 | 000,000,000 | ---D | M] (Evernote Web Clipper) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800}

[2012/03/24 18:05:14 | 000,000,000 | ---D | M] (Microsoft Default Manager) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\DefaultManager@Microsoft

[2013/05/22 11:59:24 | 000,000,000 | ---D | M] ("Xmarks") -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\foxmarks@kei.com

[2013/02/17 08:25:10 | 000,000,000 | ---D | M] (LastPass) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\support@lastpass.com

[2013/05/25 17:14:52 | 000,208,116 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\jid0-SmvlvxGpvCyG252KbVMqIKR79Uc@jetpack.xpi

[2012/02/24 13:04:13 | 000,123,007 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\MafiaaFire@mafiaafire.com.xpi

[2011/04/15 12:14:14 | 000,107,019 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\morningCoffee@shaneliesegang.xpi

[2013/06/03 15:49:42 | 000,066,365 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\sabnzbdstatus@dq5studios.com.xpi

[2013/03/07 17:14:52 | 000,139,198 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\{249df6a2-e336-47d1-b6c3-ec711ad140ca}.xpi

[2013/05/08 16:02:55 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

[2013/04/09 07:05:29 | 000,714,654 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi

[2013/05/25 17:50:56 | 000,269,448 | ---- | M] () (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\vwt9s9m4.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi

[2013/05/22 07:29:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

[2013/05/21 21:08:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions

[2013/05/21 21:08:41 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2012/06/20 08:14:20 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

Share this post


Link to post
Share on other sites

OTL.txt 2 of 2 - extras.txt in next post

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},

CHR - homepage: http://www.google.com

CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll

CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll

CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll

CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\Chris\AppData\Roaming\Mozilla\plugins\npo1d.dll

CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

CHR - plugin: AmazonMP3DownloaderPlugin (Enabled) = C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10171.dll

CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll

CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

CHR - plugin: Java Platform SE 7 U21 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

CHR - plugin: Uplay PC (Enabled) = C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll

CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

CHR - plugin: Unity Player (Enabled) = C:\Users\Chris\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

CHR - plugin: Roblox Launcher Plugin (Enabled) = C:\Users\Chris\AppData\Local\Roblox\Versions\version-d2e4e6e567c64738\\NPRobloxProxy.dll

CHR - plugin: BrowserPlus (from Yahoo!) v2.9.8 (Enabled) = C:\Users\Chris\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll

CHR - plugin: Java Deployment Toolkit 7.0.210.11 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll

CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll

CHR - Extension: YouTube = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: Google Search = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: NZBMatrixIMDb = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\glmnoifppodlklanapmeinffccljodbp\0.3.1_0\

CHR - Extension: Steam Price Comparison - Unpowered edition = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagmmldphbnigokaemalgbniaehkfbee\2.4.4_0\

CHR - Extension: Save this page with CleanSave = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\iplagehfoafmmjppeijnpkohihcllici\4.7.0_0\

CHR - Extension: Downloads Search Engine = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nacnjfdphmlbjmgodlnglocikoimjmfb\1.0.3_0\

CHR - Extension: Enhanced Steam = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg\3.3_0\

CHR - Extension: Enhanced Steam = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg\3.5_0\

CHR - Extension: SABconnect++ = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\okphadhbbjadcifjplhifajfacbkkbod\0.6.5_0\

CHR - Extension: Gmail = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2013/05/22 12:56:42 | 000,000,837 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (LastPass Vault) - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Evernote extension) - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

O2 - BHO: (LastPass Vault) - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll ()

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3:64bit: - HKLM\..\Toolbar: (LastPass Toolbar) - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()

O3 - HKLM\..\Toolbar: (LastPass Toolbar) - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll ()

O4:64bit: - HKLM..\Run: [intelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)

O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)

O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)

O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)

O4:64bit: - HKLM..\Run: [PrintDisp] C:\Windows\SysNative\PrintDisp.exe (ActMask Co.,Ltd - http://www.all2pdf.com)

O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4:64bit: - HKLM..\Run: [shadow Defender Daemon] C:\Program Files\Shadow Defender\DefenderDaemon.exe (SHADOWDEFENDER.COM)

O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [Everything] C:\Program Files (x86)\Everything\Everything.exe ()

O4 - HKLM..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)

O4 - HKLM..\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe (Geek Software GmbH)

O4 - HKLM..\Run: [scanSnap WIA Service Checker] C:\Windows\SSDriver\fi5110\SsWiaChecker.exe (PFU LIMITED)

O4 - HKLM..\Run: [startCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKU\S-1-5-19..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [Desura] C:\Program Files (x86)\Desura\desura.exe (Desura Pty Ltd)

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [F.lux] C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe ()

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [GOG.com Downloader] C:\Program Files (x86)\GOG.com\GOG.com Downloader.exe -autostart File not found

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe ()

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [Raptr] C:\Program Files (x86)\Raptr\raptrstub.exe (Raptr, Inc)

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [sandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [steam] I:\Steam\steam.exe (Valve Corporation)

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)

O4 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000..\Run: [superCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (SFX TEAM)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - Startup: C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O4 - Startup: C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1

O7 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0

O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found

O8:64bit: - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found

O8:64bit: - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found

O8:64bit: - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found

O8:64bit: - Extra context menu item: LastPass - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=lastpass File not found

O8:64bit: - Extra context menu item: LastPass Fill Forms - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=fillforms File not found

O8:64bit: - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found

O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found

O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found

O8 - Extra context menu item: LastPass - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=lastpass File not found

O8 - Extra context menu item: LastPass Fill Forms - file://C:\Users\Chris\AppData\LocalLow\LastPass\context.html?cmd=fillforms File not found

O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()

O9:64bit: - Extra Button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()

O9:64bit: - Extra 'Tools' menuitem : LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()

O9 - Extra Button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll ()

O9 - Extra 'Tools' menuitem : LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll ()

O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()

O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()

O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O15 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\..Trusted Domains: rhapsody.com ([rhap-app-4-0] https in Trusted sites)

O15 - HKU\S-1-5-21-4185106890-2118697883-1949713553-1000\..Trusted Domains: rhapsody.com ([rhapreg] https in Trusted sites)

O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Reg Error: Key error.)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 10.21.2)

O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)

O16 - DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab (Java Plug-in 1.7.0_11)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 10.21.2)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2F2D49D1-222D-43C8-8DC9-7F36834F344F}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5CAB13DA-1C15-455F-BB2E-56B1A5C9E82F}: DhcpNameServer = 172.26.38.1 172.26.38.2

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18 - Protocol\Handler\ms-help - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2013/03/23 10:19:52 | 000,000,000 | ---D | M] - D:\autopacked -- [ NTFS ]

O32 - AutoRun File - [2010/01/10 16:54:52 | 000,000,170 | ---- | M] () - L:\Autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2012/07/15 23:33:32 | 000,000,040 | -H-- | M] () - M:\Autorun.inf -- [ NTFS ]

O33 - MountPoints2\{02526ad0-a01f-11e0-9466-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{51e87578-3e64-11e1-a90c-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{65411d5e-83f9-11e0-8906-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{65411d5e-83f9-11e0-8906-0025229f74dd}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true

O33 - MountPoints2\{6c96fcf6-730c-11e2-b308-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{6c96fcf6-730c-11e2-b308-0025229f74dd}\Shell\AutoRun\command - "" = "M:\WD SmartWare.exe" autoplay=true

O33 - MountPoints2\{b1aebb2b-6963-11e0-93fe-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{b1aebb2b-6963-11e0-93fe-0025229f74dd}\Shell\AutoRun\command - "" = L:\Installer.exe

O33 - MountPoints2\{ce807aa8-69ce-11e0-94bd-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{d4f45a84-2469-11e2-b622-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{d4f45a84-2469-11e2-b622-0025229f74dd}\Shell\AutoRun\command - "" = Z:\SETUP.EXE

O33 - MountPoints2\{d4f45a84-2469-11e2-b622-0025229f74dd}\Shell\configure\command - "" = Z:\SETUP.EXE

O33 - MountPoints2\{d4f45a84-2469-11e2-b622-0025229f74dd}\Shell\install\command - "" = Z:\SETUP.EXE

O33 - MountPoints2\{d4f45a8c-2469-11e2-b622-0025229f74dd}\Shell - "" = AutoRun

O33 - MountPoints2\{d4f45a8c-2469-11e2-b622-0025229f74dd}\Shell\AutoRun\command - "" = Y:\SETUP.EXE

O33 - MountPoints2\{d4f45a8c-2469-11e2-b622-0025229f74dd}\Shell\configure\command - "" = Y:\SETUP.EXE

O33 - MountPoints2\{d4f45a8c-2469-11e2-b622-0025229f74dd}\Shell\install\command - "" = Y:\SETUP.EXE

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/06/05 18:02:27 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Codemasters

[2013/06/04 22:50:25 | 000,000,000 | ---D | C] -- C:\rayman_origins

[2013/06/04 22:01:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)

[2013/06/04 17:26:23 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Proteus

[2013/06/04 17:14:35 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\dp3d

[2013/06/03 20:55:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\NYOP

[2013/05/26 08:55:31 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\ESN

[2013/05/25 13:56:44 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\KC Softwares

[2013/05/25 07:47:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab

[2013/05/25 07:46:48 | 000,460,888 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\66687245.sys

[2013/05/23 18:49:55 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Raptr

[2013/05/23 18:49:43 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Raptr

[2013/05/23 18:49:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raptr

[2013/05/23 06:54:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET

[2013/05/22 21:39:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Remedy

[2013/05/22 16:49:06 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\PunkBuster

[2013/05/22 14:32:58 | 000,000,000 | ---D | C] -- C:\ProcessMonitor

[2013/05/22 13:37:45 | 000,000,000 | ---D | C] -- C:\Windows\snack

[2013/05/22 09:22:44 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\RK_Quarantine

[2013/05/22 07:13:26 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2013/05/22 07:13:19 | 000,000,000 | ---D | C] -- C:\JRT

[2013/05/21 21:23:48 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\GunCraft

[2013/05/21 21:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2013/05/21 12:16:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy

[2013/05/21 12:16:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy

[2013/05/21 12:16:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy

[2013/05/21 08:08:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs

[2013/05/21 07:46:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2013/05/21 07:45:55 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2013/05/21 07:45:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware

[2013/05/20 18:48:10 | 000,000,000 | ---D | C] -- C:\Fraps

[2013/05/20 17:03:18 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\FairyBloomRe

[2013/05/20 14:58:34 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Remedy

[2013/05/20 11:56:32 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Activision

[2013/05/18 18:09:35 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\RIFT

[2013/05/18 17:42:12 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\RIFT

[2013/05/18 17:02:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\SEGA Genesis Classics

[2013/05/16 08:21:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso

[2013/05/13 20:33:06 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\ManiaPlanet

[2013/05/13 20:33:06 | 000,000,000 | ---D | C] -- C:\ProgramData\ManiaPlanet

[2013/05/13 11:48:39 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI

[2013/05/13 11:48:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT

[2013/05/13 11:48:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center

[2013/05/13 07:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft

[2013/01/09 09:41:52 | 000,471,848 | ---- | C] (Bitsum Technologies) -- C:\Users\Chris\AppData\Roaming\ProcessLassopl_rsrc_temp.dll

[2011/11/20 12:25:16 | 013,844,000 | ---- | C] (LastPass) -- C:\Program Files (x86)\Common Files\lpuninstall.exe

[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/06/08 16:11:00 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4185106890-2118697883-1949713553-1000UA.job

[2013/06/08 16:11:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4185106890-2118697883-1949713553-1000Core.job

[2013/06/08 15:44:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013/06/08 15:44:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013/06/08 15:36:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013/06/08 13:35:58 | 000,001,740 | ---- | M] () -- C:\Windows\Sandboxie.ini

[2013/06/06 18:02:43 | 000,796,044 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013/06/06 18:02:43 | 000,671,156 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013/06/06 18:02:43 | 000,126,338 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013/06/05 17:14:19 | 000,021,872 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013/06/05 17:14:19 | 000,021,872 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013/06/05 17:08:10 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job

[2013/06/05 17:07:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013/06/05 17:07:04 | 4276,113,406 | -HS- | M] () -- C:\hiberfil.sys

[2013/06/04 17:45:34 | 000,001,045 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

[2013/06/04 17:42:43 | 000,001,013 | ---- | M] () -- C:\Users\Chris\Desktop\Dropbox.lnk

[2013/06/01 07:57:50 | 000,000,798 | ---- | M] () -- C:\Users\Public\Desktop\Play More Playrix Games!.lnk

[2013/06/01 07:57:50 | 000,000,746 | ---- | M] () -- C:\Users\Public\Desktop\Call of Atlantis.lnk

[2013/05/27 12:36:06 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe

[2013/05/27 12:36:02 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0

[2013/05/27 12:36:01 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe

[2013/05/27 01:09:27 | 003,130,440 | ---- | M] () -- C:\Windows\SysWow64\pbsvc_blr.exe

[2013/05/26 11:24:53 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr

[2013/05/25 17:45:27 | 000,460,888 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\66687245.sys

[2013/05/24 08:48:13 | 000,001,166 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk

[2013/05/24 08:48:13 | 000,001,142 | ---- | M] () -- C:\Users\Public\Desktop\Picasa 3.lnk

[2013/05/22 13:43:46 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\vididr.sys.dump

[2013/05/22 13:43:46 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\videoprt.sys.dump

[2013/05/22 13:43:42 | 000,000,512 | ---- | M] () -- C:\Windows\SysNative\drivers\usbaapl64.sys.dump

[2013/05/22 13:43:41 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\usb8023.sys.dump

[2013/05/22 13:43:32 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\scsiport.sys.dump

[2013/05/22 13:43:22 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\netio.sys.dump

[2013/05/22 13:43:22 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\netaapl64.sys.dump

[2013/05/22 13:43:15 | 000,000,064 | ---- | M] () -- C:\Windows\SysNative\drivers\lsi_sas2.sys.dump

[2013/05/22 13:43:15 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\mcd.sys.dump

[2013/05/22 13:43:15 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\mbam.sys.dump

[2013/05/22 13:43:13 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\LGVirHid.sys.dump

[2013/05/22 13:43:13 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys.dump

[2013/05/22 13:43:13 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\LGBusEnum.sys.dump

[2013/05/22 13:43:13 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\ladfGSRamd64.sys.dump

[2013/05/22 13:43:13 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\ladfBakerRamd64.sys.dump

[2013/05/22 13:43:09 | 000,000,568 | ---- | M] () -- C:\Windows\SysNative\drivers\iaStorA.sys.dump

[2013/05/22 13:43:09 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\iaStorF.sys.dump

[2013/05/22 13:43:09 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\iaStor.sys.dump

[2013/05/22 13:43:06 | 000,000,472 | ---- | M] () -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys.dump

[2013/05/22 13:43:06 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\hcw85cir.sys.dump

[2013/05/22 13:43:05 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS.dump

[2013/05/22 13:43:05 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\fs_rec.sys.dump

[2013/05/22 13:43:00 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\dmvsc.sys.dump

[2013/05/22 13:43:00 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\diskpt.sys.dump

[2013/05/22 13:43:00 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\Diskdump.sys.dump

[2013/05/22 13:42:54 | 000,000,512 | ---- | M] () -- C:\Windows\SysNative\drivers\b57nd60a.sys.dump

[2013/05/22 13:42:54 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\battc.sys.dump

[2013/05/22 13:42:47 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\1394bus.sys.dump

[2013/05/22 13:01:20 | 001,105,378 | ---- | M] () -- C:\ProcessMonitor(1).zip

[2013/05/22 12:56:42 | 000,000,837 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2013/05/22 09:15:24 | 000,632,031 | ---- | M] () -- C:\Users\Chris\Desktop\adwcleaner(1).exe

[2013/05/21 12:16:48 | 000,001,318 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk

[2013/05/21 12:16:48 | 000,001,294 | ---- | M] () -- C:\Users\Chris\Desktop\Spybot - Search & Destroy.lnk

[2013/05/21 08:09:20 | 000,001,217 | ---- | M] () -- C:\Users\Chris\Desktop\Desinstaller_HOSTS_Anti-PUPs.lnk

[2013/05/21 08:02:45 | 000,424,856 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2013/05/21 07:46:00 | 000,001,145 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2013/05/20 17:15:24 | 000,000,726 | ---- | M] () -- C:\Users\Chris\Desktop\Neverwinter.lnk

[2013/05/20 09:19:37 | 000,000,442 | RHS- | M] () -- C:\Users\Chris\ntuser.pol

[2013/05/18 17:36:20 | 000,001,122 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk

[2013/05/18 16:11:30 | 000,001,351 | ---- | M] () -- C:\Users\Chris\Documents\AutoHotkey.ahk

[2013/05/10 12:28:03 | 000,002,380 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Aiseesoft Blu-ray Ripper.lnk

[2013/05/10 12:28:03 | 000,002,356 | ---- | M] () -- C:\Users\Public\Desktop\Aiseesoft Blu-ray Ripper.lnk

[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/06/05 11:36:32 | 000,001,820 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScanSnap Manager.lnk

[2013/06/05 11:36:32 | 000,001,142 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk

[2013/06/05 11:36:32 | 000,001,131 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk

[2013/06/05 11:36:32 | 000,001,045 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

[2013/06/05 11:36:32 | 000,000,964 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Conversion to PDF with ScanSnap Organizer.lnk

[2013/06/05 11:20:42 | 000,001,841 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CrashPlan Tray.lnk

[2013/06/01 07:57:50 | 000,000,746 | ---- | C] () -- C:\Users\Public\Desktop\Call of Atlantis.lnk

[2013/05/27 12:35:59 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe

[2013/05/24 08:48:13 | 000,001,166 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk

[2013/05/24 08:48:13 | 000,001,142 | ---- | C] () -- C:\Users\Public\Desktop\Picasa 3.lnk

[2013/05/22 13:38:43 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\vmbus.sys.dump

[2013/05/22 13:38:43 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\vididr.sys.dump

[2013/05/22 13:38:42 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\videoprt.sys.dump

[2013/05/22 13:38:38 | 000,000,512 | ---- | C] () -- C:\Windows\SysNative\drivers\usbaapl64.sys.dump

[2013/05/22 13:38:38 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\usb8023.sys.dump

[2013/05/22 13:38:38 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\umpass.sys.dump

[2013/05/22 13:38:30 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\sffp_sd.sys.dump

[2013/05/22 13:38:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\sffp_mmc.sys.dump

[2013/05/22 13:38:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\sffdisk.sys.dump

[2013/05/22 13:38:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\sermouse.sys.dump

[2013/05/22 13:38:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\serial.sys.dump

[2013/05/22 13:38:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\serenum.sys.dump

[2013/05/22 13:38:28 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\secdrv.sys.dump

[2013/05/22 13:38:28 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\scsiport.sys.dump

[2013/05/22 13:38:28 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\scfilter.sys.dump

[2013/05/22 13:38:28 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\sbp2port.sys.dump

[2013/05/22 13:38:22 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\PEAuth.sys.dump

[2013/05/22 13:38:22 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\pcw.sys.dump

[2013/05/22 13:38:22 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\pcmcia.sys.dump

[2013/05/22 13:38:19 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\nfrd960.sys.dump

[2013/05/22 13:38:19 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\netio.sys.dump

[2013/05/22 13:38:19 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\netbt.sys.dump

[2013/05/22 13:38:18 | 000,000,512 | ---- | C] () -- C:\Windows\SysNative\drivers\ndproxy.sys.dump

[2013/05/22 13:38:18 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\netbios.sys.dump

[2013/05/22 13:38:18 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\netaapl64.sys.dump

[2013/05/22 13:38:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mstee.sys.dump

[2013/05/22 13:38:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mssmbios.sys.dump

[2013/05/22 13:38:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\msrpc.sys.dump

[2013/05/22 13:38:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mspqm.sys.dump

[2013/05/22 13:38:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mspclock.sys.dump

[2013/05/22 13:38:15 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mskssrv.sys.dump

[2013/05/22 13:38:15 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\msiscsi.sys.dump

[2013/05/22 13:38:15 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\msisadrv.sys.dump

[2013/05/22 13:38:15 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mshidkmdf.sys.dump

[2013/05/22 13:38:15 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\msfs.sys.dump

[2013/05/22 13:38:14 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\msdsm.sys.dump

[2013/05/22 13:38:12 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\modem.sys.dump

[2013/05/22 13:38:12 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\MegaSR.sys.dump

[2013/05/22 13:38:12 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\megasas.sys.dump

[2013/05/22 13:38:12 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mcd.sys.dump

[2013/05/22 13:38:11 | 000,000,064 | ---- | C] () -- C:\Windows\SysNative\drivers\lsi_sas2.sys.dump

[2013/05/22 13:38:11 | 000,000,064 | ---- | C] () -- C:\Windows\SysNative\drivers\lsi_sas.sys.dump

[2013/05/22 13:38:11 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\mbam.sys.dump

[2013/05/22 13:38:11 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\luafv.sys.dump

[2013/05/22 13:38:11 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\lsi_scsi.sys.dump

[2013/05/22 13:38:10 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\lltdio.sys.dump

[2013/05/22 13:38:10 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\LGVirHid.sys.dump

[2013/05/22 13:38:10 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys.dump

[2013/05/22 13:38:10 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\LGBusEnum.sys.dump

[2013/05/22 13:38:10 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\ladfGSRamd64.sys.dump

[2013/05/22 13:38:09 | 000,000,512 | ---- | C] () -- C:\Windows\SysNative\drivers\ksthunk.sys.dump

[2013/05/22 13:38:09 | 000,000,368 | ---- | C] () -- C:\Windows\SysNative\drivers\ksecpkg.sys.dump

[2013/05/22 13:38:09 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\ladfBakerRamd64.sys.dump

[2013/05/22 13:38:07 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\ipfltdrv.sys.dump

[2013/05/22 13:38:06 | 000,000,576 | ---- | C] () -- C:\Windows\SysNative\drivers\intelide.sys.dump

[2013/05/22 13:38:06 | 000,000,568 | ---- | C] () -- C:\Windows\SysNative\drivers\iaStorA.sys.dump

[2013/05/22 13:38:06 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\intelppm.sys.dump

[2013/05/22 13:38:06 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\iirsp.sys.dump

[2013/05/22 13:38:06 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\iaStorV.sys.dump

[2013/05/22 13:38:06 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\iaStorF.sys.dump

[2013/05/22 13:38:05 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\iaStor.sys.dump

[2013/05/22 13:38:05 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\i8042prt.sys.dump

[2013/05/22 13:38:03 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\hcw85cir.sys.dump

[2013/05/22 13:38:02 | 000,000,472 | ---- | C] () -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys.dump

[2013/05/22 13:38:02 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\GAGP30KX.SYS.dump

[2013/05/22 13:38:02 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS.dump

[2013/05/22 13:38:02 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\fvevol.sys.dump

[2013/05/22 13:38:02 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\fs_rec.sys.dump

[2013/05/22 13:38:01 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\fsdepends.sys.dump

[2013/05/22 13:37:57 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\dmvsc.sys.dump

[2013/05/22 13:37:57 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\diskpt.sys.dump

[2013/05/22 13:37:56 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\Diskdump.sys.dump

[2013/05/22 13:37:56 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\disk.sys.dump

[2013/05/22 13:37:51 | 000,000,512 | ---- | C] () -- C:\Windows\SysNative\drivers\b57nd60a.sys.dump

[2013/05/22 13:37:51 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\battc.sys.dump

[2013/05/22 13:37:46 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\adp94xx.sys.dump

[2013/05/22 13:37:45 | 000,000,512 | ---- | C] () -- C:\Windows\SysNative\drivers\acpipmi.sys.dump

[2013/05/22 13:37:45 | 000,000,512 | ---- | C] () -- C:\Windows\SysNative\drivers\1394ohci.sys.dump

[2013/05/22 13:37:45 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\acpi.sys.dump

[2013/05/22 13:37:45 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\1394bus.sys.dump

[2013/05/22 13:01:19 | 001,105,378 | ---- | C] () -- C:\ProcessMonitor(1).zip

[2013/05/22 09:15:18 | 000,632,031 | ---- | C] () -- C:\Users\Chris\Desktop\adwcleaner(1).exe

[2013/05/21 12:16:48 | 000,001,318 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk

[2013/05/21 12:16:48 | 000,001,294 | ---- | C] () -- C:\Users\Chris\Desktop\Spybot - Search & Destroy.lnk

[2013/05/21 08:09:20 | 000,001,217 | ---- | C] () -- C:\Users\Chris\Desktop\Desinstaller_HOSTS_Anti-PUPs.lnk

[2013/05/21 07:46:00 | 000,001,145 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2013/05/20 17:15:24 | 000,000,726 | ---- | C] () -- C:\Users\Chris\Desktop\Neverwinter.lnk

[2013/05/20 09:19:37 | 000,000,442 | RHS- | C] () -- C:\Users\Chris\ntuser.pol

[2013/05/18 17:36:20 | 000,001,134 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 8.lnk

[2013/05/18 17:36:20 | 000,001,122 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk

[2013/05/18 16:11:30 | 000,001,351 | ---- | C] () -- C:\Users\Chris\Documents\AutoHotkey.ahk

[2013/05/10 12:28:03 | 000,002,380 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Aiseesoft Blu-ray Ripper.lnk

[2013/05/10 12:28:03 | 000,002,356 | ---- | C] () -- C:\Users\Public\Desktop\Aiseesoft Blu-ray Ripper.lnk

[2013/05/01 21:10:21 | 000,000,000 | ---- | C] () -- C:\Windows\diskpt.dat

[2013/04/20 21:04:13 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll

[2013/04/17 09:34:06 | 000,007,605 | ---- | C] () -- C:\Users\Chris\AppData\Local\Resmon.ResmonCfg

[2013/04/16 06:37:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe

[2013/04/16 06:37:12 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe

[2013/02/11 13:58:52 | 002,468,520 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe

[2013/02/11 13:58:52 | 000,087,112 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe

[2013/02/11 13:58:52 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll

[2013/02/11 13:58:52 | 000,014,920 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys

[2013/02/11 13:58:52 | 000,009,160 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys

[2013/02/03 10:47:58 | 001,293,240 | ---- | C] () -- C:\Windows\ddmmain.exe

[2013/02/03 10:47:58 | 000,012,728 | ---- | C] () -- C:\Windows\SysWow64\ddmdrv.sys

[2013/02/03 10:47:54 | 001,645,496 | ---- | C] () -- C:\Windows\ampa.exe

[2013/02/03 10:47:54 | 000,012,728 | ---- | C] () -- C:\Windows\SysWow64\ampa.sys

[2013/02/01 09:16:45 | 000,068,972 | ---- | C] () -- C:\Windows\SysWow64\nglide_uninst.exe

[2012/12/11 14:46:18 | 000,042,440 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll

[2012/11/27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll

[2012/09/09 05:20:20 | 001,306,624 | ---- | C] () -- C:\Windows\SysWow64\glide3x.dll

[2012/09/07 03:13:56 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\nglide_config.exe

[2012/09/05 15:38:31 | 001,391,616 | ---- | C] () -- C:\Windows\SysWow64\ActPDF.dll

[2012/08/27 22:21:11 | 000,029,245 | ---- | C] () -- C:\Users\Chris\AppData\Local\TempMERGE(0)_TEMP_FILE_(4).pdf

[2012/08/27 21:10:45 | 000,000,161 | ---- | C] () -- C:\Windows\DISPARAM.INI

[2012/02/14 18:36:36 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat

[2012/02/14 18:36:36 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat

[2012/01/19 11:32:11 | 006,908,648 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall.exe

[2012/01/19 11:32:11 | 000,017,655 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall-dBpoweramp Music Converter.dat

[2012/01/12 21:06:04 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012/01/03 22:14:49 | 000,110,602 | ---- | C] () -- C:\Windows\SysWow64\xcdsfx32.bin

[2011/12/17 13:43:40 | 000,406,336 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe

[2011/10/23 15:53:38 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe

[2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat

[2011/09/12 15:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

[2011/08/31 08:33:01 | 000,000,042 | ---- | C] () -- C:\Users\Chris\truShuffle.conf

[2011/08/03 21:36:48 | 000,001,740 | ---- | C] () -- C:\Windows\Sandboxie.ini

[2011/06/27 04:31:04 | 002,552,320 | ---- | C] () -- C:\Windows\SysWow64\QtCore4.dll

[2011/06/27 04:30:50 | 017,333,760 | ---- | C] () -- C:\Windows\SysWow64\QtWebKit4.dll

[2011/06/27 04:30:38 | 002,177,024 | ---- | C] () -- C:\Windows\SysWow64\QtScript4.dll

[2011/06/27 04:30:34 | 001,209,344 | ---- | C] () -- C:\Windows\SysWow64\QtNetwork4.dll

[2011/06/27 04:30:18 | 009,849,856 | ---- | C] () -- C:\Windows\SysWow64\QtGui4.dll

[2011/06/27 04:29:54 | 000,344,576 | ---- | C] () -- C:\Windows\SysWow64\phonon4.dll

[2011/06/27 04:29:54 | 000,043,008 | ---- | C] () -- C:\Windows\SysWow64\libgcc_s_dw2-1.dll

[2011/06/27 04:29:54 | 000,011,362 | ---- | C] () -- C:\Windows\SysWow64\mingwm10.dll

[2011/06/18 14:19:56 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat

[2011/04/16 10:10:00 | 000,000,093 | ---- | C] () -- C:\Users\Chris\AppData\Local\fusioncache.dat

========== ZeroAccess Check ==========

[2009/07/13 20:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/02/26 21:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/02/26 20:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 17:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 19:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 17:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/04/20 22:12:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\.minecraft

[2012/03/12 21:28:46 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\.UberCS

[2013/04/09 08:49:29 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\8-Bit Commando

[2012/02/01 21:17:30 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Able Apples

[2012/01/19 21:47:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Acronis

[2012/12/02 11:31:54 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Actual Tools

[2012/04/03 18:28:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\AdultAdvantage

[2012/08/01 08:06:47 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Amazon

[2011/05/21 08:29:09 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\APOX

[2013/01/26 10:14:17 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Artogon

[2012/07/09 19:46:30 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Atari

[2011/08/05 12:08:29 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\AtomZombieData

[2013/01/30 13:00:45 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Avery

[2013/02/10 13:31:45 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Awem

[2012/03/18 11:05:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Barricade 3.5.1

[2011/07/10 14:06:17 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Beat Hazard

[2013/05/15 20:38:37 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Bioshock

[2011/12/23 09:46:44 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\bizarre creations

[2013/02/09 15:10:27 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Boilsoft

[2012/12/03 17:33:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\calibre

[2012/11/25 09:46:32 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Carbon

[2012/09/28 09:39:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Chime

[2012/06/25 08:57:52 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\com.cipherprime.auditorium

[2011/09/30 18:12:41 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\com.webkinesis.PicasaUploaderDesktop

[2011/04/21 19:38:52 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\CrashPlan

[2013/01/12 17:43:25 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DarknessII

[2012/01/12 17:10:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DarksporeData

[2012/01/06 19:04:02 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Digiarty

[2012/11/02 08:46:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\digipen

[2012/03/10 21:29:48 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DigitalVolcano

[2013/05/17 16:29:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Doublefine

[2013/06/04 17:18:30 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\dp3d

[2013/06/06 18:02:15 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dropbox

[2011/07/10 18:21:50 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dwarfs

[2012/03/24 19:56:49 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Faerie Solitaire

[2013/05/20 17:11:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FairyBloomRe

[2013/01/31 21:29:49 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FatShark

[2011/12/27 18:43:06 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\fotw

[2012/01/02 21:25:32 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FreeArc

[2012/08/27 21:28:52 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Fujitsu

[2012/10/05 11:56:08 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\GameFly

[2011/10/23 16:44:55 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Gatling Gears

[2013/04/20 18:25:20 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\GlarySoft

[2012/04/13 13:40:30 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\HD Tune Pro

[2011/05/13 20:24:04 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Hi-Rez Studios

[2011/06/10 16:50:33 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ImgBurn

[2012/03/10 21:29:42 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\IsolatedStorage

[2011/10/08 18:49:40 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Jason Robitaille

[2012/03/13 13:34:00 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\JasonRobitaille

[2011/11/03 14:20:49 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Kalypso Media

[2013/05/25 13:56:44 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\KC Softwares

[2011/04/27 12:58:47 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Leadertech

[2011/12/31 10:22:08 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\M8 Software

[2012/03/15 10:30:50 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Magi

[2012/04/08 13:16:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\MahJong Suite

[2011/12/28 22:04:24 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\MinMaxGames

[2012/04/27 18:49:15 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Mp3tag

[2012/01/25 11:05:43 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\MusicIP

[2012/04/15 09:16:10 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Mystery of Mortlake Mansion

[2011/08/02 10:38:15 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Naval Warfare

[2013/04/13 09:45:14 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Nifflas

[2013/06/08 16:17:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Origin

[2012/08/27 21:34:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\PFU

[2012/07/08 08:15:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Playrix Entertainment

[2013/03/23 07:10:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\PoBros

[2011/12/22 17:46:44 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Polynomial

[2013/06/02 16:27:23 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ProcessLasso

[2013/05/22 16:49:06 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\PunkBuster

[2013/06/08 13:08:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Raptr

[2012/11/26 14:58:55 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\RenPy

[2012/01/16 15:36:55 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\RetouchPilot

[2012/09/29 10:14:09 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\RidNacs

[2013/05/18 18:21:51 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\RIFT

[2012/04/18 06:26:55 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Seas0nPass

[2013/02/17 15:27:33 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Spotify

[2013/01/10 22:23:07 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Stardock

[2012/04/11 04:13:34 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\SuperUtils.com

[2011/12/31 20:54:36 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\System

[2012/11/27 20:10:54 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\SystemRequirementsLab

[2012/03/14 07:31:18 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TagScanner

[2011/04/16 19:07:46 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TeamViewer

[2011/12/31 12:13:02 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\The Creative Assembly

[2012/11/26 21:34:35 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\To the Moon - Freebird Games

[2011/09/30 15:02:42 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TomTom

[2011/12/21 20:50:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Tropico 4

[2011/10/31 19:50:51 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TS3Client

[2011/10/31 09:43:29 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Voxatron

[2012/11/23 13:50:58 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Waveform

[2012/03/22 05:47:30 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\WinISO Computing

[2011/12/31 20:57:16 | 000,000,000 | -HSD | M] -- C:\Users\Chris\AppData\Roaming\wyUpdate AU

[2013/02/04 07:26:41 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\XYplorer

[2012/11/25 21:40:47 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\zombies

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:0C22A340

< End of report >

Share this post


Link to post
Share on other sites

extras.txt - post 1 of many

OTL Extras logfile created on: 6/8/2013 4:27:50 PM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = F:\Downloads

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16576)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.98 Gb Total Physical Memory | 9.36 Gb Available Physical Memory | 58.56% Memory free

31.95 Gb Paging File | 27.03 Gb Available in Paging File | 84.60% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 238.38 Gb Total Space | 24.40 Gb Free Space | 10.24% Space Free | Partition Type: NTFS

Drive D: | 1397.17 Gb Total Space | 1172.36 Gb Free Space | 83.91% Space Free | Partition Type: NTFS

Drive E: | 1397.26 Gb Total Space | 896.92 Gb Free Space | 64.19% Space Free | Partition Type: NTFS

Drive F: | 1397.26 Gb Total Space | 357.21 Gb Free Space | 25.57% Space Free | Partition Type: NTFS

Drive H: | 100.00 Mb Total Space | 61.82 Mb Free Space | 61.82% Space Free | Partition Type: NTFS

Drive I: | 2794.39 Gb Total Space | 29.08 Gb Free Space | 1.04% Space Free | Partition Type: NTFS

Drive J: | 2794.51 Gb Total Space | 1605.90 Gb Free Space | 57.47% Space Free | Partition Type: NTFS

Drive K: | 100.00 Mb Total Space | 61.86 Mb Free Space | 61.86% Space Free | Partition Type: NTFS

Drive L: | 2794.51 Gb Total Space | 422.32 Gb Free Space | 15.11% Space Free | Partition Type: NTFS

Drive M: | 2794.51 Gb Total Space | 2630.59 Gb Free Space | 94.13% Space Free | Partition Type: NTFS

Computer Name: BOSS | User Name: Chris | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-4185106890-2118697883-1949713553-1000\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [Paste As File] -- C:\Program Files (x86)\PasteAsFile\PasteAsFile.exe "%1" ()

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Directory [Rename with Métamorphose] -- C:\Program Files (x86)\metamorphose\metamorphose.exe %L (Ianaré Sévi)

Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [Paste As File] -- C:\Program Files (x86)\PasteAsFile\PasteAsFile.exe "%1" ()

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Directory [Rename with Métamorphose] -- C:\Program Files (x86)\metamorphose\metamorphose.exe %L (Ianaré Sévi)

Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{097E42EE-AB5E-4F5D-9145-F1720F9E2C5D}" = lport=57650 | protocol=17 | dir=in | name=pando media booster |

"{18AEBA7A-A584-44B7-9E56-3C0ADC94D6D7}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

"{3596B365-6E28-4139-85C6-E2CA24D4849B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{43EA73AD-26E9-4264-92A6-B699E4027887}" = rport=137 | protocol=17 | dir=out | app=system |

"{457D9AFD-53D7-4313-A07B-4F0C3A0EA439}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{4928FDA3-763B-4CA1-8BEE-7192854E1133}" = lport=57650 | protocol=17 | dir=in | name=pando media booster |

"{51A5988D-9A49-4183-91E8-B86186F77E13}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

"{5207B1AE-B4B4-4157-B3ED-3864997930AF}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{533B7FD1-7C92-4906-8034-9B80815A49F9}" = rport=10243 | protocol=6 | dir=out | app=system |

"{547F7928-AEA5-4C04-B67C-BCA8E76E71A7}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{5960DBBE-573C-4DE2-9E6A-281407BAF8A2}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{6A682014-8B9A-4770-AC9E-8E36E3320449}" = lport=57650 | protocol=6 | dir=in | name=pando media booster |

"{76DC121E-5644-437C-A048-27BE392414B3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{88D04866-300C-4A3D-9A2F-9DFF6893C3DF}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{9359DB6E-6496-462F-9E9B-1C35FD6EED7D}" = lport=10243 | protocol=6 | dir=in | app=system |

"{9D42D91C-794A-4D4F-8759-3F503F3C46E0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{A1FE4338-560C-4457-B134-DCEFF318CE89}" = lport=137 | protocol=17 | dir=in | app=system |

"{A70ADE74-2049-470C-8212-A2847AE65C20}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |

"{A790F35D-E361-462C-847A-14F66980F5CF}" = rport=139 | protocol=6 | dir=out | app=system |

"{AC6F6EE8-B7C6-46D3-BDAE-3F08435EEB1C}" = lport=445 | protocol=6 | dir=in | app=system |

"{B69A2946-D4F7-4B13-918E-8522FC72E599}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{BF8AF79F-E773-4649-BF01-BF124C46FDD5}" = rport=138 | protocol=17 | dir=out | app=system |

"{C353F8C2-0C82-4D59-8943-2ACF27B361AD}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{CAE052E1-6E65-4B67-B758-BA72D12A364A}" = lport=138 | protocol=17 | dir=in | app=system |

"{CD2CA356-3EFD-417F-B7AC-D0D6554AC636}" = lport=2869 | protocol=6 | dir=in | app=system |

"{DB5246D3-3F52-4D23-80C7-F283A83F19FF}" = lport=57650 | protocol=6 | dir=in | name=pando media booster |

"{E3E29736-7397-477B-AF38-39067F53C6D0}" = rport=445 | protocol=6 | dir=out | app=system |

"{E50DA36F-5F16-423E-91E7-D2F40C525B19}" = lport=139 | protocol=6 | dir=in | app=system |

"{FEE86AEE-81D5-434B-A4BB-117C26C9CB95}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{000787AA-693A-498D-8D36-BFDA849210CF}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\rocket mania deluxe\rocketmania.exe |

"{002ADC93-0F5D-41AA-8A15-16EE421C2C8E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\flatout2\flatout2.exe |

"{002B2442-3AEE-4FBF-841F-5EF3EEAEF694}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\arx fatalis\arx.exe |

"{0044A638-3E1A-4992-A06B-2950486D4D67}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\space rangers 2 reboot\rangers.exe |

"{0052DD6E-46D3-4049-941F-A1E2EAC67E1B}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe |

"{0080C5C4-D842-4CF4-8024-3FEEA76B6026}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\the binding of isaac\isaac.exe |

"{0084575D-4CAF-4615-B71A-A76062A65967}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\trackmania united\tmforeverlauncher.exe |

"{0092D805-0506-492F-94D3-CE5577A05DFF}" = protocol=17 | dir=in | app=e:\steam2\chronicles of riddick - assault on dark athena\system\win32_x86\darkathena.exe |

"{00A2EF33-83C0-478C-86B6-DF712871BF57}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\off-road drive\binaries\win32\ord.exe |

"{00AE7B35-2092-4EF3-9CE2-0FA4F804EE79}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\space pirates and zombies\spazgame.exe |

"{00D5F982-530A-4AED-AB3A-9B90954F2D6E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\broken sword shadow of the templars\bs1dc.exe |

"{00E74B37-68C0-4AA1-9A2B-33421E0B297C}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\delta force\df.exe |

"{00FD6BB9-932B-437F-9C7A-08287F2127DD}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |

"{010D9412-4789-4267-99BC-1587B2F45288}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\devil may cry 4\devilmaycry4_dx9.exe |

"{0125028B-10DE-4B89-9F5B-C5422C91822E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\akfalcon\bloody good time\bgt.exe |

"{0128F305-D4D1-4EF7-B8DF-929E620D5FE5}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\alien zombie megadeath\alienzombiemegadeath.exe |

"{013B3C14-AF8A-4768-AC93-ED1DC1445322}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\fable 3\fablelauncher.exe |

"{0147B141-2EAA-42A5-BB26-EBEC7D336A1F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\bookworm adventures deluxe\bookwormadventures.exe |

"{01505DEF-0C24-4D29-A718-412BCF2C979A}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\manhole\manhole.exe |

"{017E0C3A-FD17-4DC2-A8B8-364A28C16F89}" = protocol=17 | dir=in | app=d:\program files (x86)\electronic arts\darkspore\darksporebin\darkspore.exe |

"{0186E135-5ED2-4936-9630-4108BB5C3313}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\the wizards pen\wizardspen.exe |

"{018B829E-6210-4AEF-8FC2-420EF1CF731D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\men of war assault squad\mow_assault_squad.exe |

"{018F3C45-509F-42D8-BB74-80AE15BAA055}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\star wars empire at war\runme2.exe |

"{019A258C-768A-47B8-A4EF-7ABDCF6E284C}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ultimate doom\ultimate + mouse.bat |

"{01B9CAE5-154B-465D-A48E-B637ED89276E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\tinytroopers\tinytroopers.exe |

"{01BC54D7-5BAB-4421-BB3B-B6AB1C4F0025}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\vigil blood bitterness\vigil blood bitterness.exe |

"{01C015E8-3B43-4C53-99A1-A3600CC0E95C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\legendary\binaries\legendary.exe |

"{01C5710D-AF3E-4431-B1E6-5C75856AB2D7}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\star wolves 3 civil war\sw3cw.exe |

"{01CD15BC-AE9F-4F56-85CE-53AA4D1B829B}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\nexuiz\bin32\nexuiz.exe |

"{01CF2122-0228-46CF-83C4-D15B1A77C505}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\mass effect 2\binaries\masseffect2.exe |

"{01E44C91-66CA-47F5-8EEC-4AAB2DFF6476}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\global agenda live\binaries\launcherbin\hirezlauncherui.exe |

"{01FC3E5E-EAEC-42AD-BF2A-09060AB79E08}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\a farewell to dragons\thegame.exe |

"{0202956F-32AA-4A6C-A3C3-4E43969EA3E8}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hammer heads deluxe\hammerheads.exe |

"{0228F299-61C9-4B60-A823-7A24E4A3EB31}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\theatre of war\towsetup.exe |

"{0236468F-BF75-4124-9480-18CBD8DAFD5D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\king arthur - the role-playing wargame\kingarthurmulti.exe |

"{0237B926-C8B1-4D1E-AD40-6D65B624BD8D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\lego lord of the rings\legolotr.exe |

"{0238F018-6FEE-4FEE-BBE8-0B7B80DC1C07}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\two worlds ii\twoworlds2_dx10.exe |

"{023D0D9E-BCD3-4E7A-9ABF-85432E00F133}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\analogue a hate story\analogue.exe |

"{02411360-DEF1-4695-B89C-BB650988BF4A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\lego batman 2\legobatman2.exe |

"{0244E41A-BB95-4F97-B092-08AF58DEBA2A}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\axel and pixel\ap.exe |

"{02499D9F-BC36-42FC-8626-3B07C18D14E8}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\space channel 5 part 2\config.exe |

"{0250A50B-2DC9-43CC-8D28-BFD28C9E7829}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\grotesque tactics\grotesquetactics.exe |

"{02588A4F-4BE1-410E-8827-E9BAB5FF8B10}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tomb raider anniversary\tra.exe |

"{025BD1E2-32A1-4CB7-A4A2-93FDE543DCD1}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\spacechem\spacechem.exe |

"{025D22ED-89C0-45AD-888F-D19FB30F482E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dawn of magic ii\timeofshadows.exe |

"{025F195D-6D25-49F8-8EBB-FD9D54660E5D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hitman 2 silent assassin\config.exe |

"{0272926A-2B05-4C48-AFC5-48E5A8FDCD96}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\armed and dangerous\gamedata\game.exe |

"{02824CE7-25B2-4920-B312-22F60E044EAE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\nexuiz\bin32\nexuiz.exe |

"{0298DD8A-D8D0-426F-A309-CF1278C54703}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\everyday shooter\everydayshooter.exe |

"{02E3E0F4-E8D8-4C16-BC01-F6D90310B15D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat |

"{02F26D75-4098-49EA-984F-F4DE5DE5EA98}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\bit.trip beat\beat.exe |

"{02FEBEB1-332F-4C46-85AC-C77B04C26C6F}" = protocol=6 | dir=in | app=c:\program files\crashplan\crashplanservice.exe |

"{03106B1B-F318-4D9B-9FCC-567BC0E57D65}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\lego batman\legobatman.exe |

"{0311798B-892D-4C7C-9DEC-D5E5D49A3DAA}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\commandos behind enemy lines\comandos.exe |

"{03160D26-FA5A-4EB3-BBEE-7E667E0507AE}" = protocol=17 | dir=in | app=e:\steam2\bioshock 2\sp\builds\binaries\bioshock2launcher.exe |

"{0325B6C6-DC00-4CEB-A518-D2E8659ED098}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\revenge of the titans\revengeofthetitans.exe |

"{032A8ED8-358E-40B4-8F84-D7116D9ACFFE}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\stronghold crusader extreme\stronghold crusader.exe |

"{032EFE39-BCA5-4674-8830-1C0BE958302C}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\roboblitz\binaries\robolaunch.exe |

"{03533061-CBAC-4926-9D7C-3B5D81AAE3A6}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dirt\dirt.exe |

"{035351BC-5AF7-41DD-BCBA-BA80FC447326}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\qube\binaries\win32\qube.exe |

"{03577FA2-3536-4AF5-AE8F-C715BFD28925}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\real warfare\engine.exe |

"{036A6B0D-C001-4B1B-8EA5-9D9A89B33F64}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\xpand rally xtreme\readme.txt |

"{036DB32E-3FE8-4566-90DB-182B864F6F78}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\insecticide part 1\game.exe |

"{03720B23-33C9-4D4E-AF84-597C38CFCF48}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\titan quest immortal throne\tqit.exe |

"{0373A49E-2205-4E57-870A-993E1A3A228B}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\chrome specforce\specforce.exe |

"{037A2310-FA73-49D2-808B-BD3B702EFA70}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\commandos beyond the call of duty\coman_mp.exe |

"{0387E78C-E956-421D-9F2C-509B04549435}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tobe's vertical adventure\tobe's vertical adventure.exe |

"{0388EF7A-37F8-42F5-B2A7-EFF459016935}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\world of goo\worldofgoo.exe |

"{03928EDD-ACC2-4F2D-AFA8-262DB487FAEF}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\spellforce 2 - faith in destiny\spellforce2faithindestinyeditor.exe |

"{0394C636-87F7-45FB-9AB0-68C4B8615A8D}" = protocol=17 | dir=in | app=e:\steam2\toki tori\tokitori.exe |

"{03A0451E-8CB4-421B-BF3B-6D9C9E26A404}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\quake 3 arena\quake3.exe |

"{03A69427-4AB4-4C53-A212-5C16C7E1E579}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\oddworld abes exoddus\exoddus.exe |

"{03AC42E9-2B22-4BD6-B2E0-5579BD0027A3}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\elven legacy\elvenlegacy.exe |

"{03AD48CA-37B4-49EB-AB49-9AA1E2CDDF77}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\far cry 2\bin\fc2editor.exe |

"{03B2E27B-CC10-4F6C-ABE4-B1D9FF18F470}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\amazing adventures the lost tomb\amazingadventures.exe |

"{03BDCC83-83F5-4C6A-B6CD-B449FE4CC0E3}" = protocol=17 | dir=in | app=e:\steam2\just cause\jcsetup.exe |

"{03BEA459-B2A7-4BAE-B3E2-20E052C729E1}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\king arthur - the role-playing wargame\kingarthur.exe |

"{03CF8CD1-0246-485C-A5F5-90299CC62BF9}" = protocol=6 | dir=in | app=f:\games\neverwinter\neverwinter_nw.1.20130416a.6.exe |

"{03E48BAC-3103-4681-B7D3-5F81DA886897}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\thief_gold\thief.exe |

"{03F35A82-81E2-4F3E-A292-1221B9BE7AAE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\zen bound 2\zenbound2.exe |

"{03F4A954-83D8-4499-AD3E-AF9BD370297F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\airbuccaneers\abu.exe |

"{03F64A4B-2C6C-4590-9DE5-2898175599B7}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\noitu love 2 devolution\config.exe |

"{03FDD7B3-00BA-4DAC-B2AE-7DDDD50A6C97}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\darkstar one\darkstarone.exe |

"{0402E3D5-8786-4DF9-857B-061FA6C50135}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\thief deadly shadows\system\runme.exe |

"{0408D8A3-9A91-47CA-8E84-603CE04E9CEE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\hydrophobia\hydropc.exe |

"{043D88FF-3927-4E50-A673-4F7A3CD738C1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\unreal tournament 2004\system\ut2004.exe |

"{044DF6D2-C21A-4A03-AAE4-991D19E81EF6}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\beat hazard\runme.exe |

"{044FDBD7-9907-4F1D-A67B-731B466105C6}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\feeding frenzy 2 deluxe\feedingfrenzytwo.exe |

"{04555269-BD36-4E74-B1FF-72F133AEA36D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{045B4BFF-EE3F-4FE3-8903-9CED8B2D1935}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\audiosurf\engine\questviewer.exe |

"{04703B75-76B7-4F01-BF9C-38BA6A1A0C6E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hacker evolution untold\hacker evolution untold.exe |

"{047FA04E-F91F-4F93-8F56-8F58FB79ABFB}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\ibomber defense pacific\ibomberdefensepacific.exe |

"{048B93C5-0A9A-442D-8440-D969079819B2}" = protocol=17 | dir=in | app=e:\steam2\mlb 2k10\mlb2k10.exe |

"{048B94A5-5A50-41FA-8D33-F357B72C9C5E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\silverfall\mc_game_link.htm |

"{048EABEB-878F-419C-A858-449DE34384DE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\shadowgrounds survivor\survivor.exe |

"{049327BC-9DF5-470E-BD1B-C4221ED87C72}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\terraria\terraria.exe |

"{0496047D-D58B-40AA-AA42-18197DD070D1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\bejeweled deluxe\winbej.exe |

"{04A9CDA1-703C-4243-80B4-C6A2BFB5E46E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\chrome\chrome.exe |

"{04AC5EC9-A1D1-440F-A500-A0EDAC0B1CFB}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\spellforce platinum edition\spellforce.exe |

"{04BB03AD-93EF-4D88-A25F-A3378B8D47EA}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\postal2complete\system\postal2.exe |

"{04BF0FC6-3471-472F-8B32-85E8B8CBEAB4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\metro 2033\metro2033.exe |

"{04CC71E5-3CBA-4A0B-B71F-8C657BC1642F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\jade empire\jadeempirelauncher.exe |

"{04DD8E3B-1A08-408A-9A3E-D2801604D92F}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hector ep 2\hector102.exe |

"{04E95436-86E4-43DC-AF62-8378F0AD2A80}" = protocol=17 | dir=in | app=e:\steam2\alien swarm\srcds.exe |

"{04E9A57F-CFDC-4982-BECE-AD85E5760833}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dynomite deluxe\dynomite.exe |

"{04E9F33A-8A0A-4461-8B7F-1B661EAC5EB2}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sam and max episode 6\sammax106.exe |

"{04EEF876-C2EA-486C-9757-1202AA940738}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\serious sam 3\bin\sam3_dedicatedserver.exe |

"{04FD444D-DEA8-4DDB-A144-B2105D9A26D4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\the path\pathviewer.exe |

"{0503839E-D340-4D03-95A6-732BA73ED515}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\command and conquer red alert 3 uprising\ra3ep1.exe |

"{051489A4-CDD4-48DA-8C68-4A1532F2EA8C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\delta force 2\df2med.exe |

"{052AE970-0067-4491-96B3-036DE9B9C9CF}" = protocol=6 | dir=in | app=e:\steam2\anomaly warzone earth\anomalywarzoneearth.exe |

"{0535BBEC-20DB-44BA-A5E0-1A1CC724923D}" = protocol=6 | dir=in | app=e:\steam2\command and conquer red alert 3\support\ea help\electronic_arts_technical_support.htm |

"{057356D7-EA9B-4D3D-A306-42F6A8F98623}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\ironclads anglo russian war 1866\config.exe |

"{05986093-32C8-419D-8088-855B420E6010}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\steelstorm\steelstorm.exe |

"{05A76F92-416F-4452-AA27-5A9A325519D5}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\themonsterslayer\distro\garshasp.exe |

"{05C91B2B-CC9D-4F8F-B7C9-3342011C6FD5}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\napoleon total war\napoleon.exe |

"{05ECEB78-CD15-4131-9C08-37C9ACF1E4E6}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\lego harry potter\legoharrypotter.exe |

"{0629D833-6A38-4E5E-B410-E805C1AFC5CB}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\deus ex\system\deusex.exe |

"{064CC5B2-78DF-45B7-BE46-A546D9D3012A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\rush\rush.exe |

"{0662DD53-80E5-48CA-A442-2E83E2D5BE44}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\stalker clear sky\bin\xrengine.exe |

"{0664A415-E53A-4DB4-8252-CF8302CFBBB2}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\amazing adventures the lost tomb\amazingadventures.exe |

"{067551D4-4C5D-42DB-BF42-32C74340F20A}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\worms\runworms.bat |

"{067DFF07-128D-491E-AFD3-688318266F44}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\rocket mania deluxe\rocketmania.exe |

"{06905526-D9DC-4D65-B095-BAC39B308FA5}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\x2 - the threat\x2.exe |

"{0694DEB3-DDEE-4C15-8A5A-97A842D92127}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\condemned criminal origins\condemned.exe |

"{0699F921-8C5A-472A-BB92-582D9F2F963F}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\closure\closure.exe |

"{06AA259A-4FDF-420A-BB20-C343DC2C5CF4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\avernum 4\avernum 4.exe |

"{06C7B6E9-149C-421A-9F4D-F233161CF732}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\grand theft auto 2\gta2.exe |

"{06D0794F-9C03-49BA-94D2-9B1648F37C1F}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\dreamfall the longest journey\dreamfall.exe |

"{06F21304-2EF2-4397-A263-39214BC26CFA}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\spellforce platinum edition\spellforce.exe |

"{070BA519-4C3A-4ECD-8B3B-FA5401A49F8E}" = protocol=6 | dir=in | app=e:\steam2\command and conquer red alert 3\runme.exe |

"{0712F834-537D-4083-8692-B55E938ED872}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\shadowgrounds survivor\shadowgrounds survivor launcher.exe |

"{071E0FDD-D2C8-483E-A4DB-133C9203B838}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\your doodles are bugged!\yourdoodlesarebugged.exe |

"{0720D1F2-4158-42E6-8E83-0DC191D51726}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\the guild ii\guildii.exe |

"{0721004E-7D49-4AC3-ADAB-02CE22D2B80C}" = protocol=17 | dir=in | app=e:\steam2\x3 - reunion\x3_reunion_manual_steam_english.pdf |

"{0725D051-610C-4A46-9B84-D829857C2CE6}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\eschalon book 2\book_2.exe |

"{0727574D-7577-4E61-B4F9-FC83AF64C389}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\trine 2\trine2_launcher.exe |

"{072CE145-AB07-4747-80A9-0470A9DEC5DE}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\prince of persia the warrior within\princeofpersia.exe |

"{07386377-6DDC-4EDA-9916-456175BD50EB}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\alien hallway\preloader.exe |

"{07649481-423F-47E9-8744-1D76406B06B4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\vertex dispenser\vertex dispenser.exe |

"{07822D56-5870-4C22-8FC2-330A9F6B574B}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\sonic and sega all stars racing\config.exe |

"{07890CB0-A3ED-4782-B862-5868817713A3}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\doom 3\doom3.exe |

"{078C99D4-8B42-41A9-A73D-55A08D2F6DF1}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sonic and sega all stars racing\config.exe |

"{07997F21-7FFF-40F1-A24B-59D83BCE2F93}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\space pirates and zombies\spazgame.exe |

"{079C945C-801D-4CFE-84B0-F22D9C99D239}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\overlord\config.exe |

"{079D8268-4762-40AC-ADFC-04F418E39A96}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\joint operations typhoon rising\jointops.exe |

"{07BFBE9C-BD2D-413E-BACF-138E451EAD91}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\quake 2\quake2.exe |

"{07DAFBB2-448D-47F0-A04F-6FDCB3E233A6}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\commandos behind enemy lines\comandos.exe |

"{07EA315C-138C-4C3A-BE57-59352FC81CE2}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\hearts of iron 3\hoi3game.exe |

"{07EB4E7D-403D-4C4B-BCD2-05DF28AB56AB}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\stronghold crusader extreme\stronghold crusader.exe |

"{07F5F149-995A-412C-B1FE-090DE63CD7E3}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |

"{0807616B-0C69-4858-A245-ADCF4F8B8BF8}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\saira\settings.exe |

"{0812333B-2F87-47CE-BFA1-769298A638D9}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quake 2\reckoning.bat |

"{0813F71C-E2D2-4359-8B8D-369A1CA8D097}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\crash time ii\burningwheels.exe |

"{082D0CE2-A175-408F-8FAD-54242944FD4C}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\red faction ii\red faction ii.exe |

"{0830F7F4-C954-492B-AA45-28A7F0AB717B}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\diamond dan\dd.exe |

"{0854AE1C-68CA-44B7-A410-2438D78A66D9}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hackslashloot\hackslashloot.exe |

"{08660895-2AC5-4283-B2A9-D12C9E2E12C0}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\civcity rome\civcity rome.exe |

"{08870BD6-002E-4485-A869-FF2812E1C049}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\rainbow six lockdown\lockdown.exe |

"{08874F6D-3D3C-43F4-BD3B-74051D5F555D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\akfalcon\sin episodes emergence\sinepisodes.exe |

"{088E8484-1927-4015-A9E4-2C8FF6F8A19C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\talismania deluxe\talismania.exe |

"{08D84014-215C-46A8-B078-5A522B5FD9DD}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\startrekdac\bin\startrekdac.exe |

"{08E55B0A-B705-4570-AB08-D998A87C1909}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\dwarfs\dwarfs.exe |

"{08ECE521-54AA-405C-8BA9-8E4958260388}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\x2 - the threat\x2.exe |

"{08F632E7-4DB5-4549-88EA-67521FA8DF59}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ben there, dan that!\winsetup.exe |

"{090DFF26-9CEC-44AC-994B-5989271477DA}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\joint operations typhoon rising\jointops.exe |

"{09133C25-D8E3-481A-BBA8-27B0212A3D0C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\x3 terran conflict\x3ap.exe |

"{091F43B5-E503-4901-A094-08B5E72FC83A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\stranger's wrath\launcher.exe |

"{09265CE7-1DB5-4216-B774-51FF3E1F2939}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\aim racing\aimrace.exe |

"{0927CEB0-3E6D-45D4-AB98-8A0ABA9C41FC}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\supreme commander\bin\supremecommander.exe |

"{0939AABA-4CB4-4F0D-871F-E92C77F1045E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\the first templar\tft.exe |

"{093E9BD7-7DCA-4657-B66C-9B2A1F2FBFE3}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\escape rosecliff island\escaperosecliffisland.exe |

"{09522A9C-2DC5-4DDC-A37E-BCDB34C815A9}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\riven\riven.exe |

"{0955ADCB-8115-4BEF-A3FF-F5D69FAC5B8B}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\lugaru hd\lugaru.exe |

"{095ADA34-3CF4-4B6B-991D-1709DD52CF2B}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\star wars starfighter\starfighter.exe |

"{0962B812-BC62-41F2-9D0C-C13053AE5FC3}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\big money deluxe\winbm.exe |

"{09714503-7531-4C10-8C45-3CA0FCDEDA51}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\theatre of war\builder.exe |

"{097806F1-5731-4838-ABCE-3B0F7CF8C29C}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hoard\win32\reuben.exe |

"{097D8066-12DB-4A6D-90DD-A3BF72067C0A}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\port royale 2\pr2config.exe |

"{0992D44D-1DA5-4B1C-9750-1486BC66120F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\spore\support\ea help\electronic_arts_technical_support.htm |

"{099E9AC1-CC8C-4D38-8D6A-5156A6F4E9D0}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\battlestations midway\options.exe |

"{09B26244-AB30-4926-888C-489ED11C1BB3}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\serious sam the random encounter\sstre.exe |

"{09B2A625-83F8-4D93-AC84-757AEE0FCFDC}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\nyxquest kindred spirits\nyxquest.exe |

"{09B37DA9-69B6-4FC5-BD7C-E87B4DE986D8}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\juiced 2 hot import nights\j2launcher.exe |

"{09C0ACE2-0358-4B39-BD65-0CC7DBF51689}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\operation flashpoint dragon rising\mission editor\missioneditor.exe |

"{09C8D82E-0C88-4F01-8ACD-83D60F4533DA}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\f-22 lightning 3\l3.exe |

"{09CAFEC0-0041-4636-9BA6-85AFA8E9226D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\cloudberry test\run_game.bat |

"{09D49C0F-7D24-488C-B937-5D022CF05E7D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\arcadia\act.exe |

"{09D9289C-B00B-43BB-8EC4-F946EC958DA5}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\brothers in arms hells highway\binaries\biahh.exe |

"{09F08F56-13F1-438D-9408-A7EC384E0FE3}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dreamkiller\localized_readme.exe |

"{09FD4FF2-41CC-49A7-9C9D-2960CE3E9C81}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\shank 2\bin\shank2.exe |

"{09FD7DE2-7DB2-40C0-B2D3-7BF3723E90F4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\stellar impact\stellarimpact.exe |

"{0A03390C-E5F7-40A0-865E-2A8BBD238DB9}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\bioshock 2\mp\builds\binaries\bioshock2launcher.exe |

"{0A04CF60-CABA-4DBD-ADC0-C7AEBE87B61B}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ultimate doom\ultimate.bat |

"{0A1CF613-005D-49D4-BB23-2BEF2B047DC9}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\doom 3 bfg edition\doom3bfg.exe |

"{0A2627E7-F44E-4E82-8EDA-64FE7896033E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\towns\towns.exe |

"{0A409698-60A8-4FFD-BC0C-B7508F8BDA4A}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\crazy taxi\config.exe |

"{0A432891-CD7D-4D78-B4BA-30C91BD4771E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\universe sandbox\universe sandbox.exe |

"{0A50FB7B-02A4-451E-B9DF-DF3C5787DA82}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\divinity ii - dragon knight saga\bin\divinity2.exe |

"{0A5B0904-B205-42E7-9F6A-8B61B71BC029}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\port royale 2\pr2.exe |

Share this post


Link to post
Share on other sites

extras.txt post 2

"{0A63DD06-7607-4362-AECC-C89A1CBA3199}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\morrowind\morrowind launcher.exe |

"{0A6E0F7A-643A-456C-B185-3FCA54D95232}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |

"{0A91471B-9F2E-433F-8178-CD3B861AF700}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\death track\deathtrack.exe |

"{0AA29C64-4BA8-464B-A7C6-5BFD3E958673}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty 4\iw3sp.exe |

"{0AAB80E5-CF38-4254-A290-32C56F56CC10}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\akfalcon\garrysmod\hl2.exe |

"{0AAEC4E7-2E0F-4F17-8F34-85E49BB8F6E0}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\solar 2\solar2.exe |

"{0AC33297-9DE7-4BD3-8563-44C04CB4613D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\command and conquer 3 tiberium wars\support\ea help\electronic_arts_technical_support.htm |

"{0ACA83F5-2E86-443A-9F4B-9AAF8C1DBCBE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\saints row 2\sr2_pc.exe |

"{0ACD4623-C185-40BE-9AC9-E2B5F3F72C0D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\yosumin\yosumin.exe |

"{0ACEB99B-1C8B-439D-9AEC-EBDD67536112}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\ducati world championship\ducati.exe |

"{0AD30D72-0790-4C68-ACC7-F2080FAFBE4D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\damnation\binaries\damngame.exe |

"{0AD3A02B-847F-493F-AD56-12A9C41F82D6}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\command and conquer red alert 3\runme.exe |

"{0AD59E93-FCBC-4DEF-8F92-0470B25413D9}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\the longest journey\game.exe |

"{0ADDB3BC-9644-465E-9A55-C692065F3C77}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\hammer heads deluxe\hammerheads.exe |

"{0AE9F401-5055-47B4-9624-8B35916F9450}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\silverfall\register\register.htm |

"{0AEBC27A-A7EF-456B-9283-A8391FEEADF4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe |

"{0AEE66CC-3B77-4BBD-814F-429D8C46545D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ghostbusters\ghost_w32.exe |

"{0AF0380E-569E-4975-94D5-DC8AE613D485}" = protocol=17 | dir=in | app=e:\steam2\battlestations midway\options.exe |

"{0AF8D735-45F7-4E4B-BB8A-27E3B936F3EB}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\waveform\waveform.exe |

"{0B25619A-7693-47BD-B661-E017FE692D88}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\necrovision\bin\necrovision.exe |

"{0B41809C-DF7B-4F58-A44E-716913272AB0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\the last remnant\binaries\tlr.exe |

"{0B463FE5-6897-46A6-B996-B1CB578DD7DD}" = protocol=17 | dir=in | app=f:\desura\common\dawnstar\dawnstar.exe |

"{0B47D861-A28F-4C4B-8322-5FFA77AA757A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\rip 2 - strike back\ripsb\rip.exe |

"{0B4E5682-5A8B-45A2-89AC-C8C7AABAC4CA}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\silverfall\silverfall.exe |

"{0B6415E9-8475-43B7-A002-7A10032D317E}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\overlord\overlord.exe |

"{0B6BDB93-ABB6-44F1-9BD6-E3E229866AC2}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sam and max season 2 episode 2\sammax202.exe |

"{0B7576BB-4189-4DFE-A3D2-5CAD2FA1E298}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\mark_of_the_ninja\bin\game.exe |

"{0B88C43D-889B-4F7B-B921-B4908527D9A0}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\conflict denied ops\conflictdeniedops.exe |

"{0BAD59C4-31C4-401F-81C5-207B2DB3BB25}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\warlock - master of the arcane\support\ino_co_com.url |

"{0BBAB6FC-0619-49A4-B47F-5E870D3E0244}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\space rangers 2 reboot\rangers.exe |

"{0BC083E4-8983-40B3-A1F3-302028A675A2}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ironclads high seas\ironclads_high_seas.exe |

"{0BC13FDE-DC7B-45D5-8A2B-3CC6CBDA9D65}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\sam and max season 2 episode 4\sammax204.exe |

"{0BDFFEE8-89C2-4762-B9E2-974F40FBD071}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\mafia ii\pc\mafia2.exe |

"{0BE05C38-E02C-491B-B955-4BE88A3D0E74}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\prey\prey.exe |

"{0BE534D6-6632-49A7-AEF9-9C650B460FB0}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ankh - heart of osiris\bin\release\ankh-osirisheart.exe |

"{0C1A088F-0432-4497-B008-53AB421F08B6}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\birth of america\docs\birth of america manual.pdf |

"{0C32104E-606B-4E5C-9C48-4AE424462F1D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\plain sight\plainsight.exe |

"{0C3B63E0-3515-461C-851B-2FD9C1064CC6}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\ship simulator extremes\steam.exe |

"{0C45D91E-F6E6-4F33-B405-B5AA809AE472}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\maelstrom\configurationtool.exe |

"{0C4F14E2-88C1-46F2-B4DD-A7F0B0A4B9ED}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\yosumin\yosumin.exe |

"{0C6833CF-613F-4592-A7C9-CD889999DE10}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\mass effect 2\masseffect2launcher.exe |

"{0C7180B5-7287-4687-8E67-9D2F12D71795}" = protocol=6 | dir=in | app=e:\steam2\frontlines fuel of war\binaries\ffow.exe |

"{0C8C8FB3-FA96-4DF5-9195-CC94A70CE5BA}" = protocol=17 | dir=in | app=e:\steam2\apox\gameclient\apox.exe |

"{0C8DA2EB-37BE-4E7B-A8E3-AAC992D291B1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\far cry 2\bin\fc2serverlauncher.exe |

"{0CA62212-65D7-4814-8FCD-9E294018A659}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\death to spies moment of truth\truthsetup.exe |

"{0CA77A8B-2E7D-4AD8-9D4D-CF5CCCC6ED3D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\bunch of heroes\keyconfig.exe |

"{0CBECA08-163C-4515-87B8-C2FA6C2D3252}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |

"{0CEDD70F-89D5-4CF9-BCF8-B7F3A5773895}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\project freedom\projectfreedom.exe |

"{0CFE58D2-6BA7-4341-84A6-8904EF693FE8}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\noitu love 2 devolution\nl2.exe |

"{0CFE5D22-3E5C-4D5F-8AE0-AF135F8C1917}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\big brain wolf\bigbrainwolf.exe |

"{0D0A68A2-041B-4748-866E-64DA44D8DF60}" = protocol=6 | dir=in | app=d:\program files (x86)\electronic arts\bulletstorm\binaries\win32\shippingpc-stormgame.exe |

"{0D0C3027-7563-48D7-B44E-7A6CC74EED16}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ninja blade\ninjablade.exe |

"{0D1C460C-0B9B-4DDD-9471-8063BDC7074E}" = protocol=6 | dir=in | app=e:\steam2\alien swarm\srcds.exe |

"{0D286B17-1260-4C5A-88CE-216326D648D1}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\blackwell convergence\convergence.exe |

"{0D528192-8900-4BD6-904A-3867212AFE68}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell conviction\src\system\conviction_game.exe |

"{0D529E41-F0D9-4448-AA91-DBBF7F4A20C8}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hoard\win32\reuben.exe |

"{0D56C863-E3DD-43B5-9F03-DD993A418DEB}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quake 3 arena\quake3.exe |

"{0D67E15F-C234-4E40-8832-C0761FDA65B2}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\shattered_horizon\client_exe\shattered_horizon.exe |

"{0D6BC7A2-1418-4B0A-A7F6-DB83BA025516}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\condemned criminal origins\config.exe |

"{0D79DC02-4FCF-4F33-B495-2997935EBF27}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\alpha protocol\aplauncher.exe |

"{0D7A889E-D847-48C0-B5DB-3D1401C328A9}" = protocol=17 | dir=in | app=e:\steam2\mx vs atv reflex\mxsettings.exe |

"{0D838B05-C74B-47D2-86FB-088FCDD64AA8}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\patrician iv\patrician4_addon.exe |

"{0D8B3F9E-9FE0-496F-A06B-FD783A31C04F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\all zombies must die\binaries\win32\shippingpc-bzb2game.exe |

"{0DA111F5-8D6A-4E43-B3CF-61CD96CD5674}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\gratuitous space battles\gsb.exe |

"{0DD2696A-4350-48DA-BBBD-25C4295B6A64}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\theatre of war 2 africa 1943\options.exe |

"{0DD29978-AF27-42AF-A7CF-178D3D5F6C09}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\shadowgrounds survivor\survivor.exe |

"{0DDE79E3-B6D6-44E0-A530-086AAE523D56}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\crazy machines 2\cm2.exe |

"{0DF77B37-FB46-4861-9879-ACD6030C81A4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\critical mass\criticalmass.exe |

"{0DFBACF5-1687-4525-9EE3-47689E8C4CE7}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\arcania gothic 4\arcania.exe |

"{0E0632C1-FB42-4F98-8D3F-D21F55289650}" = protocol=6 | dir=in | app=c:\users\chris\downloads\solutoinstaller.exe |

"{0E0A1EED-46D2-42B1-A14D-9173075D1A01}" = protocol=6 | dir=in | app=d:\program files (x86)\electronic arts\mass effect 2\masseffect2launcher.exe |

"{0E0F81ED-B699-400A-A172-2C0C7C37F68C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\avernum 4\avernum 4.exe |

"{0E1E2426-460F-454E-B7AC-A83ED8545C2D}" = protocol=17 | dir=in | app=e:\steam2\the witcher enhanced edition\system\witcher.exe |

"{0E273EBA-7C4D-4B35-83B2-9E334C35FA5A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\star wars the force unleashed 2\swtfu2.exe |

"{0E27BC2A-36B3-4E9E-ADB8-0C880B70E2A0}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\orcs must die!\build\release\orcsmustdie.exe |

"{0E359018-F24F-4D83-8266-5F9B1CB7B190}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\red faction armageddon\rf4_launcher.exe |

"{0E4CD53A-2FEB-492A-A706-9C2164DAAF52}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\stranger's wrath\launcher.exe |

"{0E71DBF3-1EC7-4B61-BE89-5AD5AAC6208A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ship simulator extremes\steam.exe |

"{0E785A5E-6BDE-4EBB-914D-5A7BDFB7D0A9}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\oddworld munchs oddysee\bin\munch.exe |

"{0E84C7A1-91BB-41D1-8025-01E73E9A9CBE}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\scoregasm\scoregasm.exe |

"{0E8DC899-FBF3-446D-B6E8-91AB6245B77A}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\american conquest\dmcr.exe |

"{0E8E0D6E-BACE-4933-B2DD-802E34B19961}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr\raptr_im.exe |

"{0EB1F303-7616-45A3-9751-6E43C334149A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\stronghold crusader extreme\stronghold_crusader_extreme.exe |

"{0EBDB86D-E938-4090-B364-BC3030017D9C}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ravaged\binaries\win32\ravagedgame.exe |

"{0EDE954B-A6E3-4F5A-8A8C-C510FDC396F2}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\riven\riven.exe |

"{0EF0B5F0-E615-4099-84BD-921442FF7EAA}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\recettear\custom.exe |

"{0EF250B1-2F83-4DEC-85CA-81C1237A056E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\broken sword 3\bstsd.exe |

"{0F1B2A64-8170-46FD-AA16-E40BB21477C1}" = protocol=17 | dir=in | app=e:\steam2\america's army 3\binaries\aa3loader.exe |

"{0F2FCF8D-8954-4A1B-BCB7-217277517F9E}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |

"{0F32CC03-7736-471A-B33D-61EBBA75C667}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\oblivion\oblivionlauncher.exe |

"{0F351D44-0F7B-4690-B707-9DA6F6435887}" = protocol=6 | dir=in | app=e:\steam2\mx vs atv reflex\mxreflex.exe |

"{0F431BEA-61F2-4754-8F95-247AF9D66316}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\port royale 2\pr2.exe |

"{0F5949C0-FCDC-4EF6-ADAD-81B5F0B58082}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |

"{0F6092E6-8C1F-4FA4-A1EC-9BBC544D3EE3}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\gemini rue\reslists\gemini rue.exe |

"{0F6C8593-44E0-4624-9CA6-C5E506C7152C}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\devil may cry 4\devilmaycry4_dx10.exe |

"{0F8AD9B1-E8F2-472C-A974-7AE9FBF1FE1A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\machinarium\machinarium.exe |

"{0F9EE33A-CDB1-4998-84F7-8B25B60437AA}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe |

"{0F9EE54C-E29C-497E-95D6-033EE1CDD61B}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\star wolves 3 civil war\sw3cw.exe |

"{0FAE47DD-269C-4DD3-B04D-86A2594CEF71}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\simcity 4 deluxe\apps\simcity 4.exe |

"{0FD07406-6AB2-48FA-90F7-A25E43EF3DC5}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\post apocalyptic mayhem\pammaingame.exe |

"{0FE930F9-B547-42E5-A82C-9A5B1BBB5A16}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\monday night combat\binaries\win32\mnc.exe |

"{1000E41A-E75B-4061-B331-C08C4C9BC107}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dino d-day\srcds.exe |

"{10058063-CB49-4788-A295-DF693EA61C9F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\botanicula\botanicula.exe |

"{101075A5-65FB-4A52-B9CF-7E2D772529E0}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\ducati world championship\ducati.exe |

"{102216EF-9FD3-4770-871F-772EB643B9BA}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\dark fall lost souls\darkfalllostsouls.exe |

"{102876A0-C6CF-4652-87CC-0E73CF33AE8E}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\making history the calm and the storm\bin\makehist.exe |

"{102DBB23-F487-49AF-A527-DAD64B53A0E5}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\race driver 3\rd3.exe |

"{1030D2CC-6DC3-4FA7-A325-BFEA863F9F77}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\wizorb\wizorb.exe |

"{1040920B-5284-4E08-AD34-C5EFD34EB94E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\east india company\piratebay.exe |

"{104242CC-14F0-4908-B586-736E919A8787}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords_pitboss.exe |

"{10441D9F-F504-4AAA-BF9D-F84E3E44F9D0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\command and conquer red alert 3 uprising\ra3ep1.exe |

"{1078411B-36D8-40FD-B29F-5CF29F1AB98B}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\wings of prey\launcher.exe |

"{1081DDD1-74B2-46E5-920C-F03697AE8680}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sid meier's civilization iii complete\conquests\civ3conquests.exe |

"{1084FF6A-0C14-4507-9A78-E58A4D585C1E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\cossacks back to war\bin\hview.exe |

"{10872A69-7CE7-42AF-AE98-1E26C848F150}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\just cause\jcsetup.exe |

"{109B09DC-6FAD-4AD5-9BA5-FDFF43B13FD2}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\dungeon siege 2\dungeonsiege2.exe |

"{10ACAAAC-F461-45E3-B81D-3F58373E962D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\uru cc\uruexplorer.exe |

"{10B2F257-272D-4B9B-A0F0-A4DDBF3B91E7}" = protocol=17 | dir=in | app=e:\steam2\aim racing\aimrace.exe |

"{10D680E2-4266-47B7-B5B5-27F4E01CD426}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\prey\prey.exe |

"{10F128CE-BDA0-454A-8DDF-29F91526766B}" = protocol=17 | dir=in | app=e:\steam2\kane and lynch dead men\launcher.exe |

"{10F79816-6949-420C-BAB7-543ECEDFFCF7}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\titan quest\titan quest.exe |

"{11128874-1DD1-4877-A34D-B8F46B4738D6}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sam and max episode 6\sammax106.exe |

"{1134D227-0C96-474A-920F-4FBCEA64C017}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\ridge racer unbounded\rru.exe |

"{1147D9A8-DC70-4E99-810B-30BBE5BA6741}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\apox\gameclient\apox.exe |

"{11531C79-AAAA-494F-A473-599E1958F1D6}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\mass effect\binaries\masseffect.exe |

"{115E5884-DE04-49D7-B048-C0F1E5E15C72}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hearts of iron 2 complete pack\hoi2.exe |

"{116865DD-9125-4F6E-A754-E0EBEAF39BF5}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\need for speed shift\support\ea help\electronic_arts_technical_support.htm |

"{116C1D25-2838-4479-8FEC-4884420D432D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\iggle pop deluxe\igglepop.exe |

"{116CB78D-88F4-40D4-81A2-25ED1080F2E8}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\culpa innata\game.exe |

"{116DB0C8-9727-44E7-A6C5-C21FB90D40C4}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\hector ep 2\hector102.exe |

"{117D379E-9B5B-4743-8F5F-3D1251988CEF}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\eye\eye.exe |

"{11AEF51C-6DE5-41ED-862D-023267F78B83}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\defensegridtheawakening\defensegrid.exe |

"{11B35DB3-11CF-46D4-AC4A-2EE9A6855168}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\project aftermath\projectaftermath.exe |

"{11CC1ADF-6F97-40DB-BE6C-508AA66EA5B0}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\1000 amps\1000ampsrewin.exe |

"{11CF020E-7535-4609-A800-EE94F31BCA43}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\sam and max episode 1\sammax101.exe |

"{11E09F59-B78B-4262-A5AC-02DBC5E93648}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\f-22 lightning 3\l3.exe |

"{11E10DC5-82DA-48FA-AF0B-956659AAEED8}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\death track\deathtrack.exe |

"{11E4AC1F-1A5F-485A-838D-1021A0E4DEF9}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\helldorado\helldorado.exe |

"{11E828DB-9D17-45D8-8BE7-D648E9E3282E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\shatter\shattersettingseditor.exe |

"{11EB9703-D68E-4948-AEDB-C95983411B27}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\shadowgrounds\shadowgroundslauncher.exe |

"{11FAC541-D047-49DF-98C3-5E7A8DF2D2C0}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\delta force\df.exe |

"{12159803-6C6C-436C-AB18-E8C947655882}" = protocol=6 | dir=in | app=e:\steam2\alien shooter 2 - reloaded\alienshooter.exe |

"{1224654F-FA87-41B1-ADDD-DFD1B9E702B1}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\still life 2\sl2.exe |

"{122F7517-9C8E-4E16-9C53-20C41C82F3EE}" = protocol=6 | dir=in | app=e:\steam2\costume quest\cq.exe |

"{12425AD0-0C3F-43D9-9415-91EE18AC345F}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\command and conquer 3 - kane's wrath\cnc3ep1.exe |

"{124F2F40-9839-4E85-B26A-9ECD79DCF45A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\tank universal steamworks edition\tu.exe |

"{125436AC-1864-4555-A122-6E86124F1467}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\gumboy crazy adventures\gumboycrazyadventures.exe |

"{125C050C-2524-4F96-A3CB-EF00EDF37F29}" = protocol=17 | dir=in | app=f:\desura\common\guncraft\guncraft.exe |

"{1274535C-0E52-4ECB-A447-C0E7ED3934D8}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\containment\containment.exe |

"{12841C91-1A2A-466F-9E02-584AB4C10D8E}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\death to spies\smersh.exe |

"{128772F4-2244-4012-B220-FAD8ACD5F2F7}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\magicka\magicka.exe |

"{1291BFA5-C3C0-4CA7-A4BA-E4C43DDF4813}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\burn zombie burn!\bzb launcher.exe |

"{129423B4-E84D-47CD-B60A-7AE7DE93799F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\simcity 4 deluxe\support\ea help\electronic_arts_technical_support.htm |

"{129E4241-5797-4465-A55A-F04D18D73B08}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\spore\runme.exe |

"{12AE7799-28F6-488A-BE64-67E7C3B4E433}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\delta force land warrior\dflw.exe |

"{12AEADF5-9E01-4A85-8A50-B9E40CA9F016}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\elven legacy\magic.exe |

"{12B7141C-68F8-452A-B8AE-44733DC5D6B9}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\astrotripper\astrotripper.exe |

"{12BB6270-04BB-4946-8CA3-C93F228DDE24}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\fallout 3 goty\falloutlauncher.exe |

"{12C09E22-0C2D-4572-A73E-C987A181B59A}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\tomb raider anniversary\tra.exe |

"{12C4BB2D-F187-4184-BB99-5EA5408B6AD1}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{12CC61CE-8950-4183-92CD-489BDE920FAE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\to the moon\to the moon\to the moon.exe |

"{12CC64F2-BDA9-4AE6-8CB2-9232CF13BDF1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\your doodles are bugged!\yourdoodlesarebugged.exe |

"{12CE59EB-90E1-43F5-AAA6-B3059FA2744C}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\stronghold 2\stronghold2.exe |

"{12FF4850-632A-4566-807F-7DAE61871B0C}" = protocol=6 | dir=in | app=e:\steam2\grand theft auto iv episodes from liberty city\eflc\launcheflc.exe |

"{130A84AF-3AE1-4F54-834B-573192E264A2}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\crysis warhead\bin32\crysis.exe |

"{130B0519-0236-4C25-9B41-8C5B4B995B28}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sam and max season 2 episode 3\sammax203.exe |

"{1321F320-951B-4E64-A178-9FD7754D5791}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\magic the gathering dotp 2012\magic_2012.exe |

"{13223DBB-672B-4E37-8833-B783BBE1C51D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sonic generations\configurationtool.exe |

"{1335D24C-20A9-4628-9893-48E62CC512F6}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\beyond good and evil\checkapplication.exe |

"{13495628-786E-41D7-AF31-E78A74A8E5CE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |

"{1353E3A5-6D5B-41AD-A20B-3315FB07D51F}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\lunar flight\lunarflight.exe |

"{136AD2AA-6C96-4673-A2C6-B1BC1A4D0D46}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hitman codename 47\setup.exe |

"{137145B0-6291-4301-BCD7-2CBAA7DDCFBA}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\cloudberry test\run_game.exe |

"{13758494-5CE4-4D96-896E-0554424C9573}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty black ops\blackops.exe |

"{13762208-4F73-4E96-891F-0CDB8F865274}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\theatre of war 3 korea\builder.exe |

"{13775B6B-1BC3-40EC-941F-4EEAD126B040}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\unreal tournament\system\unrealtournament.exe |

"{137BA6A9-DA53-4D2E-83C2-2ECB70BBF1F0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\battlefield bad company 2\support\ea help\electronic_arts_technical_support.htm |

"{137E9226-F06F-41BB-B0EC-D3EAADDA85AC}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\gundeadligne\gundeadligne.exe |

"{13803D51-52CF-4BEF-9A45-7B8D13A12607}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\far cry 2\bin\fc2serverlauncher.exe |

"{13A72B6B-C1A9-48CC-984F-F9E2510A1DBB}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\snapshot\snapshot.exe |

"{13B1C908-542E-4778-BDAD-734B99567E1D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\the cherry blossom murders\cherryblossommurders.exe |

"{13CCCAB1-2B3E-4BBA-9F60-432AB66B8B76}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\patrician iii\patrician3.exe |

"{13CE4B36-DC7C-4CD4-9FF8-91CBC6D032C5}" = protocol=6 | dir=in | app=e:\steam2\swords and soldiers\swords and soldiers launcher.exe |

"{13D2288F-5217-4707-B45D-0069715FB462}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\demolitioninc\finaldgamegl.exe |

"{13E2599A-9B1E-4647-B7F8-AB8A93C673EB}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\race driver 3\rd3.exe |

"{13E2E248-802D-4C76-A284-C3BF57FF91E2}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\exodus from the earth\bin\efte.exe |

"{13E837AF-16E5-4739-BBAF-70403D9753FD}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dungeon siege 1\dungeonsiege.exe |

"{13EA0EFA-B9B4-43DC-B4A9-3D43E966856E}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\fallout 2\fallout2.exe |

"{13F4ECC9-8CA8-4D3F-9C27-CCE30A4C70EB}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\sam and max episode 6\sammax106.exe |

"{13F8A190-82C3-45BE-B8BB-AD4345787F87}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\multiwinia\multiwinia.exe |

"{141128C9-EDC5-4A21-85B4-1A64EAC55168}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\fractal\fractal.exe |

"{1419AD5D-2E19-4594-AF8E-92A0277B7B5D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\men of war red tide\redtide.exe |

"{14254720-6A23-4213-B7DC-51528DE6D473}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{14256306-B747-4848-B1A2-A427ED2CD4A8}" = protocol=17 | dir=in | app=e:\steam2\alien swarm\swarm.exe |

"{14272E87-728A-4D3C-8B61-034D0F41E0E2}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\burnout paradise the ultimate box\burnoutparadise.exe |

"{14279CD2-5205-4C4D-BEC0-FB2733A933B1}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\grand theft auto 3\gta3.exe |

"{142891F6-596E-4E12-8BCC-543654F354AE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\dungeons - the dark lord\dungeonsthedarklord.exe |

"{142956E4-FE2E-4C5F-AB52-D53CFEAFD97A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\theatre of war\missioneditor\editor.exe |

"{14509F13-29B6-4448-8E55-C4CB17AE9F91}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\alien breed 2 assault\binaries\alienbreed2assault.exe |

"{1453A6DF-66BC-466E-9C35-446C2DE6AEB5}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\tommy tronic\tt.exe |

"{1473337C-54B9-4003-B076-7FC6E450B46A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords_pitboss.exe |

"{1487B9DF-1FD5-4AE0-B096-57CA7DBED38F}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\crusaders thy kingdom come\loader.exe |

"{14881FB5-25B0-47FA-A24E-20E8740EB827}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\post apocalyptic mayhem\pammaingame.exe |

"{14A712AB-4859-40C8-9F92-CB2ED3CF8CA5}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ankh - heart of osiris\bin\release\ankh-osirisheart.exe |

"{14A83106-CAF2-4BC6-BAD9-90A4A0BE095A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\specops_theline\binaries\win32\specopstheline.exe |

"{14A9601F-4E46-494A-857C-37C914867731}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\scoregasm\scoregasm.exe |

"{14AC745D-E52F-448C-9C3A-3FF5B0E226C3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\fear ultimate shooter edition\fearxp\fearxp.exe |

"{14BC58C0-4434-48EF-B0E6-7E446F2AE5E8}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\bit.trip runner\runner.exe |

"{14C415D3-EF74-4856-8031-B78BE8144E45}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hammerfight\hammerfight.exe |

"{14C84D68-6D6F-4DEC-9133-C2BC404CDA3E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\choplifter hd\choplaunch.exe |

"{14D4ECC7-3C5E-4896-A6A7-7D9C5B143953}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\death to spies moment of truth\truth.exe |

"{14E0ADD8-12E6-4D12-BC2B-DFE407A1F746}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\slamit pinball big score\bigscore.exe |

"{14E5EDE0-BEC3-4160-88CD-AE4DAC70B812}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\serious sam 2\bin\sam2.exe |

"{14E9F81F-9DED-400E-969D-4FE70F225AC8}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\lume\lume.exe |

"{14F4AA96-4474-4E0A-9137-B2EE9458ACAF}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\iron warriors\start.bat |

"{14F91E5B-773E-4DEC-9DDD-EBF059273952}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\aliens vs predator\avp_dx11.exe |

"{14FA64A4-FFD6-4D00-A4B6-3124A1124E0E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\demolitioninc\finaldgamegl.exe |

"{15026D9E-5210-4B53-AAF9-394F4C7687D4}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\breath of death vii\bodviipc.exe |

"{15219BFB-AEEE-4418-8E74-E0C29838578F}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sam and max 303\sammax303.exe |

"{152B7036-05F8-4C2A-9F7F-1AB2C3CC7C25}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\max payne\maxpayne.exe |

"{152FACD8-0256-440E-8E86-DA937D7C36D0}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\space rangers\rangers.exe |

"{1531665A-957C-4931-9E63-7E6BDB8E2D45}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sam and max season 2 episode 2\sammax202.exe |

"{153359F2-4938-4061-B6D5-82AA925C107A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\edge\edge.exe |

"{1558E8FE-7AF2-4D4B-BD18-ED4CB371FAB8}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\bc kings\bckings.exe |

"{155CC537-8BD0-4B09-80BF-9F2AD6BB0D9D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\space giraffe\spacegiraffepc.exe |

"{155CECE3-8F39-47BB-824D-50008193C2EF}" = protocol=17 | dir=in | app=e:\steam2\total war shogun 2\benchmarks\benchmark_current_settings.bat |

"{155EDE81-EB81-47F5-9B8A-7C8531172766}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\analogue a hate story\analogue.exe |

"{1582E11A-0D64-4086-BA53-9B2909781674}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\titan quest immortal throne\tqit.exe |

"{15864D67-6A23-4829-A70C-0FBAC4FE31A3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\ironclads american civil war\ironclads.exe |

"{1586F070-5170-4D12-8B7F-ACC065A8BA6C}" = protocol=17 | dir=in | app=e:\steam2\alien breed 3 descent\binaries\alienbreed3descent.exe |

"{159417D5-EB77-4DB1-A7CF-10050665CDB7}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\empire total war\empire.exe |

"{15A45BDE-93F4-4AD8-B694-1750023ADBDE}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\birth of america\docs\birth of america manual.pdf |

"{15A75DB4-0CC2-4B1F-9977-B9511DE0BB48}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe |

"{15B01346-97ED-4C7C-93D2-47F07D62CDA9}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\imperium romanum\imperium romanum.exe |

"{15CE928F-6064-4939-8C89-3C12B4F20FD4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\delve deeper\delvedeeper.exe |

"{15D72B3E-659D-4473-A6F1-D9B27C068454}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quantum of solace\testapp.exe |

"{15EB44E6-5C62-4B37-A33A-976040D0D565}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\medal of honor airborne\unrealengine3\binaries\moha.exe |

"{15EF15CB-642B-4CCF-9E01-707CA13A0471}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\unstoppable gorg\unstoppable_gorg.exe |

"{15FE52F3-072B-40EC-B27C-C15F058820FF}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe |

"{16010859-164A-44A3-AF8F-B26CB654BFA0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\world of goo\worldofgoo.exe |

"{160A2C9A-16BE-48D7-99F1-3F1A9425631B}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\rage\rage64.exe |

"{161CB6DE-4B89-4519-A170-33D35839A964}" = protocol=6 | dir=in | app=e:\steam2\age of empires online\aoeonline.exe |

"{1622FCA5-DBE7-443B-BF36-62344A5BAA66}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sonic generations\sonicgenerations.exe |

"{16298D65-ECC4-489E-93A3-32EB49C3BDDD}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\tobe's vertical adventure\tobe's vertical adventure.exe |

"{16368919-E75C-400A-807C-D02B0BAFABE6}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\sid meier's civilization v\launcher.exe |

"{166B3F59-4490-4DC1-B3EC-2AD0C2917484}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\jagged alliance 2 gold\ja2.exe |

"{167562EC-2D4F-411D-8D57-AE4CFDA83E20}" = protocol=17 | dir=in | app=e:\steam2\total war shogun 2\benchmarks\benchmark_specify_properties.bat |

"{16901974-B2BE-42A0-B944-A5DD7FCD0340}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\the maw\themaw.exe |

"{1693D258-2FFC-4FAA-A50C-9CDF8D4FB09A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\chrome specforce\specforce.exe |

"{169F93E5-B75A-4F4E-8B52-AA2CD07850BA}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\ben there, dan that!\btdt.exe |

"{16A98E6A-6FFB-4E30-A486-B69CA9CB5C86}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\depths of peril\depthsofperil.exe |

"{16B077AE-4F92-4681-80B5-6DB4E0998904}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tidalis\tidalis.exe |

"{16D35556-E90C-436D-BEBA-5383FA98FAA3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\eschalon book 2\book_2.exe |

"{16DC3810-2D47-44E8-BB9D-0C64DA581F24}" = protocol=6 | dir=in | app=e:\steam2\apox\gameclient\apox.exe |

"{16E527C6-353E-4D14-8979-478B5A0AEBD5}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\titan quest immortal throne\help.htm |

"{16EA2BD0-4D16-4EC6-B9DE-46D895678B7D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\x3 - reunion\x3.exe |

"{16EDC3D0-781B-4149-B1CB-BBE5804994E2}" = protocol=6 | dir=in | app=e:\steam2\blackwell unbound\unbound.exe |

"{16F2276E-2A7F-48B8-9F59-3C946AFA5029}" = protocol=6 | dir=in | app=e:\steam2\critical mass\criticalmass.exe |

"{16FA4B0F-6AF9-45EC-AF0B-5C03F654CB79}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\greed black border\options.exe |

"{17028DEF-52C0-4C91-8D43-36E9FEEDE1C4}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\team fortress 2\hl2.exe |

"{170D25BD-D960-4B62-A713-44C83DC2AAA3}" = protocol=6 | dir=in | app=e:\steam2\dungeon defenders\binaries\win32\dungeondefenders.exe |

"{171186EA-11AD-433B-B64D-EFCC17EC296C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\autonomous prototype\launcher.exe |

"{1716E677-B82D-41E7-B0A2-5C687C8840D1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\floras fruit farm\florasfruitfarm.exe |

"{1721D852-95A5-4A21-996F-2104035CABE7}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |

"{17232DB6-4076-4D08-99C4-58A9C410DFF9}" = protocol=6 | dir=in | app=e:\steam2\x3 - reunion\x3_reunion_manual_steam_english.pdf |

"{172C21F7-C86B-4DA6-96B1-3B9606021313}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\theatre of war\missioneditor\missiongen.exe |

"{1735BA85-BAB9-465F-9C07-A7B8C0DAC308}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dawn of war soulstorm\soulstorm.exe |

"{17473B42-B144-4AE4-AFAF-918A896F7316}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\oil rush\bin\oilrush.exe |

"{175AF3FB-BA2D-463E-A352-81EF86EEB69F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\supreme commander 2\bin\supremecommander2.exe |

"{175BD12C-0459-4F88-B716-C86BAFA0DC93}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\launcheflc.exe |

"{177E6854-4DF0-41D3-9E8A-9084D072FCFE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\dead rising 2\deadrising2.exe |

"{1786A976-BF6F-4AAB-9095-845BE52443EC}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\lumines\lumines.exe |

"{17938004-C5A7-4DC4-967C-A4F9607B65BA}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\left 4 dead\left4dead.exe |

"{1796D8C9-27EC-468B-987E-84C6D12E1E0B}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\analogue a hate story\analogue.exe |

"{17BE67FC-64EE-4DAA-8253-A1BB5165C9BE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\ion assault\ionassault.exe |

"{17C218C4-9C2F-4AF7-88A3-1BB293615B60}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\a farewell to dragons\thegame.exe |

"{17C641AB-D9BD-4A6B-B437-D7D7C5BE0CDA}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\mrrobot\mrrobot.exe |

"{17CD7176-905A-4404-A345-48D712C06ED2}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\thief_2\thief2.exe |

"{17DA45A1-2E60-43DD-BC8F-A39207C223E9}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\ben there, dan that!\btdt.exe |

"{17DAFE7B-8FD4-4A38-A9C6-B4D4E42F77A2}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\gundeadligne\gundeadligne.exe |

"{17FCE42C-77B3-4A7F-A544-2F23BB670FDE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hinterland\hinterland.exe |

"{18033BE4-5F4B-4B41-ACC3-7D1968110EF4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\rainbow six vegas\binaries\runme.exe |

"{1803E88E-3832-494E-98ED-2F26EA4FFA37}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tom clancys endwar\binaries\endwar.exe |

"{181D2912-2466-41C3-96D5-29640FA0EC22}" = protocol=17 | dir=in | app=e:\steam2\aliens vs predator\avp_launcher.exe |

"{18244A9C-85A2-4F75-9D36-0113518F3998}" = protocol=6 | dir=in | app=e:\steam2\ai war fleet command\aiwar.exe |

"{18246D70-9E93-4287-A896-BE862A939C43}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe |

"{18252E45-79DC-4521-8CDC-B227D8037B7F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\real myst\realmyst.exe |

"{18394652-97F5-4AAE-9D50-7A44AB1D9A37}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\battlefield bad company 2\support\ea help\electronic_arts_technical_support.htm |

"{1844917B-BA4B-4E8D-BEAE-5F9753E1F9C3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\alien swarm\srcds.exe |

"{184AB353-5FAA-45F5-81BE-A88A98C1EE13}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |

"{184AE219-A4E9-40F3-BF36-766F1BD8538A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\hitman 2 silent assassin\hitman2.exe |

"{18547AB6-6364-4BF7-8B5D-5B67A640BF29}" = protocol=6 | dir=in | app=e:\steam2\swords and soldiers\swords and soldiers launcher.exe |

"{1859B34F-EDB6-4897-A301-8F7BE448A305}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\grand theft auto 2\gta2.exe |

"{1860A27D-685B-440F-B48F-CDD513096644}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quake 3 arena\quake3.exe |

"{188C522B-47DB-45F5-81F8-2232596122B3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\age of empires online\aoeonline.exe |

"{1892ECD3-C77A-4E90-8B91-AEDF8C847519}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\saira\settings.exe |

"{18978185-34BD-4687-A754-B745279ECD76}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |

"{189B4EF9-7257-45CD-9C2F-F583504B924F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\transformers war for cybertron\binaries\twfc.exe |

"{18AE0555-F50E-4623-94BA-AFEB4BE4C9C4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\nikopol\nikopol.exe |

"{18C524E5-76FE-4467-9995-50EC630C8A19}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\the witcher enhanced edition\system\witcher.exe |

"{18D08943-D94D-478B-A5E5-C325F1DFA55E}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |

"{190DE96B-DAE1-410C-8F32-E29859B9146F}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\peggle extreme\peggleextreme.exe |

"{190E5D40-56CC-42D5-9E84-5089B0AE1AC1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\aquanox\aqua.exe |

"{191FA8DC-29B3-4464-92B6-9E6F18F300F0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\alien breed impact\binaries\alienbreed-impact.exe |

"{191FDF3C-6EDF-42C7-B388-B20B9B7B2F34}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\happy song prototype\afmana.exe |

"{192095EC-77B2-48E0-B585-D21D18D9106B}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\scoregasm\scoregasm.exe |

"{1926AC35-A4CA-4AC8-B939-B915F8CBD530}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\comanche 4\c4.exe |

"{1936909B-A39F-4AF2-8A30-0FFEE74A768A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\brainpipe\brainpipe.exe |

"{19393F9D-698C-4A67-A2BD-F3F5C157FE42}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\dead rising 2\deadrising2.exe |

"{193B6D81-5F59-4CAF-AF83-FB962FC9BB75}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\the white birch prototype\birch.exe |

"{194D9A83-C0D8-4F4D-8430-7729CD24AC3B}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hitman 2 silent assassin\hitman2.exe |

"{196D9745-9A12-47F8-9427-5C05007CD275}" = protocol=6 | dir=in | app=e:\steam2\killingfloor\system\kfed.exe |

"{197619BF-8A02-4C70-8818-BDFFB4834BE1}" = protocol=6 | dir=in | app=e:\steam2\costume quest\cq.exe |

"{19768F63-0A91-4FAD-A51F-839C05BF3BAE}" = protocol=17 | dir=in | app=d:\program files (x86)\electronic arts\crytek\crysis 2\bin32\crysis2.exe |

"{1978C6F4-AF2A-4130-AB3A-63A258C98A2A}" = protocol=17 | dir=in | app=e:\steam2\star wars the force unleashed\swtfu launcher.exe |

"{1995EE78-568B-47D6-914B-010EC7776701}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\bejeweled 3\bejeweled3.exe |

"{19991134-14D5-431A-A8BE-C94A9C0F43BD}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\big money deluxe\winbm.exe |

"{199C09D2-D4DF-4FCE-8899-BCB6F2996D40}" = protocol=6 | dir=in | app=e:\steam2\call of duty black ops\blackopsmp.exe |

"{19AF733A-BD4B-495F-A582-4EA956C4205B}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\devil may cry 4\devilmaycry4_dx10.exe |

"{19CD634F-C325-48B6-96AB-289F48DA74D7}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\test drive unlimited 2\uplauncher.exe |

"{19D67B39-9EF3-4865-A051-2F7F2B79FA1D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\machinarium\machinarium.exe |

"{19D8AC67-8E61-4F3E-92DD-42243BC6FE56}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\roogoo\roogoo.exe |

"{19F0434D-F367-4F1F-B7C8-6CD8DFA1AFD0}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\spacebase df-9 prototype\win\bin\moai-fmod-designer.exe |

"{19F2A275-D619-4F9B-ABEF-FF4A0F8233F3}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\armored fist 3\af3.exe |

"{19F9301E-6A0A-4342-B35B-87EA2BF62531}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe |

"{19FA1DF0-50F1-4551-A80B-A6E6BD64181A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\theatre of war ii kursk 1943\missioneditor\simpleeditor.exe |

"{19FFBF29-881B-41EA-9FCC-E3DF54310679}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\america's army 3\binaries\aa3game.exe |

"{1A15919F-619A-4582-A716-32C9AE44BFCF}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\postal2complete\sharethepain\system\postal2mp.exe |

"{1A26D94A-3666-4E55-9450-F99E3CAEEAF3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sega classics\segagenesisclassics.exe |

"{1A273453-E003-41CD-B8DC-7267B66B77D1}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quake\glquake.exe |

"{1A2ADD60-C7C0-4299-B6F4-0C26A963C89D}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\aliens vs predator\avp.exe |

"{1A39458F-B4A2-4998-9002-E966D4377B87}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\shellshock 2\shellshock 2.exe |

"{1A4E0FAB-B456-42F7-81DF-097E3E76D113}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\doom 2\doom2 + mouse.bat |

"{1A524C26-BEDE-4B16-8A3B-4D8BABB5B242}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\titan quest\help.htm |

"{1A5E828C-1ADF-4F70-90EA-11037A0C1181}" = protocol=17 | dir=in | app=e:\steam2\dawn of war gold\w40k.exe |

"{1A6A00F5-0DCC-411F-A762-6C329EE88A9E}" = protocol=17 | dir=in | app=e:\steam2\dragon age ultimate edition\daoriginslauncher.exe |

"{1A6D86AA-A86E-4223-AE24-CE41C0A6DA2E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\renegade ops\renegadeops.exe |

"{1A74D1E4-5651-43A7-B7D4-6CDF72B51850}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tales of monkey island - chapter 5\monkeyisland105.exe |

"{1A788620-9207-4A17-99D5-922967FA6FEB}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\soldiers heroes of world war 2\soldiers.exe |

"{1A7DCD3E-5789-443D-A767-A68D0B45BCAF}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\lugaru hd\lugaru.exe |

"{1A7EE1F8-4E17-4A20-A38E-DB252D80AB3F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\fallout 3 goty\falloutlauncher.exe |

"{1A88D61E-7F7D-45AE-9E44-9A56A2104D4D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\rainbow six vegas 2\binaries\r6vegas2_game.exe |

"{1AA6E47D-2B93-4099-8C5F-EA7D2A1A98E1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\painkiller redemption\bin\redemptioneditor.exe |

"{1AAE7B82-EC50-4C93-9701-810B07FD60CF}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\brothers in arms earned in blood\system\eib.exe |

"{1ABEDFDC-D092-4210-88BD-195FB31D0DB8}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\waking mars\mars-pc.exe |

"{1ABFE2DA-CD37-4B51-B946-365343854499}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\tachyon the fringe\tachyon.exe |

"{1AE3229D-63EB-41C3-9E2F-41263E4FC2F1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\a virus named tom\avnt.exe |

"{1AE5A004-7193-4B6E-B7C0-2994E08DCDF5}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hack n slash prototype\run.bat |

"{1AF5A6FC-DA08-4441-83A6-5923BA18D527}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\akfalcon\dark messiah might and magic multi-player\runme.exe |

"{1AFA9E9B-89AB-4BD5-82CD-E4E343B816F2}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\pacific storm\pacificstorm.bat |

"{1B1B0544-B537-49DB-B8F8-9CA9A3330140}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\eschalon book 2\book_2.exe |

"{1B1C28ED-1AF1-4EE7-869B-C4F0DBBD8803}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\trackmania united\tmforever.exe |

"{1B1EFD01-0F14-46DC-8A17-794662436EAA}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\iron warriors\docs\iw manual.pdf |

"{1B312863-9F86-4CE2-BDB6-4606A9FC8078}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dogfighter\bin\x86_vc8\dogfightersteam.exe |

"{1B3E8C60-03B5-49E2-B527-8A6C08EFA90A}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dungeon siege iii\dungeon siege iii.exe |

"{1B53489E-43EC-4861-9EE7-D5DA8BE82A70}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\bookworm deluxe\bookworm.exe |

"{1B562B27-1D5C-46CE-ABC7-B4E173D72F92}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\borderlands\binaries\borderlands.exe |

"{1B56FA6D-BFD8-430A-B9F0-0BD29970B531}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\fear ultimate shooter edition\fear.exe |

"{1B58D4F1-0EE7-45BC-9729-B8385F5BC9F0}" = protocol=6 | dir=in | app=e:\steam2\call of duty modern warfare 2\iw4sp.exe |

"{1B633842-C1A0-4ACA-9C0D-3A1EE7C43D9B}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tropico 4\tropico4.exe |

"{1B705FA4-1B53-4BA4-AD56-AA04428CC5DB}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\mount and blade\runme.exe |

"{1B8440FB-9B08-4C56-89FD-E5952061F452}" = protocol=17 | dir=in | app=e:\steam2\aliens vs predator\avp_dx11.exe |

"{1B85C2FF-41A8-45FE-8D5C-6652B34C6FDE}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\mafia\setup.exe |

"{1B9370A7-69A8-4CC8-95E7-EBC846968F2E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\grand theft auto vice city\gta-vc.exe |

"{1BA8D344-1005-486E-B09A-367958DE5A7E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\cities xl 2011\citiesxl_2011.exe |

"{1BAFD32B-F9D6-4E60-9B15-D6DABBA9460F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\crazy machines\crazymachines.exe |

"{1BB6A46A-2A41-4C69-8602-4A8A889C83CE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\darksiders 2\darksiders2.exe |

"{1BB71264-26D3-41F4-BFA2-48485B9468FC}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\broken sword 2\brokensword2.exe |

"{1BB828B8-3A94-4BA7-A4E5-D7059921FDCF}" = protocol=17 | dir=in | app=e:\steam2\armored fist 3\af3.exe |

"{1BBCDC18-4F48-4851-8292-8D9286D29327}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\stronghold 2\stronghold2.exe |

"{1BDD72B1-6B83-4695-9F47-8FA28C2A44F2}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\men of war\mow_editor.exe |

"{1BE1D966-C628-47A0-B6EA-E9E3FA9A6EA8}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\burnout paradise the ultimate box\support\ea help\electronic_arts_technical_support.htm |

"{1BE21689-9805-4526-B644-81723F8A37E6}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\delta force xtreme\dfx.exe |

"{1BE930F7-A651-4DD3-A382-1488B8A5A32A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\alien breed 3 descent\binaries\alienbreed3descent.exe |

"{1BEFB0CC-0B22-4E94-A1D8-C652ED032117}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\oblivion\oblivionlauncher.exe |

"{1BF15800-967D-4750-A06C-9B11EBA40EA9}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\torchlight ii\modlauncher.exe |

"{1C1D704F-A876-472C-8952-6BFA6CE99F43}" = protocol=6 | dir=in | app=e:\steam2\killingfloor\system\killingfloor.exe |

"{1C23FB9B-F99D-42A1-940B-DAD62DE5280F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\bejeweled 3\bejeweled3.exe |

"{1C2A3315-CA6F-4AE0-8179-EF47B5D55E82}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\launchgtaiv.exe |

"{1C36C7DD-EB8C-4115-8F9B-1F651CFFF34D}" = protocol=17 | dir=in | app=e:\steam2\cubemen\cubemen.exe |

"{1C41D254-F736-4B09-A93D-C62970DA43F3}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\need for speed hot pursuit\support\ea help\electronic_arts_technical_support.htm |

"{1C44BF56-7E80-4DE8-ABC6-93F136845737}" = protocol=17 | dir=in | app=e:\steam2\dragon age ultimate edition\docs\ea help\electronic_arts_technical_support.htm |

"{1C44EBB6-403F-40A9-8BFB-0889048B4D9D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\grand theft auto vice city\gta-vc.exe |

"{1C463807-D91A-437B-82E7-287155ACB761}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tropico 2\tropico2.exe |

"{1C470000-8215-4454-A97A-4C480AA758B2}" = protocol=6 | dir=in | app=e:\steam2\dawn of discovery\anno4.exe |

"{1C4B70CA-385E-431E-89A2-39A80C220974}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\company of heroes\reliccoh.exe |

"{1C5370E8-7820-4B5F-8EDC-302B64304D46}" = protocol=17 | dir=in | app=e:\steam2\total war shogun 2\data\encyclopedia\how_to_play.html |

"{1C5D05F7-6452-4365-ACDE-EA5AA5B5FF72}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\waves\binaries\win32\waves.exe |

"{1C67A718-A99A-48B9-B675-5655EAFB83F2}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\geneforge 2\geneforge 2.exe |

"{1C7B598B-48B0-48F6-8C53-C746689E49A2}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\command and conquer 4 tiberian twilight\support\ea help\electronic_arts_technical_support.htm |

"{1C817470-629B-46B1-AC8E-53A6AAD27A8F}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\launcheflc.exe |

"{1C88AA00-BBEB-490D-95FC-8BE18135C8D5}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\patrician iii\patrician3.exe |

"{1C89885B-67D8-4978-989D-554DE124710E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\rig n roll\rungame.exe |

"{1C927A8B-6DD5-4D7A-B84E-F1DA7E432575}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\shank\bin\shank.exe |

"{1CA25E3E-DF2F-4CFA-A5B9-7969A8E0EFB0}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\chime\chime.exe |

"{1CB4E580-DB5C-4122-A71A-A7AAEE6D0E71}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sam and max episode 3\sammax103.exe |

"{1CB6FDBC-3A5E-4C39-9582-840031B2EBB8}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\rocketbirds_hardboiled\game.exe |

"{1CCD7F62-9446-4FBF-94AE-7D1C0B1F3D0E}" = protocol=17 | dir=in | app=e:\steam2\global agenda live\binaries\launcherbin\hirezlauncherui.exe |

"{1CD30140-3E44-4751-9626-1EE97CCB0AEE}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hector ep 3\hector103.exe |

"{1CD3D89D-D64F-4875-A58A-A8C9646A7457}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\mig-29 fulcrum\fwe.exe |

"{1CD44221-7174-4AD9-B04B-C22AC6F48E2A}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\geneforge 3\geneforge 3.exe |

"{1CD697CE-7D08-481A-8C58-5E3332692509}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ancients of ooga\ooga.exe |

"{1CE39840-3A07-4A0B-B6E7-0319F3AD72E1}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\edna and harvey harvey's new eyes\harvey.exe |

"{1CE43281-2992-43CF-9437-06C5E588F3C2}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\beyond good and evil\checkapplication.exe |

"{1CFB2FDF-CCAC-48FB-8422-A42276DB0FC3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\trauma\trauma.exe |

"{1D04611C-9EF1-408F-9C3A-6E1D7DEA1C70}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\cthulhu saves the world\cstw.exe |

"{1D089004-5435-4BB4-8E40-C58F405DFFD4}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\xotic\xotic.exe |

"{1D0BBCE3-C121-4674-83D8-6DA2BA869872}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\pineapple smash crew\pineapplesmashcrew.exe |

"{1D1895F1-CC80-4249-B3E0-14B0276B1D5E}" = protocol=17 | dir=in | app=e:\steam2\transformers war for cybertron\binaries\twfc.exe |

"{1D1E37D9-EB2B-4EC6-B34C-4A0A3BE83944}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\unreal tournament\system\unrealtournament.exe |

"{1D270525-4F1B-46F3-9A4D-41B352FBECDF}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sleepingdogs\hkship.exe |

"{1D29B209-5A80-492B-BB9D-3487E0C35FF5}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\home\home-win-eng.exe |

"{1D2A1CB9-BA90-40CA-B7B7-A039D2BB8B8E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe |

"{1D2D24AE-AA1E-4372-9463-927AD387C348}" = protocol=17 | dir=in | app=e:\steam2\dirt 2\dirt2.exe |

"{1D3351B8-932F-44FE-AB61-3C0CD0B53197}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dawn of discovery\addon.exe |

"{1D4C13BC-9EAB-47FE-884E-449F87C25F09}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords.exe |

"{1D4FEC35-5237-4C0E-A033-77A3CF5B49E1}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ducati world championship\ducati.exe |

"{1D65A81C-3CE6-4E1D-B016-9CF52D81027F}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\droplitz\cascade.exe |

"{1D6A9010-1CB1-4ADD-9274-722314F2CF7E}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\spellforce platinum edition\spellforce.exe |

"{1D720EA1-D10D-497A-A32F-92F2FC6C0E67}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\serious sam hd the first encounter\bin\samhd_demo.exe |

"{1D735400-887A-4FBA-B0AE-7C389D868A0C}" = protocol=6 | dir=in | app=e:\steam2\dirt\dirt.exe |

"{1D78698E-4A95-4619-93AC-6CF41FAB689A}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hamlet\hamlet.exe |

"{1D9B7309-AD6D-4F59-B086-18651D02F215}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\resonance\resonance.exe |

"{1DA5087C-8A09-4F15-AB32-1645E61C0088}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\xotic\xotic.exe |

"{1DB005C2-8CD0-49CE-9B84-0EDF9C3117EB}" = protocol=17 | dir=in | app=e:\steam2\and yet it moves\and yet it moves.exe |

"{1DBB3837-6475-4C13-939D-F477236DC99D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dangerous waters\steamrun.exe |

"{1DDE1DE0-9A04-4395-9D3D-3122BBE69984}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\orcs must die!\build\release\orcsmustdie.exe |

"{1DE422B2-E391-4A29-A120-4D6D7D5A23E0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\painkiller resurrection\bin\resurrectionquickdedicated.exe |

"{1DE9159A-2A5A-47DB-89CC-5545D992809E}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\damnation\binaries\damngame.exe |

"{1E01E874-63F0-4106-8EDA-227F182AC576}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\mafia\setup.exe |

"{1E093D73-E1D0-4F90-9B0F-A30403C38B73}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\riven\riven.exe |

"{1E188972-1A59-4F9A-A405-4221EC7C6D38}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\two worlds - epic edition\twoworlds_radeon.exe |

"{1E287D28-D2E9-4F9B-9D6A-29DEDF9B9B29}" = protocol=6 | dir=in | app=e:\steam2\armored fist 3\af3med.exe |

"{1E3F45D5-DD74-4659-8630-3D888714BFEF}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\serious sam 3\bin\sam3.exe |

"{1E51309D-278E-4FD7-B786-8B8B7384411D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\indigo prophecy\indigo prophecy.exe |

"{1E6FBA22-5D7A-4218-AB93-119E63AFD835}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\prince of persia the sands of time\princeofpersia.exe |

"{1E88FE8B-B37B-4C49-8128-DD15AFC113F7}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |

"{1E8E4199-CCC9-4DC0-8D96-9226BD941EE2}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\farcry\bin32\farcryconfigurator.exe |

"{1ED684EA-DF74-42DF-8981-9B92D78D32DB}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe |

"{1EEBD47E-9945-4F37-B6A0-F140FC31C29E}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\aliens vs predator\avp_dx11.exe |

"{1F065CB2-04FA-4B08-B399-6441ECEC8354}" = protocol=6 | dir=in | app=e:\steam2\mlb 2k10\mlb2k10.exe |

"{1F0931D6-DCD2-4C14-AF89-9B7F3FA5FF83}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\hexen 2\glh2.exe |

"{1F475A7C-C19A-433C-821B-50B50625D8F4}" = protocol=6 | dir=in | app=e:\steam2\mirrors edge\support\ea help\electronic_arts_technical_support.htm |

"{1F53E068-5217-446E-A050-C6092E207E26}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

"{1F5ABB9B-1AFA-44BA-BEE9-4D42605D5275}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\zombie shooter\zombieshooter.exe |

"{1F5CA57E-7780-4CA8-83D0-BADE8DA87992}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\a virus named tom\avnt.exe |

"{1F68522E-28B1-4D94-8908-F14EFA6C0953}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\aquanox 2 revelation\aquanox 2 revelation.exe |

"{1F6902AA-0E79-4CEC-ABCE-D241FCC534C3}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\gumboy tournament\gumboytournament.exe |

"{1F7E7091-D03F-478A-B6D8-92304BEC501D}" = protocol=6 | dir=in | app=e:\steam2\transformers war for cybertron\binaries\twfc.exe |

"{1F91F14C-5C87-42E7-9FAB-08093105B5D3}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\cities xl 2011\citiesxl_2011.exe |

"{1F95F340-B16E-4F25-B108-E8E8862EED89}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\mount & blade with fire and sword\mb_wfas.exe |

"{1F9E855A-7791-47E9-896C-3D6C87D0A0EF}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |

"{1FA6C3C2-6780-49AB-A438-E8F75390FA6C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\aliens versus predator classic\avp_classic.exe |

"{1FA9A000-AE00-4935-BA96-70AC99B43B7F}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sonic adventure dx\config.exe |

"{1FD77B65-917B-42F8-AB2C-D87469C9D1EF}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\elven legacy\siege.exe |

"{1FE2747E-9214-41D2-BA81-80E25E61882D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\rogue trooper\roguetrooper.exe |

"{1FE82A09-8005-4C62-8FD7-841400320DDD}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\tom clancy's hawx 2 - ncsa\hawx2.exe |

"{1FEA0F10-DA1F-48DD-9742-B5870F3FFC89}" = protocol=6 | dir=in | app=e:\steam2\devil may cry 4\devilmaycry4_dx10.exe |

"{1FF0647A-3F81-4ADB-8C71-B938CEB46313}" = protocol=6 | dir=in | app=c:\steamgames\hardreset\hardreset.exe |

"{1FFA6051-ACD6-4721-8CA9-6E77281924D0}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\max payne 2 the fall of max payne\maxpayne2.exe |

"{2000C6B3-4847-4215-8CB2-91C1C462538D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\burnout paradise the ultimate box\burnoutconfigtool.exe |

"{20057BD4-49A5-470F-B101-C16D4CA3726D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\zero gear\zerogear.bat |

"{200B3DC1-4479-4D42-89CA-88483D4D8D1C}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\oddworld munchs oddysee\bin\munch.exe |

"{200BF349-E0FC-4660-91DF-4A23170DD1EC}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\fallout\falloutw.exe |

"{20163FCC-D5AA-457D-A33A-85A23DAB5493}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\grand theft auto san andreas\gta-sa.exe |

"{2019C16C-2CB9-483C-AC67-805AA734641F}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hexen 2\glh2.exe |

"{201A1B2B-844B-48E9-8BDB-F21ABC884E10}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\ai war fleet command\aiwar.exe |

"{2030DDBF-1F75-4310-9F0F-85C0F8E67E77}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\akfalcon\garrysmod\hl2.exe |

"{204555EE-D19A-4777-ADFE-77957A9ABCEC}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\xcom enforcer\system\xcom.exe |

"{20578852-4869-4D80-8FA2-86DD7793083C}" = protocol=6 | dir=in | app=e:\steam2\aliens vs predator\avp_dx11.exe |

"{205D2499-B516-4FAC-885C-89EEEF1C0E20}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\big money deluxe\winbm.exe |

"{206377DE-CC20-4C1C-844E-C34E59D3B275}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\gumboy crazy features\gumboycrazyfeatures.exe |

"{206AD087-2BFD-4F97-99B9-9EA8CB35E749}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quantum conundrum\binaries\win32\trygame-win32-shipping.exe |

"{2077201B-2700-49D3-A416-3C7E63EA79AC}" = protocol=6 | dir=in | app=e:\steam2\total war shogun 2\benchmarks\benchmark_specify_properties.bat |

"{20877476-312C-4143-8DDC-AE1FDC5F1095}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\floras fruit farm\florasfruitfarm.exe |

"{2089D6AF-84AB-4BC9-ADD1-5D426D23D6FE}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\adam's venture 1\binaries\win32\venturegame.exe |

"{208A510E-159E-4053-8E7A-0849010B9994}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\delta force 2\df2med.exe |

"{208C9457-E068-4DE0-B98D-67A52BA7B3B1}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\rome total war gold\rometw-bi.exe |

"{208EC9AE-D281-4010-82BE-6793BAC7571D}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\spaceempiresv\se5\se5.exe |

"{208FC852-8DF8-443C-A4C7-3ECA1A06729D}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\daggerdale\binaries\win32\dndgame.exe |

"{20A33B65-622C-41A8-9898-6026FBFF6A0E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\xpand rally xtreme\readme.txt |

"{20BAD3D4-5D34-464E-8656-A79283948F61}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\rainbow six vegas 2\binaries\r6vegas2_game.exe |

"{20C77F09-3D97-4175-BE0C-5FF4ABAF9FBD}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\delta force xtreme\dfxmed.exe |

"{20CDD72C-6653-4AA2-ABE3-9F8E7DFFA562}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quake\glqwcl.exe |

"{20D0F335-D273-4D37-B3AF-9AF734994A16}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |

"{20D441C0-117E-48A8-869C-36EB64BE9523}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\call of duty\codsp.exe |

"{20E5F67D-3AD7-4013-9BF0-8968AAB45457}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\project snowblind\snowblind.exe |

"{20EFB1C2-184D-4F55-A7A9-04ED1F805EA8}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\the witcher enhanced edition\system\witcher.exe |

"{20F200DA-C644-4635-839A-0298A5617D99}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\auditorium\auditorium.exe |

"{2115E9DF-8457-43FC-9942-CA551534E650}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\imperium romanum\imperium romanum.exe |

"{2130BD37-83E7-43BA-A7BC-CA8D0E25F301}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\on the rain-slick precipice of darkness - episode one\rainslickep1.exe |

"{21376F14-1C85-4B7A-8B90-62B9EA3222A0}" = protocol=6 | dir=in | app=e:\steam2\blackwell convergence\convergence.exe |

"{213EE253-B922-489B-912F-833B26A2CADB}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\costume quest\cq.exe |

"{21496F98-1379-464A-B6C4-4F9685B9B086}" = protocol=6 | dir=in | app=e:\steam2\juiced 2 hot import nights\j2launcher.exe |

"{2151AA3C-D9A7-42EB-87E0-472F10FB61D3}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\flatout ultimate carnage\launcher.exe |

"{2152513B-AB75-4A9A-94A3-B335619FDDDD}" = protocol=6 | dir=in | app=c:\steamgames\crysis\bin32\crysis.exe |

"{216B7884-0AD0-4C58-A236-F9A10AB37019}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\aliens vs predator\avp_dx11.exe |

"{2182DC90-2093-4C4B-9A0A-3945994CB459}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\codename gordon\cg.exe |

"{2186AAF5-D4B5-4C87-854A-C541A7933D65}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\lego lord of the rings\legolotr.exe |

"{21905084-2C83-473A-805F-01F64BA33C41}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\command and conquer 3 - kane's wrath\cnc3ep1.exe |

"{21929F6C-398B-4A1F-9815-3B06136AB3A7}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\sword of the stars complete collection\sword of the stars.exe |

"{21AECF06-5452-4FE0-AECC-0EB4C8665953}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\rock of ages\binaries\win32\roa.exe |

"{21CD141D-4F97-4DB0-969A-534D7CDDB56B}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hospital tycoon\hospitaltycoon.exe |

"{21DB4440-BC5C-4DEE-93C8-0079CE8FECE4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\xcom apocalypse\dosbox.exe |

"{21ED2824-AC85-4D6D-9C73-51ED0CEB86EE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\star wars republic commando\gamedata\system\swrepubliccommando.exe |

"{21F57405-8A66-4C33-846F-C9EA4F724305}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\greed black border\greed.exe |

"{22062122-AC50-4D85-B532-248BF1C8DA85}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\call of duty world at war\codwaw.exe |

"{22294258-6A28-4E25-9D55-169088CB265D}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\dino d-day\srcds.exe |

"{223EAAD2-E5D4-4431-A089-D545B635A600}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\crysis\bin32\crysis.exe |

"{224FEDF0-A54F-4169-AFFD-7FCE999D73CE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\cargo commander\cargocommander.exe |

"{22555B03-0E6B-4AE4-9493-AF4585F9F4A4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\full spectrum warrior\launcher.exe |

"{226773E0-7BC5-47CD-903A-BE671E8FBB69}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\bit.trip beat\beat.exe |

"{226FD1D5-8F92-4182-AF06-54F575EB124C}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\valvetestapp206500\airmech.exe |

"{2271B914-69A9-4C3D-B1DD-AD8D0CCFAA60}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\1000 amps\1000ampsrewin.exe |

"{2297B1F1-7C1B-4E3A-AB2D-9EA24918D337}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\titan attacks\titanattacks.exe |

"{22988039-C3CD-406E-B3DD-FFAA18E6BD11}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\clive barker's jericho\bin\jericho.exe |

"{229AB2FE-C8E5-45ED-9CCF-7F159F04D7FC}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\gish\gish.exe |

"{229B491A-35DD-490C-9205-D7D709FD85D1}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\the witcher enhanced edition\system\djinni!.exe |

"{22A38A06-1FCC-4888-82A8-7DB5293D8D03}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\test drive unlimited 2\uplauncher.exe |

"{22A7BB49-0CB5-492E-BBEF-140D3B7938B3}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\iron warriors\builded.bat |

"{22B15CDA-3C9C-42FC-AB92-53A81469CEE2}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\tales of monkey island - chapter 2\monkeyisland102.exe |

"{22B25794-01A4-46F6-8F2B-9D0FCD4A2825}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\crazy taxi\crazy taxi.exe |

"{22B5EE13-40F3-40F9-9801-C32A49F9E06C}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\toy soldiers\gamesw.exe |

"{22BA363E-3FD4-455E-8FFD-2313F8E37C73}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\the maw\themaw.exe |

"{22C3F00C-6967-45DC-ACD9-1E97188EDB16}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\blackwell deception\deception.exe |

"{22C5D112-7126-46E1-A2D5-9F9FD86FE2F9}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\sonic and sega all stars racing\config.exe |

"{22DA2B9F-36C0-46AC-AD50-3C439A2DBE82}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\universe at war earth assault\launchuaw.exe |

"{22E3C612-AE4E-4F36-940C-295788B1B564}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\aliens vs predator\avp_launcher.exe |

"{22EB70D9-A045-4473-8E43-EA48E0823456}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |

"{22EC61FC-C1C9-4FA3-B37F-889349A7A953}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\splinter cell\system\splintercell.exe |

"{22F498CB-3EC4-4C01-A400-2F48DD15FFB8}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\magic the gathering dotp 2012\magic_2012.exe |

"{22F9BFEE-4167-40ED-A578-F8CA16A620A0}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\america's army 3\binaries\aa3loader.exe |

"{23002FF0-D90D-4A75-8F0F-2E6D7A7545C2}" = protocol=17 | dir=in | app=e:\steam2\mass effect\docs\ea help\electronic_arts_technical_support.htm |

"{231E7161-EB3F-4257-9F08-8421C45CA1F4}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\x3 - reunion\x3.exe |

"{23247BE0-EEEE-4DA3-ACAA-0FCC67DE1783}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\bad rats\rats.exe |

"{23293620-0D73-433C-8FA5-97C840A257F2}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\system protocol one\sp1.exe |

"{232C08D6-8230-4197-BF0D-F2AF036E3570}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\crash time ii\burningwheels.exe |

"{2340D6A1-CC32-4201-A78E-7FFF3E7DD7BA}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dark fall lost souls\darkfalllostsouls.exe |

"{2346360A-E637-44BA-826F-C211D9F8A54C}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\amazing adventures the lost tomb\amazingadventures.exe |

"{234C187B-04ED-4E6C-94EC-34548240E6A1}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\qube\binaries\win32\qube.exe |

"{235B5C33-0B0E-417A-9B0A-1D220CE793FE}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\rush\rush.exe |

"{235BB3FC-9013-44E7-9DEA-9C1EEAC1FF21}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\driver san francisco\driver.exe |

"{23637F15-0C4A-4E41-B840-E4125F764FD3}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\quake 2\quake2.exe |

"{236E66FA-1BA6-4396-8346-2A435C7AEFEF}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\beat hazard\runme.exe |

"{237284B4-0F77-4642-B6CC-21804CAC713B}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\plants vs zombies\plantsvszombies.exe |

"{23833E95-E83E-4547-B8E7-237CE48DBBBC}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\call of duty\codmp.exe |

"{239C6230-C1B3-4AAF-AE15-6EB4EE7EA110}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\hazen the dark whispers\bin\hazen.exe |

"{239E8221-92EB-4857-A0A8-4164A33986F1}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\rochard\rochard.exe |

"{23A58FCB-50A3-4A7F-93A3-AA3CAA8E939E}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\trackmania united\tmforever.exe |

"{23BDEEB2-635C-47E6-9922-EF82BC057C3D}" = protocol=17 | dir=in | app=e:\steam2\achtung panzer - kharkov 1943\starter.exe |

"{23C1285B-69A4-4AE9-8092-FEA2C12ADD00}" = protocol=6 | dir=in | app=i:\steam\steamapps\common\silverfall\mc_game_link.htm |

"{23D1684A-F7D7-4FCA-A4E0-573D65CFAAD8}" = protocol=17 | dir=in | app=e:\steam2\grand theft auto\wino\grand theft auto.exe |

"{23D4ECC3-1125-451C-ABDE-6CE0311D29F0}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steamapps\common\grand theft auto vice city\gta-vc.exe |

"{23D986F3-A31C-4B87-B9C9-21C094B74218}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\machinarium\machinarium.exe |

"{23E552C3-CBE3-4E69-905B-08F71D6A6027}" = protocol=6 | dir=in | app=e:\steam2\amazing adventures around the world\amazingadventures2.exe |

"{23F1D1EB-7617-4B50-81EA-15C840E6DFD5}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |

"{240894A4-87A5-4F48-863F-3D3028B09B81}" = protocol=17 | dir=in | app=i:\steam\steamapps\common\overlord ii\config.exe |

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.