skookum Posted November 27, 2010 ID:351907 Share Posted November 27, 2010 I get random site redirects to ads when clicking on links using the current Firefox with adblock plus. I have the latest version of NOD32 installed as my anti-vrius.. I have run Malwarebyte's Anti-Malware as well as an online virus scan and the problem continues.Here's my HiJackThis log, any help would be greatly appreciated.I get random site redirects to ads when clicking on google links using the current Firefox with adblock plus. This just started happening today and some new icons appeared on my desktop while I was browsing a website. The new icons were shortcuts to "White Smoke Translator". I have the latest version of NOD32 installed as my anti-virus.. I have run Malwarebyte's Anti-Malware as well as an online virus scan and the problem continues even after finding 15+ infected items.I have attached my current HiJackThis logWin7 x64 fully updatedESET NOD32 4.2.64.12 fully updatedMozilla Firefox 3.6.12 /w AdBlock PlusMBAM 1.46 fully updatedI just ran MBAM again, but still having the redirects.Malwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 5199Windows 6.1.7600Internet Explorer 8.0.7600.1638511/27/2010 1:34:26 PMmbam-log-2010-11-27 (13-34-26).txtScan type: Quick scanObjects scanned: 159601Time elapsed: 2 minute(s), 35 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:WindowsTemptovb.tmpsetup.exe (Trojan.Dropper) -> No action taken.Obviously I had it delete the file and I rebooted.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 12:03:37 PM, on 11/27/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16671)Boot mode: NormalRunning processes:C:\Windows\SysWOW64\rundll32.exeC:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exeC:\Users\Chris\Local Settings\Apps\F.lux\flux.exeC:\Program Files (x86)\foobar2000\foobar2000.exeC:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exeC:\Program Files (x86)\Common Files\Java\Java Update\jusched.exeC:\Users\Chris\Desktop\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form=ZGAPHPR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLLO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLLO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dllO4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /sO4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServicesO4 - HKCU\..\Run: [F.lux] "C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe" /noshowO4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRunO4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')O4 - Startup: foobar2000.exe - Shortcut.lnk = C:\Program Files (x86)\foobar2000\foobar2000.exeO6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dllO9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dllO9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dllO9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dllO16 - DPF: vzTCPConfig - http://www2.verizon.net/help/fios_settings...vzTCPConfig.CABO16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{2F3E28F2-35A9-4237-8534-BD4ABF32655C}: NameServer = 68.238.128.12,68.238.64.12O17 - HKLM\System\CS1\Services\Tcpip\..\{2F3E28F2-35A9-4237-8534-BD4ABF32655C}: NameServer = 68.238.128.12,68.238.64.12O17 - HKLM\System\CS2\Services\Tcpip\..\{2F3E28F2-35A9-4237-8534-BD4ABF32655C}: NameServer = 68.238.128.12,68.238.64.12O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLLO18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLLO23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exeO23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exeO23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exeO23 - Service: Cadence License Manager - Macrovision Corporation - C:\Cadence\LicenseManager\lmgrd.exeO23 - Service: Crypkey License - Unknown owner - crypserv.exe (file missing)O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exeO23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exeO23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exeO23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exeO23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - C:\Windows\SysWOW64\lkcitdl.exeO23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments Corporation - C:\Windows\SysWOW64\lkads.exeO23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments Corporation - C:\Windows\SysWOW64\lktsrv.exeO23 - Service: Flexlm (lmgrd) - Unknown owner - C:\OrCAD\OrCAD_10.5\IntelliCAD 4\LicenseManager\lmgrd.exe (file missing)O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exeO23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)O23 - Service: NI Configuration Manager (mxssvr) - National Instruments Corporation - C:\Program Files (x86)\National Instruments\MAX\nimxs.exeO23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments Corporation - C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exeO23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corporation - C:\Windows\SysWOW64\nisvcloc.exeO23 - Service: National Instruments Variable Engine (NITaggerService) - National Instruments Corporation - C:\Program Files (x86)\National Instruments\Shared\Tagger\tagsrv.exeO23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)O23 - Service: OpcEnum - OPC Foundation - C:\Windows\SysWOW64\OpcEnum.exeO23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exeO23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exeO23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exeO23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exeO23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exeO23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exeO23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)--End of file - 11067 byteshijackthis.loghijackthis.log Link to post Share on other sites More sharing options...
Elise Posted November 28, 2010 ID:352275 Share Posted November 28, 2010 Hello , And My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. -----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Please download OTL from one of the following mirrors:This is THE Mirror[*]Save it to your desktop.[*]Double click on the icon on your desktop.[*]Click the "Scan All Users" checkbox.[*]Push the Quick Scan button.[*]Two reports will open, copy and paste them in a reply here:OTListIt.txt <-- Will be openedExtra.txt <-- Will be minimizedPlease Download Rootkit Unhooker Save it to your desktop.extract RKUnhooker to your desktop Note** it is zipped up in a .rar file - If you do not have a program to unzip this type of file - you can get a free one from here - http://www.7-zip.org/Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".-------------------------------------------------------------In the meantime please, do NOT install any new programs or update anything unless told to do so while we are fixing your problemIf you still need help, please include the following in your next replyA detailed description of your problemsA new OTL log (don't forget extra.txt)RKU logThanks and again sorry for the delay. Link to post Share on other sites More sharing options...
skookum Posted November 28, 2010 Author ID:352566 Share Posted November 28, 2010 Thanks for the reply.OTL.txtOTL logfile created on: 11/28/2010 2:17:46 PM - Run 1OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Chris\Desktop64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstationInternet Explorer (Version = 8.0.7600.16385)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 67.00% Memory free8.00 Gb Paging File | 7.00 Gb Available in Paging File | 82.00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data]%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)Drive C: | 596.17 Gb Total Space | 518.98 Gb Free Space | 87.05% Space Free | Partition Type: NTFSDrive X: | 931.50 Gb Total Space | 88.30 Gb Free Space | 9.48% Space Free | Partition Type: NTFSComputer Name: ROOK | User Name: Chris | Logged in as Administrator.Boot Mode: Normal | Scan Mode: All users | Include 64bit ScansCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days========== Processes (SafeList) ==========PRC - File not found -- C:\Windows\SysWow64\crypserv.exePRC - [2010/11/28 14:16:04 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exePRC - [2010/11/05 02:46:52 | 001,974,272 | ---- | M] () -- C:\Program Files (x86)\foobar2000\foobar2000.exePRC - [2010/08/12 14:16:26 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exePRC - [2009/08/28 22:00:12 | 000,966,656 | ---- | M] () -- C:\Users\Chris\Local Settings\Apps\F.lux\flux.exePRC - [2009/06/17 03:44:11 | 000,085,160 | ---- | M] (Elaborate Bytes AG) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe========== Modules (SafeList) ==========MOD - [2010/11/28 14:16:04 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exeMOD - [2010/08/20 21:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dllMOD - [2009/07/13 17:15:31 | 000,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imagehlp.dllMOD - [2009/07/13 17:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\normaliz.dll========== Win32 Services (SafeList) ==========SRV:64bit: - File not found [On_Demand | Stopped] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)SRV:64bit: - File not found [On_Demand | Stopped] -- C:\Windows\SysNative\srvany.exe -- (KMService)SRV:64bit: - [2010/08/12 14:18:40 | 000,042,360 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)SRV:64bit: - [2010/08/12 14:16:26 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe -- (ekrn)SRV:64bit: - [2010/08/10 11:27:22 | 002,610,952 | ---- | M] (Raxco Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent)SRV:64bit: - [2010/08/10 11:27:04 | 002,266,376 | ---- | M] (Raxco Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine)SRV:64bit: - [2010/05/06 01:30:22 | 000,357,456 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)SRV:64bit: - [2010/02/23 11:51:20 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)SRV:64bit: - [2009/07/13 17:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)SRV:64bit: - [2009/07/13 17:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)SRV:64bit: - [2008/05/07 15:29:38 | 000,122,880 | ---- | M] (CrypKey (Canada) Ltd.) [Auto | Running] -- C:\Windows\SysNative\Crypserv.exe -- (Crypkey License)SRV - [2010/10/08 00:03:46 | 000,369,256 | ---- | M] (NVIDIA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)SRV - [2010/09/30 00:10:08 | 000,075,064 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)SRV - [2010/08/13 11:58:56 | 000,144,672 | ---- | M] (Apple Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)SRV - [2010/05/11 18:54:00 | 002,480,048 | ---- | M] (Acronis) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)SRV - [2010/04/29 14:39:34 | 000,304,464 | ---- | M] (Malwarebytes Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)SRV - [2010/02/26 14:14:04 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)SRV - [2009/11/12 02:50:24 | 000,894,136 | ---- | M] (Acronis) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)SRV - [2009/10/20 11:41:48 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)SRV - [2009/07/16 16:04:16 | 000,316,664 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)SRV - [2009/06/23 12:29:48 | 000,740,968 | ---- | M] (National Instruments Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\National Instruments\Shared\Tagger\tagsrv.exe -- (NITaggerService)SRV - [2009/06/23 10:23:14 | 001,007,616 | ---- | M] (Macrovision Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe -- (NILM License Manager)SRV - [2009/06/18 06:01:50 | 000,356,912 | ---- | M] (National Instruments Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe -- (NIDomainService)SRV - [2009/06/18 05:57:28 | 000,042,544 | ---- | M] (National Instruments Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\lkads.exe -- (lkClassAds)SRV - [2009/06/18 05:56:32 | 000,053,296 | ---- | M] (National Instruments Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\lktsrv.exe -- (lkTimeSync)SRV - [2009/06/15 19:44:40 | 000,012,696 | ---- | M] (National Instruments Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\National Instruments\MAX\nimxs.exe -- (mxssvr)SRV - [2009/06/10 13:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)SRV - [2009/06/04 03:14:28 | 000,013,896 | ---- | M] (National Instruments Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\nisvcloc.exe -- (niSvcLoc)SRV - [2009/06/03 09:26:34 | 000,098,304 | ---- | M] (OPC Foundation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Opcenum.exe -- (OpcEnum)SRV - [2008/10/31 13:52:54 | 000,695,136 | ---- | M] (National Instruments, Inc.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\lkcitdl.exe -- (LkCitadelServer)SRV - [2007/10/12 08:48:58 | 001,370,752 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Cadence\LicenseManager\lmgrd.exe -- (Cadence License Manager)SRV - [2003/04/18 18:06:26 | 000,008,192 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)========== Driver Services (SafeList) ==========DRV:64bit: - File not found [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dhahelper.sys -- (DhaHelper)DRV:64bit: - [2010/09/07 12:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)DRV:64bit: - [2010/07/29 13:31:26 | 000,168,544 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)DRV:64bit: - [2010/07/29 13:31:26 | 000,141,264 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)DRV:64bit: - [2010/07/29 13:31:26 | 000,126,320 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfpr.sys -- (epfwwfpr)DRV:64bit: - [2010/07/15 07:44:20 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)DRV:64bit: - [2010/07/15 07:44:20 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)DRV:64bit: - [2010/05/11 18:54:00 | 000,251,488 | ---- | M] (Acronis) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp)DRV:64bit: - [2010/05/11 18:53:58 | 001,477,728 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tdrpm258.sys -- (tdrpman258) Acronis Try&Decide and Restore Points filter (build 258)DRV:64bit: - [2010/05/11 18:53:57 | 000,943,712 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)DRV:64bit: - [2010/05/11 18:53:53 | 000,257,120 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)DRV:64bit: - [2010/04/29 14:39:28 | 000,024,664 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)DRV:64bit: - [2010/04/07 06:28:22 | 000,121,280 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AnyDVD.sys -- (AnyDVD)DRV:64bit: - [2010/03/18 01:00:16 | 000,057,936 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)DRV:64bit: - [2010/03/18 01:00:00 | 000,063,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)DRV:64bit: - [2010/02/26 12:33:40 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)DRV:64bit: - [2010/02/26 12:33:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)DRV:64bit: - [2010/02/26 12:33:22 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)DRV:64bit: - [2010/02/26 12:33:22 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)DRV:64bit: - [2010/02/26 12:21:22 | 000,173,056 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)DRV:64bit: - [2010/02/26 12:21:20 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsucx64.sys -- (nmwcdnsucx64)DRV:64bit: - [2010/01/13 07:19:10 | 000,142,848 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ArcHlp.sys -- (archlp)DRV:64bit: - [2010/01/01 09:20:28 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)DRV:64bit: - [2009/12/30 11:21:24 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)DRV:64bit: - [2009/12/01 11:31:10 | 001,155,072 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cmudax3.sys -- (cmuda3)DRV:64bit: - [2009/11/28 01:36:30 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)DRV:64bit: - [2009/09/22 17:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)DRV:64bit: - [2009/09/22 17:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)DRV:64bit: - [2009/09/20 13:41:07 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)DRV:64bit: - [2009/08/20 23:05:06 | 000,239,616 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)DRV:64bit: - [2009/08/09 13:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)DRV:64bit: - [2009/07/13 17:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)DRV:64bit: - [2009/07/13 17:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)DRV:64bit: - [2009/07/13 17:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)DRV:64bit: - [2009/07/13 17:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)DRV:64bit: - [2009/07/13 17:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)DRV:64bit: - [2009/07/13 17:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)DRV:64bit: - [2009/07/13 16:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)DRV:64bit: - [2009/06/17 08:53:34 | 000,030,736 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L8042Kbd.sys -- (L8042Kbd)DRV:64bit: - [2009/06/10 12:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)DRV:64bit: - [2009/06/10 12:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)DRV:64bit: - [2009/06/10 12:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)DRV:64bit: - [2009/06/10 12:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)DRV:64bit: - [2009/06/10 12:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)DRV:64bit: - [2009/05/18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)DRV:64bit: - [2009/03/27 00:23:54 | 000,019,432 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz132_x64.sys -- (cpuz132)DRV:64bit: - [2008/11/04 12:12:08 | 000,023,096 | ---- | M] (Samsung Electronics, Inc. ) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\MTiCtwl.sys -- (MagicTune)DRV:64bit: - [2008/09/17 14:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64)DRV:64bit: - [2008/08/28 10:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)DRV:64bit: - [2008/07/30 18:21:48 | 000,093,784 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)DRV:64bit: - [2008/03/17 09:12:26 | 000,028,664 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\Ckldrv.sys -- (NetworkX)DRV:64bit: - [2007/06/25 04:37:14 | 000,108,032 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rtlh64.sys -- (RTL8169)DRV:64bit: - [2007/04/17 11:51:50 | 000,014,112 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)DRV - [2010/11/27 05:34:04 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | Auto | Running] -- C:\Users\Chris\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries24.gadget\WinRing0x64.sys -- (WinRing0_1_2_0)DRV - [2010/07/15 07:44:20 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)DRV - [2010/07/15 07:44:20 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)DRV - [2010/04/08 19:46:06 | 000,007,168 | ---- | M] (MPlayer <http://svn.mplayerhq.hu/mplayer/trunk/vidix/dhahelperwin/>) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\dhahelper.sys -- (DhaHelper)DRV - [2010/04/07 06:28:22 | 000,121,280 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\AnyDVD.sys -- (AnyDVD)DRV - [2005/06/10 09:01:00 | 000,007,140 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWow64\drivers\cvintdrv.sys -- (cvintdrv)========== Standard Registry (SafeList) ==================== Internet Explorer ==========IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmIE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form=ZGAPHPIE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.bing.com/?pc=Z007&form=ZGAPHPIE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form=ZGAPHPIE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.bing.com/?pc=Z007&form=ZGAPHPIE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form=ZGAPHPIE - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/IE - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-usIE - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 48 8D E3 54 B5 89 CB 01 [binary data]IE - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local========== FireFox ==========FF - prefs.js..browser.search.openintab: trueFF - prefs.js..browser.startup.homepage: "http://www.bing.com/?pc=Z007&form=ZGAPHP"FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.2FF - prefs.js..extensions.enabledItems: {5F590AA2-1221-4113-A6F4-A4BB62414FAC}:0.45.6.20100202.1FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.1FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.2FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22FF - prefs.js..extensions.enabledItems: {EE9EE85E-CA01-4107-909A-CB6E8AC31B6A}:1.9.1FF - prefs.js..extensions.enabledItems: rein@notiz.jp:3.6.1FF - prefs.js..keyword.URL: "http://www.bing.com/search?pc=Z007&form=ZGAADF&q="FF - user.js..browser.search.openintab: trueFF - HKLM\software\mozilla\Firefox\Extensions\\{EE9EE85E-CA01-4107-909A-CB6E8AC31B6A}: C:\Users\Chris\AppData\Local\{EE9EE85E-CA01-4107-909A-CB6E8AC31B6A} [2010/11/27 02:55:57 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/10/27 18:38:07 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/10/27 18:38:07 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010/11/27 07:05:55 | 000,000,000 | ---D | M][2010/07/28 13:24:58 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions[2010/07/28 13:24:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}[2010/11/28 14:13:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\extensions[2010/08/26 13:22:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}[2010/06/21 20:46:44 | 000,000,000 | ---D | M] (SmoothWheel (mozdev.org)) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\extensions\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}[2010/11/03 06:00:44 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}[2010/10/08 09:30:55 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}[2010/01/22 09:03:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}[2010/01/22 09:02:21 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\extensions\rein@notiz.jp[2010/11/27 02:51:42 | 000,001,919 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zt2hw3p2.default\searchplugins\bing-zugo.xml[2010/11/28 14:13:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions[2010/10/21 05:32:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}[2010/09/15 03:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll[2007/02/08 09:48:16 | 000,028,448 | ---- | M] (National Instruments) -- C:\Program Files (x86)\Mozilla Firefox\plugins\NPLV82Win32.dll[2009/06/23 18:40:40 | 000,025,088 | ---- | M] (National Instruments) -- C:\Program Files (x86)\Mozilla Firefox\plugins\nplv90win32.dll[1999/12/31 16:00:00 | 000,166,680 | ---- | M] (Tracker Software Products Ltd.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll[2010/11/27 05:28:17 | 000,001,919 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing-zugo.xmlO1 HOSTS File: ([2010/06/21 11:58:20 | 000,001,156 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hostsO1 - Hosts: 127.0.0.1 iw2.slysoft.comO1 - Hosts: 127.0.0.1 sb2.slysoft.comO1 - Hosts: 127.0.0.1 ev1.slysoft.comO1 - Hosts: 127.0.0.1 h3.slysoft.comO1 - Hosts: 127.0.0.1 ovh1.slysoft.comO1 - Hosts: 127.0.0.1 iw1.slysoft.comO1 - Hosts: 127.0.0.1 sb.slysoft.comO1 - Hosts: 127.0.0.1 iw5h.slysoft.comO1 - Hosts: 127.0.0.1 iw4.slysoft.comO1 - Hosts: 127.0.0.1 reverse.privatedns.comO1 - Hosts: 127.0.0.1 update.slysoft.comO1 - Hosts: 127.0.0.1 ns6.gandi.netO2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.O3 - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.O4:64bit: - HKLM..\Run: [CmPCIaudio] C:\Windows\Syswow64\CMICNFG3.DLL (C-Media Corporation)O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)O4 - HKLM..\Run: [VirtualCloneDrive] C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)O4 - HKU\S-1-5-19..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)O4 - HKU\S-1-5-20..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)O4 - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001..\Run: [F.lux] C:\Users\Chris\Local Settings\Apps\F.lux\flux.exe ()O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not foundO4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not foundO4 - Startup: C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\foobar2000.exe - Shortcut.lnk = C:\Program Files (x86)\foobar2000\foobar2000.exe ()O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-21-1554432839-2126977190-2861617609-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)O13 - gopher Prefix: missingO13 - gopher Prefix: missingO16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_22)O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_22)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_22)O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)O16 - DPF: vzTCPConfig http://www2.verizon.net/help/fios_settings...vzTCPConfig.CAB (Reg Error: Key error.)O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not foundO18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not foundO18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not foundO18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not foundO18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not foundO20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not foundO20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.O32 - HKLM CDRom: AutoRun - 1O34 - HKLM BootExecute: (PDBoot.exe) - File not foundO34 - HKLM BootExecute: (autocheck autochk *) - File not foundO35:64bit: - HKLM\..comfile [open] -- "%1" %*O35:64bit: - HKLM\..exefile [open] -- "%1" %*O35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*O37 - HKLM\...com [@ = comfile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %*========== Files/Folders - Created Within 30 Days ==========[2010/11/28 14:15:59 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe[2010/11/27 12:02:11 | 000,000,000 | R--D | C] -- C:\32788R22FWJFW[2010/11/27 11:59:38 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Chris\Desktop\HijackThis.exe[2010/11/27 09:43:46 | 000,000,000 | ---D | C] -- C:\NewsBin[2010/11/27 07:33:03 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\ESET[2010/11/27 07:05:55 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET[2010/11/27 07:05:55 | 000,000,000 | ---D | C] -- C:\Program Files\ESET[2010/11/27 05:28:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\whitesmoketoolbar[2010/11/27 05:22:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileASSASSIN[2010/11/27 04:22:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER[2010/11/27 04:21:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Synchronization Services[2010/11/27 04:21:33 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH[2010/11/27 04:21:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Sync Framework[2010/11/27 04:21:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition[2010/11/27 04:20:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8[2010/11/27 04:19:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office[2010/11/27 04:19:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services[2010/11/27 04:18:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office[2010/11/27 04:17:58 | 000,000,000 | RH-D | C] -- C:\MSOCache[2010/11/27 02:55:57 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\{EE9EE85E-CA01-4107-909A-CB6E8AC31B6A}[2010/11/27 02:51:21 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\VS Revo Group[2010/11/27 02:51:18 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys[2010/11/27 02:51:17 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group[2010/11/26 13:36:59 | 000,000,000 | ---D | C] -- C:\Program Files\NewsBin[2010/11/26 13:20:47 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Gravity[2010/11/26 13:12:00 | 000,000,000 | ---D | C] -- X:\My Documents\downloads[2010/11/26 13:09:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SABnzbd[2010/11/26 13:09:12 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Passware[2010/11/26 13:07:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Passware[2010/11/26 11:54:26 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\NewsBin[2010/11/25 02:43:46 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\GRETECH[2010/11/25 02:43:46 | 000,000,000 | ---D | C] -- X:\My Documents\GomPlayer[2010/11/25 02:43:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GRETECH[2010/11/21 11:57:36 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\HD Tune Pro[2010/11/21 11:56:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HD Tune Pro[2010/11/07 06:35:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AviSynth 2.5[2010/11/07 06:34:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MeGUI[2010/11/03 06:47:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AOR[2010/11/03 06:17:56 | 000,000,000 | ---D | C] -- C:\ProgramData\CrypKey[2010/11/03 06:17:44 | 000,165,888 | ---- | C] (Kenonic Controls) -- C:\Windows\Ckconfig.exe[2010/11/03 06:17:44 | 000,122,880 | ---- | C] (CrypKey (Canada) Ltd.) -- C:\Windows\SysNative\Crypserv.exe[2010/11/03 06:17:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Stellar Phoenix Outlook PST Repair[2009/09/20 13:41:07 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Chris\AppData\Roaming\pcouffin.sys[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]========== Files - Modified Within 30 Days ==========[2010/11/28 14:16:58 | 000,629,057 | ---- | M] () -- C:\Users\Chris\Desktop\RkU3.8.388.590.rar[2010/11/28 14:16:04 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe[2010/11/28 14:07:32 | 000,017,760 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0[2010/11/28 14:07:32 | 000,017,760 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0[2010/11/28 14:04:40 | 000,887,684 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI[2010/11/28 14:04:40 | 000,742,236 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat[2010/11/28 14:04:40 | 000,145,624 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat[2010/11/28 14:00:47 | 000,000,200 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job[2010/11/28 14:00:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat[2010/11/28 14:00:11 | 3219,886,080 | -HS- | M] () -- C:\hiberfil.sys[2010/11/27 11:59:41 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Chris\Desktop\HijackThis.exe[2010/11/27 05:28:13 | 000,001,112 | ---- | M] () -- C:\Windows\SysWow64\Improve Your PC.lnk[2010/11/27 05:13:56 | 000,435,744 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT[2010/11/27 04:34:24 | 000,001,139 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk[2010/11/27 04:32:48 | 000,614,400 | ---- | M] () -- C:\Windows\AutoKMS.exe[2010/11/27 04:32:48 | 000,000,135 | ---- | M] () -- C:\Windows\AutoKMS.ini[2010/11/27 02:55:59 | 000,000,120 | ---- | M] () -- C:\Users\Chris\AppData\Local\Jlofex.dat[2010/11/27 02:55:59 | 000,000,000 | ---- | M] () -- C:\Users\Chris\AppData\Local\Vpoceq.bin[2010/11/26 13:05:10 | 000,000,703 | ---- | M] () -- C:\Windows\NewsRover.INI[2010/11/25 04:28:45 | 000,001,189 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\vso_ts_preview.xml[2010/11/25 00:27:09 | 016,298,936 | ---- | M] () -- C:\Users\Chris\Desktop\fbanext-ps3-r364.rar[2010/11/06 18:26:57 | 000,049,664 | ---- | M] () -- X:\My Documents\Gas_Load_Data.xls[2010/11/05 09:21:49 | 000,000,280 | ---- | M] () -- C:\Windows\SysNative\PDBootState[2010/11/03 06:46:45 | 000,000,139 | ---- | M] () -- C:\Windows\Crypkey.ini[2010/11/03 06:18:16 | 000,001,680 | ---- | M] () -- C:\Windows\SysNative\esnecil.ind[2010/11/03 06:18:16 | 000,000,004 | ---- | M] () -- C:\Windows\vx86036.dat[2010/11/01 13:06:10 | 000,046,592 | ---- | M] () -- X:\My Documents\High Vac Pump Down Data 2010.xls[2010/10/30 23:32:52 | 000,083,968 | ---- | M] () -- X:\My Documents\Hi Vac Pump Down Report.doc[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]========== Files Created - No Company Name ==========[2010/11/28 14:16:56 | 000,629,057 | ---- | C] () -- C:\Users\Chris\Desktop\RkU3.8.388.590.rar[2010/11/27 05:28:13 | 000,001,112 | ---- | C] () -- C:\Windows\SysWow64\Improve Your PC.lnk[2010/11/27 04:34:24 | 000,001,139 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk[2010/11/27 04:32:48 | 000,614,400 | ---- | C] () -- C:\Windows\AutoKMS.exe[2010/11/27 04:32:48 | 000,000,200 | ---- | C] () -- C:\Windows\tasks\AutoKMS.job[2010/11/27 04:30:20 | 000,000,135 | ---- | C] () -- C:\Windows\AutoKMS.ini[2010/11/27 02:55:59 | 000,000,120 | ---- | C] () -- C:\Users\Chris\AppData\Local\Jlofex.dat[2010/11/27 02:55:59 | 000,000,000 | ---- | C] () -- C:\Users\Chris\AppData\Local\Vpoceq.bin[2010/11/26 12:56:06 | 000,000,703 | ---- | C] () -- C:\Windows\NewsRover.INI[2010/11/25 00:26:05 | 016,298,936 | ---- | C] () -- C:\Users\Chris\Desktop\fbanext-ps3-r364.rar[2010/11/06 18:58:05 | 000,049,664 | ---- | C] () -- X:\My Documents\Gas_Load_Data.xls[2010/11/03 06:18:16 | 000,000,004 | ---- | C] () -- C:\Windows\vx86036.dat[2010/11/03 06:17:56 | 000,001,680 | ---- | C] () -- C:\Windows\SysNative\esnecil.ind[2010/11/03 06:17:47 | 000,000,139 | ---- | C] () -- C:\Windows\Crypkey.ini[2010/11/03 06:17:44 | 000,028,664 | ---- | C] () -- C:\Windows\SysNative\Ckldrv.sys[2010/11/03 06:17:44 | 000,027,648 | R--- | C] () -- C:\Windows\Setup_ck.exe[2010/11/03 06:17:44 | 000,018,432 | ---- | C] () -- C:\Windows\Setup_ck.dll[2010/11/03 06:17:44 | 000,011,776 | ---- | C] () -- C:\Windows\Ckrfresh.exe[2010/10/30 23:45:35 | 000,046,592 | ---- | C] () -- X:\My Documents\High Vac Pump Down Data 2010.xls[2010/10/30 23:32:52 | 000,083,968 | ---- | C] () -- X:\My Documents\Hi Vac Pump Down Report.doc[2010/10/08 18:42:55 | 000,000,258 | ---- | C] () -- C:\Windows\ODBC.INI[2010/08/10 10:37:43 | 000,014,848 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll[2010/08/10 10:37:43 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys[2010/08/10 10:37:43 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys[2010/07/01 16:20:48 | 000,001,025 | ---- | C] () -- C:\Windows\SysWow64\sysprs7.dll[2010/07/01 16:20:48 | 000,000,205 | ---- | C] () -- C:\Windows\SysWow64\lsprst7.dll[2010/02/13 12:47:09 | 000,013,474 | ---- | C] () -- C:\Windows\PSPICEEV.INI[2010/02/13 12:47:07 | 000,176,128 | ---- | C] () -- C:\Windows\SysWow64\lffax60n.dll[2010/02/13 12:47:07 | 000,141,824 | ---- | C] () -- C:\Windows\SysWow64\lfcmp60n.dll[2010/02/13 12:47:07 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\lfpng60n.dll[2010/02/13 12:47:07 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\lftif60n.dll[2010/02/13 12:47:07 | 000,043,008 | ---- | C] () -- C:\Windows\SysWow64\ltfil60n.dll[2010/02/13 12:47:07 | 000,023,552 | ---- | C] () -- C:\Windows\SysWow64\lfpcx60n.dll[2010/02/13 12:47:07 | 000,022,528 | ---- | C] () -- C:\Windows\SysWow64\lfpct60n.dll[2010/02/13 12:47:07 | 000,022,528 | ---- | C] () -- C:\Windows\SysWow64\lfeps60n.dll[2010/02/13 12:47:07 | 000,022,016 | ---- | C] () -- C:\Windows\SysWow64\lfbmp60n.dll[2010/02/13 12:47:07 | 000,020,480 | ---- | C] () -- C:\Windows\SysWow64\lfpsd60n.dll[2010/02/13 12:47:07 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\lftga60n.dll[2010/02/13 12:47:07 | 000,019,456 | ---- | C] () -- C:\Windows\SysWow64\lfwpg60n.dll[2010/02/13 12:47:07 | 000,019,456 | ---- | C] () -- C:\Windows\SysWow64\lfwmf60n.dll[2010/02/13 12:47:07 | 000,018,432 | ---- | C] () -- C:\Windows\SysWow64\lfmsp60n.dll[2010/02/13 12:47:07 | 000,017,920 | ---- | C] () -- C:\Windows\SysWow64\lfmac60n.dll[2010/02/13 12:47:07 | 000,017,920 | ---- | C] () -- C:\Windows\SysWow64\implode.dll[2010/01/27 10:35:05 | 000,001,821 | ---- | C] () -- C:\ProgramData\GeorgeYohngVST.ini[2010/01/26 21:46:22 | 000,000,050 | ---- | C] () -- C:\Windows\MegaManager.INI[2010/01/15 18:23:49 | 000,003,518 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.cfg[2010/01/15 18:23:49 | 000,001,512 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.imi[2010/01/14 16:19:03 | 000,000,152 | ---- | C] () -- C:\Windows\BRVIDEO.INI[2010/01/14 16:19:03 | 000,000,000 | ---- | C] () -- C:\Windows\brmx2001.ini[2010/01/14 16:18:54 | 000,000,114 | ---- | C] () -- C:\Windows\SysWow64\brlmw03a.ini[2010/01/14 16:18:53 | 000,009,868 | ---- | C] () -- C:\Windows\HL-2170W.INI[2010/01/14 16:18:47 | 000,000,426 | ---- | C] () -- C:\Windows\BRWMARK.INI[2010/01/14 16:17:43 | 000,000,247 | ---- | C] () -- C:\Windows\Brownie.ini[2010/01/12 12:26:02 | 000,002,516 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys[2010/01/12 12:26:02 | 000,000,088 | RHS- | C] () -- C:\ProgramData\52D2B25CEF.sys[2009/10/16 19:51:43 | 000,001,872 | ---- | C] () -- C:\Windows\Cmicnfg3.ini.cfl[2009/10/16 19:51:23 | 000,002,857 | ---- | C] () -- C:\Windows\cmudax3.ini[2009/10/13 10:19:44 | 000,000,540 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\AutoGK.ini[2009/09/25 09:48:39 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini[2009/09/23 12:02:49 | 000,000,396 | RHS- | C] () -- C:\ProgramData\ntuser.pol[2009/09/20 13:42:29 | 000,001,189 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\vso_ts_preview.xml[2009/09/20 13:41:26 | 000,000,034 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\pcouffin.log[2009/09/20 13:41:07 | 000,099,384 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\inst.exe[2009/09/20 13:41:07 | 000,007,859 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\pcouffin.cat[2009/09/20 13:41:07 | 000,001,167 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\pcouffin.inf[2009/09/20 13:35:53 | 000,798,932 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI[2009/09/20 11:09:45 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\VmixP6.dll[2009/09/20 11:07:54 | 000,007,602 | ---- | C] () -- C:\Users\Chris\AppData\Local\Resmon.ResmonCfg[2009/07/13 15:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll[2009/07/13 13:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll[2009/06/14 13:15:52 | 000,000,244 | ---- | C] () -- C:\Windows\SysWow64\nirpc.ini[2005/06/10 09:00:00 | 000,007,140 | ---- | C] () -- C:\Windows\SysWow64\drivers\cvintdrv.sys< End of report > Link to post Share on other sites More sharing options...
skookum Posted November 28, 2010 Author ID:352567 Share Posted November 28, 2010 Extras.txtOTL Extras logfile created on: 11/28/2010 2:17:46 PM - Run 1OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Chris\Desktop64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstationInternet Explorer (Version = 8.0.7600.16385)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 67.00% Memory free8.00 Gb Paging File | 7.00 Gb Available in Paging File | 82.00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data]%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)Drive C: | 596.17 Gb Total Space | 518.98 Gb Free Space | 87.05% Space Free | Partition Type: NTFSDrive X: | 931.50 Gb Total Space | 88.30 Gb Free Space | 9.48% Space Free | Partition Type: NTFSComputer Name: ROOK | User Name: Chris | Logged in as Administrator.Boot Mode: Normal | Scan Mode: All users | Include 64bit ScansCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days========== Extra Registry (SafeList) ==================== File Associations ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation).scr[@ = Icad.load.scr] -- Reg Error: Key error. File not found[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation).url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation).scr [@ = Icad.load.scr] -- Reg Error: Key error. File not found[HKEY_USERS\S-1-5-21-1554432839-2126977190-2861617609-1001\SOFTWARE\Classes\<extension>].html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)========== Shell Spawning ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %* File not foundcmdfile [open] -- "%1" %* File not foundcomfile [open] -- "%1" %* File not foundexefile [open] -- "%1" %* File not foundhelpfile [open] -- Reg Error: Key error.inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)piffile [open] -- "%1" %* File not foundregfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1" File not foundscrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)scrfile [open] -- "%1" /S File not foundtxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not foundDirectory [ACDSee Photo Manager 12.Manage] -- "C:\Program Files (x86)\ACD Systems\ACDSee\12.0\ACDSeeQV12.exe" "%1" (ACD Systems International Inc.)Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [takeownership] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Folder [explore] -- Reg Error: Value error.Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %*cmdfile [open] -- "%1" %*comfile [open] -- "%1" %*cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)exefile [open] -- "%1" %*helpfile [open] -- Reg Error: Key error.inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)piffile [open] -- "%1" %*regfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)scrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [ACDSee Photo Manager 12.Manage] -- "C:\Program Files (x86)\ACD Systems\ACDSee\12.0\ACDSeeQV12.exe" "%1" (ACD Systems International Inc.)Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [takeownership] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Folder [explore] -- Reg Error: Value error.Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)========== Security Center Settings ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"cval" = 164bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]"AntiVirusOverride" = 0"AntiSpywareOverride" = 0"FirewallOverride" = 064bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]========== System Restore Settings ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]"DisableSR" = 0========== Firewall Settings ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"DisableNotifications" = 0"EnableFirewall" = 1[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"DisableNotifications" = 0"EnableFirewall" = 1[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]"DisableNotifications" = 0"EnableFirewall" = 1========== Authorized Applications List ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]"[iNSTALLDIR]CKOUT.exe" = [iNSTALLDIR]CKOUT.exe:*:Enabled:CKOUT.exe (CadenceLicenseManager)"[iNSTALLDIR]NEOLINLD.exe" = [iNSTALLDIR]NEOLINLD.exe:*:Enabled:NEOLINLD.exe (CadenceLicenseManager)"[iNSTALLDIR]alta.exe" = [iNSTALLDIR]alta.exe:*:Enabled:alta.exe (CadenceLicenseManager)"[iNSTALLDIR]ambitd.exe" = [iNSTALLDIR]ambitd.exe:*:Enabled:ambitd.exe (CadenceLicenseManager)"[iNSTALLDIR]axislmd.exe" = [iNSTALLDIR]axislmd.exe:*:Enabled:axislmd.exe (CadenceLicenseManager)"[iNSTALLDIR]cadmosd.exe" = [iNSTALLDIR]cadmosd.exe:*:Enabled:cadmosd.exe (CadenceLicenseManager)"[iNSTALLDIR]cdslmd.exe" = [iNSTALLDIR]cdslmd.exe:*:Enabled:cdslmd.exe (CadenceLicenseManager)"[iNSTALLDIR]dailmd.exe" = [iNSTALLDIR]dailmd.exe:*:Enabled:dailmd.exe (CadenceLicenseManager)"[iNSTALLDIR]dsmtlmd.exe" = [iNSTALLDIR]dsmtlmd.exe:*:Enabled:dsmtlmd.exe (CadenceLicenseManager)"[iNSTALLDIR]flexid\CDS_FLEXId_Dongle_Driver_Installer.exe" = [iNSTALLDIR]flexid\CDS_FLEXId_Dongle_Driver_Installer.exe:*:Enabled:CDS_FLEXId_Dongle_Driver_Installer.exe (CadenceLicenseManager)"[iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer.exe" = [iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer.exe:*:Enabled:FLEXId_Dongle_Driver_Installer.exe (CadenceLicenseManager)"[iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer_64.exe" = [iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer_64.exe:*:Enabled:FLEXId_Dongle_Driver_Installer_64.exe (CadenceLicenseManager)"[iNSTALLDIR]g2c_d.exe" = [iNSTALLDIR]g2c_d.exe:*:Enabled:g2c_d.exe (CadenceLicenseManager)"[iNSTALLDIR]hlds.exe" = [iNSTALLDIR]hlds.exe:*:Enabled:hlds.exe (CadenceLicenseManager)"[iNSTALLDIR]installs.exe" = [iNSTALLDIR]installs.exe:*:Enabled:installs.exe (CadenceLicenseManager)"[iNSTALLDIR]k2techld.exe" = [iNSTALLDIR]k2techld.exe:*:Enabled:k2techld.exe (CadenceLicenseManager)"[iNSTALLDIR]lmCheckExpiration.exe" = [iNSTALLDIR]lmCheckExpiration.exe:*:Enabled:lmCheckExpiration.exe (CadenceLicenseManager)"[iNSTALLDIR]lmgrd.exe" = [iNSTALLDIR]lmgrd.exe:*:Enabled:lmgrd.exe (CadenceLicenseManager)"[iNSTALLDIR]lmtools.exe" = [iNSTALLDIR]lmtools.exe:*:Enabled:lmtools.exe (CadenceLicenseManager)"[iNSTALLDIR]lmutil.exe" = [iNSTALLDIR]lmutil.exe:*:Enabled:lmutil.exe (CadenceLicenseManager)"[iNSTALLDIR]perf_test.exe" = [iNSTALLDIR]perf_test.exe:*:Enabled:perf_test.exe (CadenceLicenseManager)"[iNSTALLDIR]platod.exe" = [iNSTALLDIR]platod.exe:*:Enabled:platod.exe (CadenceLicenseManager)"[iNSTALLDIR]qtdaemon.exe" = [iNSTALLDIR]qtdaemon.exe:*:Enabled:qtdaemon.exe (CadenceLicenseManager)"[iNSTALLDIR]qtrekd.exe" = [iNSTALLDIR]qtrekd.exe:*:Enabled:qtrekd.exe (CadenceLicenseManager)"[iNSTALLDIR]simplexlmd.exe" = [iNSTALLDIR]simplexlmd.exe:*:Enabled:simplexlmd.exe (CadenceLicenseManager)"[iNSTALLDIR]spdaemon.exe" = [iNSTALLDIR]spdaemon.exe:*:Enabled:spdaemon.exe (CadenceLicenseManager)"[iNSTALLDIR]speedd.exe" = [iNSTALLDIR]speedd.exe:*:Enabled:speedd.exe (CadenceLicenseManager)"[iNSTALLDIR]verisityd.exe" = [iNSTALLDIR]verisityd.exe:*:Enabled:verisityd.exe (CadenceLicenseManager)"[iNSTALLDIR]verplex.exe" = [iNSTALLDIR]verplex.exe:*:Enabled:verplex.exe (CadenceLicenseManager)"[iNSTALLDIR]LicenseClientConfiguration.exe" = [iNSTALLDIR]LicenseClientConfiguration.exe:*:Enabled:LicenseClientConfiguration.exe (CadenceLicenseManager)"[iNSTALLDIR]LicenseServerConfiguration.exe" = [iNSTALLDIR]LicenseServerConfiguration.exe:*:Enabled:LicenseServerConfiguration.exe (CadenceLicenseManager)"[iNSTALLDIR]Licensing\LicenseClientConfiguration.exe" = [iNSTALLDIR]Licensing\LicenseClientConfiguration.exe:*:Enabled:LicenseClientConfiguration.exe (spb16.3)"[iNSTALLDIR]tools\bin\versionviewer.exe" = [iNSTALLDIR]tools\bin\versionviewer.exe:*:Enabled:versionviewer.exe (spb16.3)"[iNSTALLDIR]tools\bin\switchversion.exe" = [iNSTALLDIR]tools\bin\switchversion.exe:*:Enabled:switchversion.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sys_root.exe" = [iNSTALLDIR]tools\pcb\bin\sys_root.exe:*:Enabled:sys_root.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdnshelp.exe" = [iNSTALLDIR]tools\bin\cdnshelp.exe:*:Enabled:cdnshelp.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\_cdnshelp.exe" = [iNSTALLDIR]tools\cdnshelp\bin\_cdnshelp.exe:*:Enabled:_cdnshelp.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\cdnshelp.exe" = [iNSTALLDIR]tools\cdnshelp\bin\cdnshelp.exe:*:Enabled:cdnshelp.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\cdnshelpindexer.exe" = [iNSTALLDIR]tools\cdnshelp\bin\cdnshelpindexer.exe:*:Enabled:cdnshelpindexer.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\indexer.exe" = [iNSTALLDIR]tools\cdnshelp\bin\indexer.exe:*:Enabled:indexer.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\tagtest.exe" = [iNSTALLDIR]tools\cdnshelp\bin\tagtest.exe:*:Enabled:tagtest.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\topicgen.exe" = [iNSTALLDIR]tools\cdnshelp\bin\topicgen.exe:*:Enabled:topicgen.exe (spb16.3)"[iNSTALLDIR]tools\capture\Pcadi.exe" = [iNSTALLDIR]tools\capture\Pcadi.exe:*:Enabled:Pcadi.exe (spb16.3)"[iNSTALLDIR]tools\capture\comp16.exe" = [iNSTALLDIR]tools\capture\comp16.exe:*:Enabled:comp16.exe (spb16.3)"[iNSTALLDIR]tools\capture\Capture.exe" = [iNSTALLDIR]tools\capture\Capture.exe:*:Enabled:Capture.exe (spb16.3)"[iNSTALLDIR]tools\capture\pstswp.exe" = [iNSTALLDIR]tools\capture\pstswp.exe:*:Enabled:pstswp.exe (spb16.3)"[iNSTALLDIR]tools\capture\tutorial\Captutor.exe" = [iNSTALLDIR]tools\capture\tutorial\Captutor.exe:*:Enabled:Captutor.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsOaPathUtil.exe" = [iNSTALLDIR]tools\bin\cdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsUnzip.exe" = [iNSTALLDIR]tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsZip.exe" = [iNSTALLDIR]tools\bin\cdsZip.exe:*:Enabled:cdsZip.exe (spb16.3)"[iNSTALLDIR]tools\bin\cds_root.exe" = [iNSTALLDIR]tools\bin\cds_root.exe:*:Enabled:cds_root.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsinfo.exe" = [iNSTALLDIR]tools\bin\cdsinfo.exe:*:Enabled:cdsinfo.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdswhich.exe" = [iNSTALLDIR]tools\bin\cdswhich.exe:*:Enabled:cdswhich.exe (spb16.3)"[iNSTALLDIR]tools\bin\clsAdminTool.exe" = [iNSTALLDIR]tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool.exe (spb16.3)"[iNSTALLDIR]tools\bin\clsbd.exe" = [iNSTALLDIR]tools\bin\clsbd.exe:*:Enabled:clsbd.exe (spb16.3)"[iNSTALLDIR]tools\bin\dregprint.exe" = [iNSTALLDIR]tools\bin\dregprint.exe:*:Enabled:dregprint.exe (spb16.3)"[iNSTALLDIR]tools\bin\nmp.exe" = [iNSTALLDIR]tools\bin\nmp.exe:*:Enabled:nmp.exe (spb16.3)"[iNSTALLDIR]tools\bin\nmppath.exe" = [iNSTALLDIR]tools\bin\nmppath.exe:*:Enabled:nmppath.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\java-rmi.exe" = [iNSTALLDIR]tools\jre\bin\java-rmi.exe:*:Enabled:java-rmi.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\java.exe" = [iNSTALLDIR]tools\jre\bin\java.exe:*:Enabled:java.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\javacpl.exe" = [iNSTALLDIR]tools\jre\bin\javacpl.exe:*:Enabled:javacpl.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\javaw.exe" = [iNSTALLDIR]tools\jre\bin\javaw.exe:*:Enabled:javaw.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\javaws.exe" = [iNSTALLDIR]tools\jre\bin\javaws.exe:*:Enabled:javaws.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\jucheck.exe" = [iNSTALLDIR]tools\jre\bin\jucheck.exe:*:Enabled:jucheck.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\jureg.exe" = [iNSTALLDIR]tools\jre\bin\jureg.exe:*:Enabled:jureg.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\jusched.exe" = [iNSTALLDIR]tools\jre\bin\jusched.exe:*:Enabled:jusched.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\keytool.exe" = [iNSTALLDIR]tools\jre\bin\keytool.exe:*:Enabled:keytool.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\kinit.exe" = [iNSTALLDIR]tools\jre\bin\kinit.exe:*:Enabled:kinit.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\klist.exe" = [iNSTALLDIR]tools\jre\bin\klist.exe:*:Enabled:klist.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\ktab.exe" = [iNSTALLDIR]tools\jre\bin\ktab.exe:*:Enabled:ktab.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\orbd.exe" = [iNSTALLDIR]tools\jre\bin\orbd.exe:*:Enabled:orbd.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\pack200.exe" = [iNSTALLDIR]tools\jre\bin\pack200.exe:*:Enabled:pack200.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\policytool.exe" = [iNSTALLDIR]tools\jre\bin\policytool.exe:*:Enabled:policytool.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\rmid.exe" = [iNSTALLDIR]tools\jre\bin\rmid.exe:*:Enabled:rmid.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\rmiregistry.exe" = [iNSTALLDIR]tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\servertool.exe" = [iNSTALLDIR]tools\jre\bin\servertool.exe:*:Enabled:servertool.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\ssvagent.exe" = [iNSTALLDIR]tools\jre\bin\ssvagent.exe:*:Enabled:ssvagent.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\tnameserv.exe" = [iNSTALLDIR]tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\unpack200.exe" = [iNSTALLDIR]tools\jre\bin\unpack200.exe:*:Enabled:unpack200.exe (spb16.3)"[iNSTALLDIR]tools\tcltk\tcl\bin\tclsh80.exe" = [iNSTALLDIR]tools\tcltk\tcl\bin\tclsh80.exe:*:Enabled:tclsh80.exe (spb16.3)"[iNSTALLDIR]tools\tcltk\tcl\bin\wish80.exe" = [iNSTALLDIR]tools\tcltk\tcl\bin\wish80.exe:*:Enabled:wish80.exe (spb16.3)"[iNSTALLDIR]tools\bin\clu.exe" = [iNSTALLDIR]tools\bin\clu.exe:*:Enabled:clu.exe (spb16.3)"[iNSTALLDIR]tools\bin\van.exe" = [iNSTALLDIR]tools\bin\van.exe:*:Enabled:van.exe (spb16.3)"[iNSTALLDIR]tools\bin\cmfeedback.exe" = [iNSTALLDIR]tools\bin\cmfeedback.exe:*:Enabled:cmfeedback.exe (spb16.3)"[iNSTALLDIR]tools\bin\consmgr.exe" = [iNSTALLDIR]tools\bin\consmgr.exe:*:Enabled:consmgr.exe (spb16.3)"[iNSTALLDIR]tools\bin\emsChecker.exe" = [iNSTALLDIR]tools\bin\emsChecker.exe:*:Enabled:emsChecker.exe (spb16.3)"[iNSTALLDIR]tools\bin\emsMkError.exe" = [iNSTALLDIR]tools\bin\emsMkError.exe:*:Enabled:emsMkError.exe (spb16.3)"[iNSTALLDIR]tools\bin\msgHelp.exe" = [iNSTALLDIR]tools\bin\msgHelp.exe:*:Enabled:msgHelp.exe (spb16.3)"[iNSTALLDIR]tools\bin\eoa.exe" = [iNSTALLDIR]tools\bin\eoa.exe:*:Enabled:eoa.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsMsgServer.exe" = [iNSTALLDIR]tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsNameServer.exe" = [iNSTALLDIR]tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsRemote.exe" = [iNSTALLDIR]tools\bin\cdsRemote.exe:*:Enabled:cdsRemote.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsRemshClient.exe" = [iNSTALLDIR]tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsRunHidden.exe" = [iNSTALLDIR]tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsServIpc.exe" = [iNSTALLDIR]tools\bin\cdsServIpc.exe:*:Enabled:cdsServIpc.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsmps.exe" = [iNSTALLDIR]tools\bin\cdsmps.exe:*:Enabled:cdsmps.exe (spb16.3)"[iNSTALLDIR]tools\bin\mpsinfo.exe" = [iNSTALLDIR]tools\bin\mpsinfo.exe:*:Enabled:mpsinfo.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\def2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\def2oa.exe:*:Enabled:def2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\lef2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\lef2oa.exe:*:Enabled:lef2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2def.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2def.exe:*:Enabled:oa2def.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2lef.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2lef.exe:*:Enabled:oa2lef.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2spef.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2spef.exe:*:Enabled:oa2spef.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2strm.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2strm.exe:*:Enabled:oa2strm.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2verilog.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2verilog.exe:*:Enabled:oa2verilog.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oaDMTurboServer.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oaDMTurboServer.exe:*:Enabled:oaDMTurboServer.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oaFSLockD.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oaFSLockD.exe:*:Enabled:oaFSLockD.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oaGetVersion.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oaGetVersion.exe:*:Enabled:oaGetVersion.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\spef2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\spef2oa.exe:*:Enabled:spef2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\strm2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\strm2oa.exe:*:Enabled:strm2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\verilog2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\verilog2oa.exe:*:Enabled:verilog2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\verilogAnnotate.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\verilogAnnotate.exe:*:Enabled:verilogAnnotate.exe (spb16.3)"[iNSTALLDIR]tools\bin\PSpiceExplorerSrvr.exe" = [iNSTALLDIR]tools\bin\PSpiceExplorerSrvr.exe:*:Enabled:PSpiceExplorerSrvr.exe (spb16.3)"[iNSTALLDIR]tools\bin\regsvr32.exe" = [iNSTALLDIR]tools\bin\regsvr32.exe:*:Enabled:regsvr32.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\mkdefcfg.exe" = [iNSTALLDIR]tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\versiontool.exe" = [iNSTALLDIR]tools\fet\bin\versiontool.exe:*:Enabled:versiontool.exe (spb16.3)"[iNSTALLDIR]tools\capture\sch2cap.exe" = [iNSTALLDIR]tools\capture\sch2cap.exe:*:Enabled:sch2cap.exe (spb16.3)"[iNSTALLDIR]tools\dfII\bin\skill.exe" = [iNSTALLDIR]tools\dfII\bin\skill.exe:*:Enabled:skill.exe (spb16.3)"[iNSTALLDIR]tools\dfII\bin\skill_g.exe" = [iNSTALLDIR]tools\dfII\bin\skill_g.exe:*:Enabled:skill_g.exe (spb16.3)"[iNSTALLDIR]tools\pspice\pspiceaa.exe" = [iNSTALLDIR]tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa.exe (spb16.3)"[iNSTALLDIR]tools\pspice\Magneticdesigner.exe" = [iNSTALLDIR]tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner.exe (spb16.3)"[iNSTALLDIR]tools\pspice\ModelEd.exe" = [iNSTALLDIR]tools\pspice\ModelEd.exe:*:Enabled:ModelEd.exe (spb16.3)"[iNSTALLDIR]tools\pspice\IndiceFileGeneration.exe" = [iNSTALLDIR]tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration.exe (spb16.3)"[iNSTALLDIR]tools\pspice\MrkSrvr.exe" = [iNSTALLDIR]tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr.exe (spb16.3)"[iNSTALLDIR]tools\pspice\PSpiceEnc.exe" = [iNSTALLDIR]tools\pspice\PSpiceEnc.exe:*:Enabled:PSpiceEnc.exe (spb16.3)"[iNSTALLDIR]tools\pspice\SimSrvr.exe" = [iNSTALLDIR]tools\pspice\SimSrvr.exe:*:Enabled:SimSrvr.exe (spb16.3)"[iNSTALLDIR]tools\pspice\psp_cmd.exe" = [iNSTALLDIR]tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd.exe (spb16.3)"[iNSTALLDIR]tools\pspice\pspice.exe" = [iNSTALLDIR]tools\pspice\pspice.exe:*:Enabled:pspice.exe (spb16.3)"[iNSTALLDIR]tools\pspice\simmgr.exe" = [iNSTALLDIR]tools\pspice\simmgr.exe:*:Enabled:simmgr.exe (spb16.3)"[iNSTALLDIR]tools\pspice\stmed.exe" = [iNSTALLDIR]tools\pspice\stmed.exe:*:Enabled:stmed.exe (spb16.3)"[iNSTALLDIR]tools\fsp\bin\fsp.exe" = [iNSTALLDIR]tools\fsp\bin\fsp.exe:*:Enabled:fsp.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\QPSetEditor.exe" = [iNSTALLDIR]tools\fet\bin\QPSetEditor.exe:*:Enabled:QPSetEditor.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\UniversalBrowser.exe" = [iNSTALLDIR]tools\fet\bin\UniversalBrowser.exe:*:Enabled:UniversalBrowser.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\pcbCache.exe" = [iNSTALLDIR]tools\fet\bin\pcbCache.exe:*:Enabled:pcbCache.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\lrm.exe" = [iNSTALLDIR]tools\fet\bin\lrm.exe:*:Enabled:lrm.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\purge.exe" = [iNSTALLDIR]tools\fet\bin\purge.exe:*:Enabled:purge.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\rollback.exe" = [iNSTALLDIR]tools\fet\bin\rollback.exe:*:Enabled:rollback.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\a2dxf.exe" = [iNSTALLDIR]tools\pcb\bin\a2dxf.exe:*:Enabled:a2dxf.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dxf2a.exe" = [iNSTALLDIR]tools\pcb\bin\dxf2a.exe:*:Enabled:dxf2a.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\artwork.exe" = [iNSTALLDIR]tools\pcb\bin\artwork.exe:*:Enabled:artwork.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\allegro.exe" = [iNSTALLDIR]tools\pcb\bin\allegro.exe:*:Enabled:allegro.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\allegro_batch.exe" = [iNSTALLDIR]tools\pcb\bin\allegro_batch.exe:*:Enabled:allegro_batch.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\allegro_free_viewer.exe" = [iNSTALLDIR]tools\pcb\bin\allegro_free_viewer.exe:*:Enabled:allegro_free_viewer.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\db_change_type.exe" = [iNSTALLDIR]tools\pcb\bin\db_change_type.exe:*:Enabled:db_change_type.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dbdoctor.exe" = [iNSTALLDIR]tools\pcb\bin\dbdoctor.exe:*:Enabled:dbdoctor.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dbdoctor_ui.exe" = [iNSTALLDIR]tools\pcb\bin\dbdoctor_ui.exe:*:Enabled:dbdoctor_ui.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dbstat.exe" = [iNSTALLDIR]tools\pcb\bin\dbstat.exe:*:Enabled:dbstat.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dfa_dlg.exe" = [iNSTALLDIR]tools\pcb\bin\dfa_dlg.exe:*:Enabled:dfa_dlg.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dfa_update.exe" = [iNSTALLDIR]tools\pcb\bin\dfa_update.exe:*:Enabled:dfa_update.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\downrev_library.exe" = [iNSTALLDIR]tools\pcb\bin\downrev_library.exe:*:Enabled:downrev_library.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\enved.exe" = [iNSTALLDIR]tools\pcb\bin\enved.exe:*:Enabled:enved.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\flash_convert.exe" = [iNSTALLDIR]tools\pcb\bin\flash_convert.exe:*:Enabled:flash_convert.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\fpbrowse.exe" = [iNSTALLDIR]tools\pcb\bin\fpbrowse.exe:*:Enabled:fpbrowse.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\layer_compare.exe" = [iNSTALLDIR]tools\pcb\bin\layer_compare.exe:*:Enabled:layer_compare.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\qvupdate.exe" = [iNSTALLDIR]tools\pcb\bin\qvupdate.exe:*:Enabled:qvupdate.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sip_free_viewer.exe" = [iNSTALLDIR]tools\pcb\bin\sip_free_viewer.exe:*:Enabled:sip_free_viewer.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\systemdump.exe" = [iNSTALLDIR]tools\pcb\bin\systemdump.exe:*:Enabled:systemdump.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\uprev.exe" = [iNSTALLDIR]tools\pcb\bin\uprev.exe:*:Enabled:uprev.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\batch_drc.exe" = [iNSTALLDIR]tools\pcb\bin\batch_drc.exe:*:Enabled:batch_drc.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\bbvia.exe" = [iNSTALLDIR]tools\pcb\bin\bbvia.exe:*:Enabled:bbvia.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\convert_gerber.exe" = [iNSTALLDIR]tools\pcb\bin\convert_gerber.exe:*:Enabled:convert_gerber.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\create_devices.exe" = [iNSTALLDIR]tools\pcb\bin\create_devices.exe:*:Enabled:create_devices.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\create_sym.exe" = [iNSTALLDIR]tools\pcb\bin\create_sym.exe:*:Enabled:create_sym.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\draw_check.exe" = [iNSTALLDIR]tools\pcb\bin\draw_check.exe:*:Enabled:draw_check.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dump_libraries.exe" = [iNSTALLDIR]tools\pcb\bin\dump_libraries.exe:*:Enabled:dump_libraries.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\plctxt.exe" = [iNSTALLDIR]tools\pcb\bin\plctxt.exe:*:Enabled:plctxt.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\genfeedformat.exe" = [iNSTALLDIR]tools\pcb\bin\genfeedformat.exe:*:Enabled:genfeedformat.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\netrev.exe" = [iNSTALLDIR]tools\pcb\bin\netrev.exe:*:Enabled:netrev.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\idf_in.exe" = [iNSTALLDIR]tools\pcb\bin\idf_in.exe:*:Enabled:idf_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\idf_out.exe" = [iNSTALLDIR]tools\pcb\bin\idf_out.exe:*:Enabled:idf_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\idx_out.exe" = [iNSTALLDIR]tools\pcb\bin\idx_out.exe:*:Enabled:idx_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\iges_in.exe" = [iNSTALLDIR]tools\pcb\bin\iges_in.exe:*:Enabled:iges_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\iges_out.exe" = [iNSTALLDIR]tools\pcb\bin\iges_out.exe:*:Enabled:iges_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ipc356_out.exe" = [iNSTALLDIR]tools\pcb\bin\ipc356_out.exe:*:Enabled:ipc356_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\explot.exe" = [iNSTALLDIR]tools\pcb\bin\explot.exe:*:Enabled:explot.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\gbplot.exe" = [iNSTALLDIR]tools\pcb\bin\gbplot.exe:*:Enabled:gbplot.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\genrad.exe" = [iNSTALLDIR]tools\pcb\bin\genrad.exe:*:Enabled:genrad.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\gloss.exe" = [iNSTALLDIR]tools\pcb\bin\gloss.exe:*:Enabled:gloss.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ncroute.exe" = [iNSTALLDIR]tools\pcb\bin\ncroute.exe:*:Enabled:ncroute.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\nctape.exe" = [iNSTALLDIR]tools\pcb\bin\nctape.exe:*:Enabled:nctape.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\netin.exe" = [iNSTALLDIR]tools\pcb\bin\netin.exe:*:Enabled:netin.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pad_designer.exe" = [iNSTALLDIR]tools\pcb\bin\pad_designer.exe:*:Enabled:pad_designer.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\l2a.exe" = [iNSTALLDIR]tools\pcb\bin\l2a.exe:*:Enabled:l2a.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pads_in.exe" = [iNSTALLDIR]tools\pcb\bin\pads_in.exe:*:Enabled:pads_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pcad_in.exe" = [iNSTALLDIR]tools\pcb\bin\pcad_in.exe:*:Enabled:pcad_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\placement.exe" = [iNSTALLDIR]tools\pcb\bin\placement.exe:*:Enabled:placement.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\swap.exe" = [iNSTALLDIR]tools\pcb\bin\swap.exe:*:Enabled:swap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\downrev14.exe" = [iNSTALLDIR]tools\pcb\bin\downrev14.exe:*:Enabled:downrev14.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile13.exe" = [iNSTALLDIR]tools\pcb\bin\techfile13.exe:*:Enabled:techfile13.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile14.exe" = [iNSTALLDIR]tools\pcb\bin\techfile14.exe:*:Enabled:techfile14.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile15.exe" = [iNSTALLDIR]tools\pcb\bin\techfile15.exe:*:Enabled:techfile15.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor14.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor14.exe:*:Enabled:dbdoctor14.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor15.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor15.exe:*:Enabled:dbdoctor15.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbfix11.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbfix11.exe:*:Enabled:dbfix11.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbfix12.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbfix12.exe:*:Enabled:dbfix12.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbfix13.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbfix13.exe:*:Enabled:dbfix13.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\downrev15.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\downrev15.exe:*:Enabled:downrev15.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spif.exe" = [iNSTALLDIR]tools\pcb\bin\spif.exe:*:Enabled:spif.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spif_batch.exe" = [iNSTALLDIR]tools\pcb\bin\spif_batch.exe:*:Enabled:spif_batch.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mbs2lib.exe" = [iNSTALLDIR]tools\pcb\bin\mbs2lib.exe:*:Enabled:mbs2lib.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\FSvia.exe" = [iNSTALLDIR]tools\pcb\bin\FSvia.exe:*:Enabled:FSvia.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\FSviaSolver.exe" = [iNSTALLDIR]tools\pcb\bin\FSviaSolver.exe:*:Enabled:FSviaSolver.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\bem2d.exe" = [iNSTALLDIR]tools\pcb\bin\bem2d.exe:*:Enabled:bem2d.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ems2d.exe" = [iNSTALLDIR]tools\pcb\bin\ems2d.exe:*:Enabled:ems2d.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\extracta.exe" = [iNSTALLDIR]tools\pcb\bin\extracta.exe:*:Enabled:extracta.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\fatten.exe" = [iNSTALLDIR]tools\pcb\bin\fatten.exe:*:Enabled:fatten.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\gate_assign.exe" = [iNSTALLDIR]tools\pcb\bin\gate_assign.exe:*:Enabled:gate_assign.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\il_allegro.exe" = [iNSTALLDIR]tools\pcb\bin\il_allegro.exe:*:Enabled:il_allegro.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\j2script.exe" = [iNSTALLDIR]tools\pcb\bin\j2script.exe:*:Enabled:j2script.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mcm_escapes.exe" = [iNSTALLDIR]tools\pcb\bin\mcm_escapes.exe:*:Enabled:mcm_escapes.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mpiexec.exe" = [iNSTALLDIR]tools\pcb\bin\mpiexec.exe:*:Enabled:mpiexec.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\parallel.exe" = [iNSTALLDIR]tools\pcb\bin\parallel.exe:*:Enabled:parallel.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pe_wordpad.exe" = [iNSTALLDIR]tools\pcb\bin\pe_wordpad.exe:*:Enabled:pe_wordpad.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pre_check.exe" = [iNSTALLDIR]tools\pcb\bin\pre_check.exe:*:Enabled:pre_check.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\refresh_padstack.exe" = [iNSTALLDIR]tools\pcb\bin\refresh_padstack.exe:*:Enabled:refresh_padstack.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\refresh_symbol.exe" = [iNSTALLDIR]tools\pcb\bin\refresh_symbol.exe:*:Enabled:refresh_symbol.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\refresh_vs.exe" = [iNSTALLDIR]tools\pcb\bin\refresh_vs.exe:*:Enabled:refresh_vs.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\reftxt.exe" = [iNSTALLDIR]tools\pcb\bin\reftxt.exe:*:Enabled:reftxt.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\report.exe" = [iNSTALLDIR]tools\pcb\bin\report.exe:*:Enabled:report.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\smpd.exe" = [iNSTALLDIR]tools\pcb\bin\smpd.exe:*:Enabled:smpd.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile.exe" = [iNSTALLDIR]tools\pcb\bin\techfile.exe:*:Enabled:techfile.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\wmpiconfig.exe" = [iNSTALLDIR]tools\pcb\bin\wmpiconfig.exe:*:Enabled:wmpiconfig.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\wmpiexec.exe" = [iNSTALLDIR]tools\pcb\bin\wmpiexec.exe:*:Enabled:wmpiexec.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\wmpiregister.exe" = [iNSTALLDIR]tools\pcb\bin\wmpiregister.exe:*:Enabled:wmpiregister.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\zrouter.exe" = [iNSTALLDIR]tools\pcb\bin\zrouter.exe:*:Enabled:zrouter.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\bodygen.exe" = [iNSTALLDIR]tools\fet\bin\bodygen.exe:*:Enabled:bodygen.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\newgenasym.exe" = [iNSTALLDIR]tools\fet\bin\newgenasym.exe:*:Enabled:newgenasym.exe (spb16.3)"[iNSTALLDIR]tools\msbase\vcredist_x86.exe" = [iNSTALLDIR]tools\msbase\vcredist_x86.exe:*:Enabled:vcredist_x86.exe (spb16.3)"[iNSTALLDIR]tools\perl5\bin\perl.exe" = [iNSTALLDIR]tools\perl5\bin\perl.exe:*:Enabled:perl.exe (spb16.3)"[iNSTALLDIR]tools\perl5\bin\perlglob.exe" = [iNSTALLDIR]tools\perl5\bin\perlglob.exe:*:Enabled:perlglob.exe (spb16.3)"[iNSTALLDIR]tools\perl5\ntt\cmd32.exe" = [iNSTALLDIR]tools\perl5\ntt\cmd32.exe:*:Enabled:cmd32.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\productServer.exe" = [iNSTALLDIR]tools\pcb\bin\productServer.exe:*:Enabled:productServer.exe (spb16.3)"[iNSTALLDIR]tools\bin\conceptNmpListCheck.exe" = [iNSTALLDIR]tools\bin\conceptNmpListCheck.exe:*:Enabled:conceptNmpListCheck.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\cpmaccess.exe" = [iNSTALLDIR]tools\fet\bin\cpmaccess.exe:*:Enabled:cpmaccess.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\libaccess.exe" = [iNSTALLDIR]tools\fet\bin\libaccess.exe:*:Enabled:libaccess.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\projmgr.exe" = [iNSTALLDIR]tools\fet\bin\projmgr.exe:*:Enabled:projmgr.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\pseteditor.exe" = [iNSTALLDIR]tools\fet\bin\pseteditor.exe:*:Enabled:pseteditor.exe (spb16.3)"[iNSTALLDIR]tools\specctra\bin\mbs2sp.exe" = [iNSTALLDIR]tools\specctra\bin\mbs2sp.exe:*:Enabled:mbs2sp.exe (spb16.3)"[iNSTALLDIR]tools\specctra\bin\sp2mbs.exe" = [iNSTALLDIR]tools\specctra\bin\sp2mbs.exe:*:Enabled:sp2mbs.exe (spb16.3)"[iNSTALLDIR]tools\specctra\bin\specctra.exe" = [iNSTALLDIR]tools\specctra\bin\specctra.exe:*:Enabled:specctra.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\signoise.exe" = [iNSTALLDIR]tools\pcb\bin\signoise.exe:*:Enabled:signoise.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\lis2buf.exe" = [iNSTALLDIR]tools\pcb\bin\lis2buf.exe:*:Enabled:lis2buf.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\modeleditor.exe" = [iNSTALLDIR]tools\pcb\bin\modeleditor.exe:*:Enabled:modeleditor.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\modelintegrity.exe" = [iNSTALLDIR]tools\pcb\bin\modelintegrity.exe:*:Enabled:modelintegrity.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\modelsim.exe" = [iNSTALLDIR]tools\pcb\bin\modelsim.exe:*:Enabled:modelsim.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spc2dml.exe" = [iNSTALLDIR]tools\pcb\bin\spc2dml.exe:*:Enabled:spc2dml.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sigxp.exe" = [iNSTALLDIR]tools\pcb\bin\sigxp.exe:*:Enabled:sigxp.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\aprepmap.exe" = [iNSTALLDIR]tools\pcb\bin\aprepmap.exe:*:Enabled:aprepmap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ashowmap.exe" = [iNSTALLDIR]tools\pcb\bin\ashowmap.exe:*:Enabled:ashowmap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\aconvmap.exe" = [iNSTALLDIR]tools\pcb\bin\aconvmap.exe:*:Enabled:aconvmap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\brd2dml.exe" = [iNSTALLDIR]tools\pcb\bin\brd2dml.exe:*:Enabled:brd2dml.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dml2brd.exe" = [iNSTALLDIR]tools\pcb\bin\dml2brd.exe:*:Enabled:dml2brd.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dmlcheck.exe" = [iNSTALLDIR]tools\pcb\bin\dmlcheck.exe:*:Enabled:dmlcheck.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dmlcrypt.exe" = [iNSTALLDIR]tools\pcb\bin\dmlcrypt.exe:*:Enabled:dmlcrypt.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ftsmerge.exe" = [iNSTALLDIR]tools\pcb\bin\ftsmerge.exe:*:Enabled:ftsmerge.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ibis2signoise.exe" = [iNSTALLDIR]tools\pcb\bin\ibis2signoise.exe:*:Enabled:ibis2signoise.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ibischk3.exe" = [iNSTALLDIR]tools\pcb\bin\ibischk3.exe:*:Enabled:ibischk3.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ibischk4.exe" = [iNSTALLDIR]tools\pcb\bin\ibischk4.exe:*:Enabled:ibischk4.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\icmchk.exe" = [iNSTALLDIR]tools\pcb\bin\icmchk.exe:*:Enabled:icmchk.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mergedml.exe" = [iNSTALLDIR]tools\pcb\bin\mergedml.exe:*:Enabled:mergedml.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mkdeviceindex.exe" = [iNSTALLDIR]tools\pcb\bin\mkdeviceindex.exe:*:Enabled:mkdeviceindex.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\quad2signoise.exe" = [iNSTALLDIR]tools\pcb\bin\quad2signoise.exe:*:Enabled:quad2signoise.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sigwave.exe" = [iNSTALLDIR]tools\pcb\bin\sigwave.exe:*:Enabled:sigwave.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sigxsect.exe" = [iNSTALLDIR]tools\pcb\bin\sigxsect.exe:*:Enabled:sigxsect.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spc2spc.exe" = [iNSTALLDIR]tools\pcb\bin\spc2spc.exe:*:Enabled:spc2spc.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\tlsim.exe" = [iNSTALLDIR]tools\pcb\bin\tlsim.exe:*:Enabled:tlsim.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ts2dml.exe" = [iNSTALLDIR]tools\pcb\bin\ts2dml.exe:*:Enabled:ts2dml.exe (spb16.3)"C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe" = C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)"[iNSTALLDIR]CKOUT.exe" = [iNSTALLDIR]CKOUT.exe:*:Enabled:CKOUT.exe (CadenceLicenseManager)"[iNSTALLDIR]NEOLINLD.exe" = [iNSTALLDIR]NEOLINLD.exe:*:Enabled:NEOLINLD.exe (CadenceLicenseManager)"[iNSTALLDIR]alta.exe" = [iNSTALLDIR]alta.exe:*:Enabled:alta.exe (CadenceLicenseManager)"[iNSTALLDIR]ambitd.exe" = [iNSTALLDIR]ambitd.exe:*:Enabled:ambitd.exe (CadenceLicenseManager)"[iNSTALLDIR]axislmd.exe" = [iNSTALLDIR]axislmd.exe:*:Enabled:axislmd.exe (CadenceLicenseManager)"[iNSTALLDIR]cadmosd.exe" = [iNSTALLDIR]cadmosd.exe:*:Enabled:cadmosd.exe (CadenceLicenseManager)"[iNSTALLDIR]cdslmd.exe" = [iNSTALLDIR]cdslmd.exe:*:Enabled:cdslmd.exe (CadenceLicenseManager)"[iNSTALLDIR]dailmd.exe" = [iNSTALLDIR]dailmd.exe:*:Enabled:dailmd.exe (CadenceLicenseManager)"[iNSTALLDIR]dsmtlmd.exe" = [iNSTALLDIR]dsmtlmd.exe:*:Enabled:dsmtlmd.exe (CadenceLicenseManager)"[iNSTALLDIR]flexid\CDS_FLEXId_Dongle_Driver_Installer.exe" = [iNSTALLDIR]flexid\CDS_FLEXId_Dongle_Driver_Installer.exe:*:Enabled:CDS_FLEXId_Dongle_Driver_Installer.exe (CadenceLicenseManager)"[iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer.exe" = [iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer.exe:*:Enabled:FLEXId_Dongle_Driver_Installer.exe (CadenceLicenseManager)"[iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer_64.exe" = [iNSTALLDIR]flexid\FLEXId_Dongle_Driver_Installer_64.exe:*:Enabled:FLEXId_Dongle_Driver_Installer_64.exe (CadenceLicenseManager)"[iNSTALLDIR]g2c_d.exe" = [iNSTALLDIR]g2c_d.exe:*:Enabled:g2c_d.exe (CadenceLicenseManager)"[iNSTALLDIR]hlds.exe" = [iNSTALLDIR]hlds.exe:*:Enabled:hlds.exe (CadenceLicenseManager)"[iNSTALLDIR]installs.exe" = [iNSTALLDIR]installs.exe:*:Enabled:installs.exe (CadenceLicenseManager)"[iNSTALLDIR]k2techld.exe" = [iNSTALLDIR]k2techld.exe:*:Enabled:k2techld.exe (CadenceLicenseManager)"[iNSTALLDIR]lmCheckExpiration.exe" = [iNSTALLDIR]lmCheckExpiration.exe:*:Enabled:lmCheckExpiration.exe (CadenceLicenseManager)"[iNSTALLDIR]lmgrd.exe" = [iNSTALLDIR]lmgrd.exe:*:Enabled:lmgrd.exe (CadenceLicenseManager)"[iNSTALLDIR]lmtools.exe" = [iNSTALLDIR]lmtools.exe:*:Enabled:lmtools.exe (CadenceLicenseManager)"[iNSTALLDIR]lmutil.exe" = [iNSTALLDIR]lmutil.exe:*:Enabled:lmutil.exe (CadenceLicenseManager)"[iNSTALLDIR]perf_test.exe" = [iNSTALLDIR]perf_test.exe:*:Enabled:perf_test.exe (CadenceLicenseManager)"[iNSTALLDIR]platod.exe" = [iNSTALLDIR]platod.exe:*:Enabled:platod.exe (CadenceLicenseManager)"[iNSTALLDIR]qtdaemon.exe" = [iNSTALLDIR]qtdaemon.exe:*:Enabled:qtdaemon.exe (CadenceLicenseManager)"[iNSTALLDIR]qtrekd.exe" = [iNSTALLDIR]qtrekd.exe:*:Enabled:qtrekd.exe (CadenceLicenseManager)"[iNSTALLDIR]simplexlmd.exe" = [iNSTALLDIR]simplexlmd.exe:*:Enabled:simplexlmd.exe (CadenceLicenseManager)"[iNSTALLDIR]spdaemon.exe" = [iNSTALLDIR]spdaemon.exe:*:Enabled:spdaemon.exe (CadenceLicenseManager)"[iNSTALLDIR]speedd.exe" = [iNSTALLDIR]speedd.exe:*:Enabled:speedd.exe (CadenceLicenseManager)"[iNSTALLDIR]verisityd.exe" = [iNSTALLDIR]verisityd.exe:*:Enabled:verisityd.exe (CadenceLicenseManager)"[iNSTALLDIR]verplex.exe" = [iNSTALLDIR]verplex.exe:*:Enabled:verplex.exe (CadenceLicenseManager)"[iNSTALLDIR]LicenseClientConfiguration.exe" = [iNSTALLDIR]LicenseClientConfiguration.exe:*:Enabled:LicenseClientConfiguration.exe (CadenceLicenseManager)"[iNSTALLDIR]LicenseServerConfiguration.exe" = [iNSTALLDIR]LicenseServerConfiguration.exe:*:Enabled:LicenseServerConfiguration.exe (CadenceLicenseManager)"[iNSTALLDIR]Licensing\LicenseClientConfiguration.exe" = [iNSTALLDIR]Licensing\LicenseClientConfiguration.exe:*:Enabled:LicenseClientConfiguration.exe (spb16.3)"[iNSTALLDIR]tools\bin\versionviewer.exe" = [iNSTALLDIR]tools\bin\versionviewer.exe:*:Enabled:versionviewer.exe (spb16.3)"[iNSTALLDIR]tools\bin\switchversion.exe" = [iNSTALLDIR]tools\bin\switchversion.exe:*:Enabled:switchversion.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sys_root.exe" = [iNSTALLDIR]tools\pcb\bin\sys_root.exe:*:Enabled:sys_root.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdnshelp.exe" = [iNSTALLDIR]tools\bin\cdnshelp.exe:*:Enabled:cdnshelp.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\_cdnshelp.exe" = [iNSTALLDIR]tools\cdnshelp\bin\_cdnshelp.exe:*:Enabled:_cdnshelp.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\cdnshelp.exe" = [iNSTALLDIR]tools\cdnshelp\bin\cdnshelp.exe:*:Enabled:cdnshelp.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\cdnshelpindexer.exe" = [iNSTALLDIR]tools\cdnshelp\bin\cdnshelpindexer.exe:*:Enabled:cdnshelpindexer.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\indexer.exe" = [iNSTALLDIR]tools\cdnshelp\bin\indexer.exe:*:Enabled:indexer.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\tagtest.exe" = [iNSTALLDIR]tools\cdnshelp\bin\tagtest.exe:*:Enabled:tagtest.exe (spb16.3)"[iNSTALLDIR]tools\cdnshelp\bin\topicgen.exe" = [iNSTALLDIR]tools\cdnshelp\bin\topicgen.exe:*:Enabled:topicgen.exe (spb16.3)"[iNSTALLDIR]tools\capture\Pcadi.exe" = [iNSTALLDIR]tools\capture\Pcadi.exe:*:Enabled:Pcadi.exe (spb16.3)"[iNSTALLDIR]tools\capture\comp16.exe" = [iNSTALLDIR]tools\capture\comp16.exe:*:Enabled:comp16.exe (spb16.3)"[iNSTALLDIR]tools\capture\Capture.exe" = [iNSTALLDIR]tools\capture\Capture.exe:*:Enabled:Capture.exe (spb16.3)"[iNSTALLDIR]tools\capture\pstswp.exe" = [iNSTALLDIR]tools\capture\pstswp.exe:*:Enabled:pstswp.exe (spb16.3)"[iNSTALLDIR]tools\capture\tutorial\Captutor.exe" = [iNSTALLDIR]tools\capture\tutorial\Captutor.exe:*:Enabled:Captutor.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsOaPathUtil.exe" = [iNSTALLDIR]tools\bin\cdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsUnzip.exe" = [iNSTALLDIR]tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsZip.exe" = [iNSTALLDIR]tools\bin\cdsZip.exe:*:Enabled:cdsZip.exe (spb16.3)"[iNSTALLDIR]tools\bin\cds_root.exe" = [iNSTALLDIR]tools\bin\cds_root.exe:*:Enabled:cds_root.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsinfo.exe" = [iNSTALLDIR]tools\bin\cdsinfo.exe:*:Enabled:cdsinfo.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdswhich.exe" = [iNSTALLDIR]tools\bin\cdswhich.exe:*:Enabled:cdswhich.exe (spb16.3)"[iNSTALLDIR]tools\bin\clsAdminTool.exe" = [iNSTALLDIR]tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool.exe (spb16.3)"[iNSTALLDIR]tools\bin\clsbd.exe" = [iNSTALLDIR]tools\bin\clsbd.exe:*:Enabled:clsbd.exe (spb16.3)"[iNSTALLDIR]tools\bin\dregprint.exe" = [iNSTALLDIR]tools\bin\dregprint.exe:*:Enabled:dregprint.exe (spb16.3)"[iNSTALLDIR]tools\bin\nmp.exe" = [iNSTALLDIR]tools\bin\nmp.exe:*:Enabled:nmp.exe (spb16.3)"[iNSTALLDIR]tools\bin\nmppath.exe" = [iNSTALLDIR]tools\bin\nmppath.exe:*:Enabled:nmppath.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\java-rmi.exe" = [iNSTALLDIR]tools\jre\bin\java-rmi.exe:*:Enabled:java-rmi.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\java.exe" = [iNSTALLDIR]tools\jre\bin\java.exe:*:Enabled:java.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\javacpl.exe" = [iNSTALLDIR]tools\jre\bin\javacpl.exe:*:Enabled:javacpl.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\javaw.exe" = [iNSTALLDIR]tools\jre\bin\javaw.exe:*:Enabled:javaw.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\javaws.exe" = [iNSTALLDIR]tools\jre\bin\javaws.exe:*:Enabled:javaws.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\jucheck.exe" = [iNSTALLDIR]tools\jre\bin\jucheck.exe:*:Enabled:jucheck.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\jureg.exe" = [iNSTALLDIR]tools\jre\bin\jureg.exe:*:Enabled:jureg.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\jusched.exe" = [iNSTALLDIR]tools\jre\bin\jusched.exe:*:Enabled:jusched.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\keytool.exe" = [iNSTALLDIR]tools\jre\bin\keytool.exe:*:Enabled:keytool.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\kinit.exe" = [iNSTALLDIR]tools\jre\bin\kinit.exe:*:Enabled:kinit.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\klist.exe" = [iNSTALLDIR]tools\jre\bin\klist.exe:*:Enabled:klist.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\ktab.exe" = [iNSTALLDIR]tools\jre\bin\ktab.exe:*:Enabled:ktab.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\orbd.exe" = [iNSTALLDIR]tools\jre\bin\orbd.exe:*:Enabled:orbd.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\pack200.exe" = [iNSTALLDIR]tools\jre\bin\pack200.exe:*:Enabled:pack200.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\policytool.exe" = [iNSTALLDIR]tools\jre\bin\policytool.exe:*:Enabled:policytool.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\rmid.exe" = [iNSTALLDIR]tools\jre\bin\rmid.exe:*:Enabled:rmid.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\rmiregistry.exe" = [iNSTALLDIR]tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\servertool.exe" = [iNSTALLDIR]tools\jre\bin\servertool.exe:*:Enabled:servertool.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\ssvagent.exe" = [iNSTALLDIR]tools\jre\bin\ssvagent.exe:*:Enabled:ssvagent.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\tnameserv.exe" = [iNSTALLDIR]tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv.exe (spb16.3)"[iNSTALLDIR]tools\jre\bin\unpack200.exe" = [iNSTALLDIR]tools\jre\bin\unpack200.exe:*:Enabled:unpack200.exe (spb16.3)"[iNSTALLDIR]tools\tcltk\tcl\bin\tclsh80.exe" = [iNSTALLDIR]tools\tcltk\tcl\bin\tclsh80.exe:*:Enabled:tclsh80.exe (spb16.3)"[iNSTALLDIR]tools\tcltk\tcl\bin\wish80.exe" = [iNSTALLDIR]tools\tcltk\tcl\bin\wish80.exe:*:Enabled:wish80.exe (spb16.3)"[iNSTALLDIR]tools\bin\clu.exe" = [iNSTALLDIR]tools\bin\clu.exe:*:Enabled:clu.exe (spb16.3)"[iNSTALLDIR]tools\bin\van.exe" = [iNSTALLDIR]tools\bin\van.exe:*:Enabled:van.exe (spb16.3)"[iNSTALLDIR]tools\bin\cmfeedback.exe" = [iNSTALLDIR]tools\bin\cmfeedback.exe:*:Enabled:cmfeedback.exe (spb16.3)"[iNSTALLDIR]tools\bin\consmgr.exe" = [iNSTALLDIR]tools\bin\consmgr.exe:*:Enabled:consmgr.exe (spb16.3)"[iNSTALLDIR]tools\bin\emsChecker.exe" = [iNSTALLDIR]tools\bin\emsChecker.exe:*:Enabled:emsChecker.exe (spb16.3)"[iNSTALLDIR]tools\bin\emsMkError.exe" = [iNSTALLDIR]tools\bin\emsMkError.exe:*:Enabled:emsMkError.exe (spb16.3)"[iNSTALLDIR]tools\bin\msgHelp.exe" = [iNSTALLDIR]tools\bin\msgHelp.exe:*:Enabled:msgHelp.exe (spb16.3)"[iNSTALLDIR]tools\bin\eoa.exe" = [iNSTALLDIR]tools\bin\eoa.exe:*:Enabled:eoa.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsMsgServer.exe" = [iNSTALLDIR]tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsNameServer.exe" = [iNSTALLDIR]tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsRemote.exe" = [iNSTALLDIR]tools\bin\cdsRemote.exe:*:Enabled:cdsRemote.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsRemshClient.exe" = [iNSTALLDIR]tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsRunHidden.exe" = [iNSTALLDIR]tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsServIpc.exe" = [iNSTALLDIR]tools\bin\cdsServIpc.exe:*:Enabled:cdsServIpc.exe (spb16.3)"[iNSTALLDIR]tools\bin\cdsmps.exe" = [iNSTALLDIR]tools\bin\cdsmps.exe:*:Enabled:cdsmps.exe (spb16.3)"[iNSTALLDIR]tools\bin\mpsinfo.exe" = [iNSTALLDIR]tools\bin\mpsinfo.exe:*:Enabled:mpsinfo.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\def2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\def2oa.exe:*:Enabled:def2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\lef2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\lef2oa.exe:*:Enabled:lef2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2def.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2def.exe:*:Enabled:oa2def.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2lef.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2lef.exe:*:Enabled:oa2lef.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2spef.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2spef.exe:*:Enabled:oa2spef.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2strm.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2strm.exe:*:Enabled:oa2strm.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oa2verilog.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oa2verilog.exe:*:Enabled:oa2verilog.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oaDMTurboServer.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oaDMTurboServer.exe:*:Enabled:oaDMTurboServer.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oaFSLockD.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oaFSLockD.exe:*:Enabled:oaFSLockD.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\oaGetVersion.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\oaGetVersion.exe:*:Enabled:oaGetVersion.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\spef2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\spef2oa.exe:*:Enabled:spef2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\strm2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\strm2oa.exe:*:Enabled:strm2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\verilog2oa.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\verilog2oa.exe:*:Enabled:verilog2oa.exe (spb16.3)"[iNSTALLDIR]OpenAccess\bin\win32\opt\verilogAnnotate.exe" = [iNSTALLDIR]OpenAccess\bin\win32\opt\verilogAnnotate.exe:*:Enabled:verilogAnnotate.exe (spb16.3)"[iNSTALLDIR]tools\bin\PSpiceExplorerSrvr.exe" = [iNSTALLDIR]tools\bin\PSpiceExplorerSrvr.exe:*:Enabled:PSpiceExplorerSrvr.exe (spb16.3)"[iNSTALLDIR]tools\bin\regsvr32.exe" = [iNSTALLDIR]tools\bin\regsvr32.exe:*:Enabled:regsvr32.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\mkdefcfg.exe" = [iNSTALLDIR]tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\versiontool.exe" = [iNSTALLDIR]tools\fet\bin\versiontool.exe:*:Enabled:versiontool.exe (spb16.3)"[iNSTALLDIR]tools\capture\sch2cap.exe" = [iNSTALLDIR]tools\capture\sch2cap.exe:*:Enabled:sch2cap.exe (spb16.3)"[iNSTALLDIR]tools\dfII\bin\skill.exe" = [iNSTALLDIR]tools\dfII\bin\skill.exe:*:Enabled:skill.exe (spb16.3)"[iNSTALLDIR]tools\dfII\bin\skill_g.exe" = [iNSTALLDIR]tools\dfII\bin\skill_g.exe:*:Enabled:skill_g.exe (spb16.3)"[iNSTALLDIR]tools\pspice\pspiceaa.exe" = [iNSTALLDIR]tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa.exe (spb16.3)"[iNSTALLDIR]tools\pspice\Magneticdesigner.exe" = [iNSTALLDIR]tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner.exe (spb16.3)"[iNSTALLDIR]tools\pspice\ModelEd.exe" = [iNSTALLDIR]tools\pspice\ModelEd.exe:*:Enabled:ModelEd.exe (spb16.3)"[iNSTALLDIR]tools\pspice\IndiceFileGeneration.exe" = [iNSTALLDIR]tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration.exe (spb16.3)"[iNSTALLDIR]tools\pspice\MrkSrvr.exe" = [iNSTALLDIR]tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr.exe (spb16.3)"[iNSTALLDIR]tools\pspice\PSpiceEnc.exe" = [iNSTALLDIR]tools\pspice\PSpiceEnc.exe:*:Enabled:PSpiceEnc.exe (spb16.3)"[iNSTALLDIR]tools\pspice\SimSrvr.exe" = [iNSTALLDIR]tools\pspice\SimSrvr.exe:*:Enabled:SimSrvr.exe (spb16.3)"[iNSTALLDIR]tools\pspice\psp_cmd.exe" = [iNSTALLDIR]tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd.exe (spb16.3)"[iNSTALLDIR]tools\pspice\pspice.exe" = [iNSTALLDIR]tools\pspice\pspice.exe:*:Enabled:pspice.exe (spb16.3)"[iNSTALLDIR]tools\pspice\simmgr.exe" = [iNSTALLDIR]tools\pspice\simmgr.exe:*:Enabled:simmgr.exe (spb16.3)"[iNSTALLDIR]tools\pspice\stmed.exe" = [iNSTALLDIR]tools\pspice\stmed.exe:*:Enabled:stmed.exe (spb16.3)"[iNSTALLDIR]tools\fsp\bin\fsp.exe" = [iNSTALLDIR]tools\fsp\bin\fsp.exe:*:Enabled:fsp.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\QPSetEditor.exe" = [iNSTALLDIR]tools\fet\bin\QPSetEditor.exe:*:Enabled:QPSetEditor.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\UniversalBrowser.exe" = [iNSTALLDIR]tools\fet\bin\UniversalBrowser.exe:*:Enabled:UniversalBrowser.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\pcbCache.exe" = [iNSTALLDIR]tools\fet\bin\pcbCache.exe:*:Enabled:pcbCache.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\lrm.exe" = [iNSTALLDIR]tools\fet\bin\lrm.exe:*:Enabled:lrm.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\purge.exe" = [iNSTALLDIR]tools\fet\bin\purge.exe:*:Enabled:purge.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\rollback.exe" = [iNSTALLDIR]tools\fet\bin\rollback.exe:*:Enabled:rollback.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\a2dxf.exe" = [iNSTALLDIR]tools\pcb\bin\a2dxf.exe:*:Enabled:a2dxf.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dxf2a.exe" = [iNSTALLDIR]tools\pcb\bin\dxf2a.exe:*:Enabled:dxf2a.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\artwork.exe" = [iNSTALLDIR]tools\pcb\bin\artwork.exe:*:Enabled:artwork.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\allegro.exe" = [iNSTALLDIR]tools\pcb\bin\allegro.exe:*:Enabled:allegro.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\allegro_batch.exe" = [iNSTALLDIR]tools\pcb\bin\allegro_batch.exe:*:Enabled:allegro_batch.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\allegro_free_viewer.exe" = [iNSTALLDIR]tools\pcb\bin\allegro_free_viewer.exe:*:Enabled:allegro_free_viewer.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\db_change_type.exe" = [iNSTALLDIR]tools\pcb\bin\db_change_type.exe:*:Enabled:db_change_type.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dbdoctor.exe" = [iNSTALLDIR]tools\pcb\bin\dbdoctor.exe:*:Enabled:dbdoctor.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dbdoctor_ui.exe" = [iNSTALLDIR]tools\pcb\bin\dbdoctor_ui.exe:*:Enabled:dbdoctor_ui.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dbstat.exe" = [iNSTALLDIR]tools\pcb\bin\dbstat.exe:*:Enabled:dbstat.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dfa_dlg.exe" = [iNSTALLDIR]tools\pcb\bin\dfa_dlg.exe:*:Enabled:dfa_dlg.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dfa_update.exe" = [iNSTALLDIR]tools\pcb\bin\dfa_update.exe:*:Enabled:dfa_update.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\downrev_library.exe" = [iNSTALLDIR]tools\pcb\bin\downrev_library.exe:*:Enabled:downrev_library.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\enved.exe" = [iNSTALLDIR]tools\pcb\bin\enved.exe:*:Enabled:enved.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\flash_convert.exe" = [iNSTALLDIR]tools\pcb\bin\flash_convert.exe:*:Enabled:flash_convert.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\fpbrowse.exe" = [iNSTALLDIR]tools\pcb\bin\fpbrowse.exe:*:Enabled:fpbrowse.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\layer_compare.exe" = [iNSTALLDIR]tools\pcb\bin\layer_compare.exe:*:Enabled:layer_compare.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\qvupdate.exe" = [iNSTALLDIR]tools\pcb\bin\qvupdate.exe:*:Enabled:qvupdate.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sip_free_viewer.exe" = [iNSTALLDIR]tools\pcb\bin\sip_free_viewer.exe:*:Enabled:sip_free_viewer.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\systemdump.exe" = [iNSTALLDIR]tools\pcb\bin\systemdump.exe:*:Enabled:systemdump.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\uprev.exe" = [iNSTALLDIR]tools\pcb\bin\uprev.exe:*:Enabled:uprev.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\batch_drc.exe" = [iNSTALLDIR]tools\pcb\bin\batch_drc.exe:*:Enabled:batch_drc.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\bbvia.exe" = [iNSTALLDIR]tools\pcb\bin\bbvia.exe:*:Enabled:bbvia.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\convert_gerber.exe" = [iNSTALLDIR]tools\pcb\bin\convert_gerber.exe:*:Enabled:convert_gerber.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\create_devices.exe" = [iNSTALLDIR]tools\pcb\bin\create_devices.exe:*:Enabled:create_devices.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\create_sym.exe" = [iNSTALLDIR]tools\pcb\bin\create_sym.exe:*:Enabled:create_sym.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\draw_check.exe" = [iNSTALLDIR]tools\pcb\bin\draw_check.exe:*:Enabled:draw_check.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dump_libraries.exe" = [iNSTALLDIR]tools\pcb\bin\dump_libraries.exe:*:Enabled:dump_libraries.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\plctxt.exe" = [iNSTALLDIR]tools\pcb\bin\plctxt.exe:*:Enabled:plctxt.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\genfeedformat.exe" = [iNSTALLDIR]tools\pcb\bin\genfeedformat.exe:*:Enabled:genfeedformat.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\netrev.exe" = [iNSTALLDIR]tools\pcb\bin\netrev.exe:*:Enabled:netrev.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\idf_in.exe" = [iNSTALLDIR]tools\pcb\bin\idf_in.exe:*:Enabled:idf_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\idf_out.exe" = [iNSTALLDIR]tools\pcb\bin\idf_out.exe:*:Enabled:idf_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\idx_out.exe" = [iNSTALLDIR]tools\pcb\bin\idx_out.exe:*:Enabled:idx_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\iges_in.exe" = [iNSTALLDIR]tools\pcb\bin\iges_in.exe:*:Enabled:iges_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\iges_out.exe" = [iNSTALLDIR]tools\pcb\bin\iges_out.exe:*:Enabled:iges_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ipc356_out.exe" = [iNSTALLDIR]tools\pcb\bin\ipc356_out.exe:*:Enabled:ipc356_out.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\explot.exe" = [iNSTALLDIR]tools\pcb\bin\explot.exe:*:Enabled:explot.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\gbplot.exe" = [iNSTALLDIR]tools\pcb\bin\gbplot.exe:*:Enabled:gbplot.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\genrad.exe" = [iNSTALLDIR]tools\pcb\bin\genrad.exe:*:Enabled:genrad.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\gloss.exe" = [iNSTALLDIR]tools\pcb\bin\gloss.exe:*:Enabled:gloss.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ncroute.exe" = [iNSTALLDIR]tools\pcb\bin\ncroute.exe:*:Enabled:ncroute.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\nctape.exe" = [iNSTALLDIR]tools\pcb\bin\nctape.exe:*:Enabled:nctape.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\netin.exe" = [iNSTALLDIR]tools\pcb\bin\netin.exe:*:Enabled:netin.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pad_designer.exe" = [iNSTALLDIR]tools\pcb\bin\pad_designer.exe:*:Enabled:pad_designer.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\l2a.exe" = [iNSTALLDIR]tools\pcb\bin\l2a.exe:*:Enabled:l2a.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pads_in.exe" = [iNSTALLDIR]tools\pcb\bin\pads_in.exe:*:Enabled:pads_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pcad_in.exe" = [iNSTALLDIR]tools\pcb\bin\pcad_in.exe:*:Enabled:pcad_in.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\placement.exe" = [iNSTALLDIR]tools\pcb\bin\placement.exe:*:Enabled:placement.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\swap.exe" = [iNSTALLDIR]tools\pcb\bin\swap.exe:*:Enabled:swap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\downrev14.exe" = [iNSTALLDIR]tools\pcb\bin\downrev14.exe:*:Enabled:downrev14.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile13.exe" = [iNSTALLDIR]tools\pcb\bin\techfile13.exe:*:Enabled:techfile13.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile14.exe" = [iNSTALLDIR]tools\pcb\bin\techfile14.exe:*:Enabled:techfile14.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile15.exe" = [iNSTALLDIR]tools\pcb\bin\techfile15.exe:*:Enabled:techfile15.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor14.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor14.exe:*:Enabled:dbdoctor14.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor15.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbdoctor15.exe:*:Enabled:dbdoctor15.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbfix11.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbfix11.exe:*:Enabled:dbfix11.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbfix12.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbfix12.exe:*:Enabled:dbfix12.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\dbfix13.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\dbfix13.exe:*:Enabled:dbfix13.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\vc5\downrev15.exe" = [iNSTALLDIR]tools\pcb\bin\vc5\downrev15.exe:*:Enabled:downrev15.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spif.exe" = [iNSTALLDIR]tools\pcb\bin\spif.exe:*:Enabled:spif.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spif_batch.exe" = [iNSTALLDIR]tools\pcb\bin\spif_batch.exe:*:Enabled:spif_batch.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mbs2lib.exe" = [iNSTALLDIR]tools\pcb\bin\mbs2lib.exe:*:Enabled:mbs2lib.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\FSvia.exe" = [iNSTALLDIR]tools\pcb\bin\FSvia.exe:*:Enabled:FSvia.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\FSviaSolver.exe" = [iNSTALLDIR]tools\pcb\bin\FSviaSolver.exe:*:Enabled:FSviaSolver.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\bem2d.exe" = [iNSTALLDIR]tools\pcb\bin\bem2d.exe:*:Enabled:bem2d.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ems2d.exe" = [iNSTALLDIR]tools\pcb\bin\ems2d.exe:*:Enabled:ems2d.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\extracta.exe" = [iNSTALLDIR]tools\pcb\bin\extracta.exe:*:Enabled:extracta.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\fatten.exe" = [iNSTALLDIR]tools\pcb\bin\fatten.exe:*:Enabled:fatten.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\gate_assign.exe" = [iNSTALLDIR]tools\pcb\bin\gate_assign.exe:*:Enabled:gate_assign.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\il_allegro.exe" = [iNSTALLDIR]tools\pcb\bin\il_allegro.exe:*:Enabled:il_allegro.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\j2script.exe" = [iNSTALLDIR]tools\pcb\bin\j2script.exe:*:Enabled:j2script.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mcm_escapes.exe" = [iNSTALLDIR]tools\pcb\bin\mcm_escapes.exe:*:Enabled:mcm_escapes.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mpiexec.exe" = [iNSTALLDIR]tools\pcb\bin\mpiexec.exe:*:Enabled:mpiexec.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\parallel.exe" = [iNSTALLDIR]tools\pcb\bin\parallel.exe:*:Enabled:parallel.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pe_wordpad.exe" = [iNSTALLDIR]tools\pcb\bin\pe_wordpad.exe:*:Enabled:pe_wordpad.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\pre_check.exe" = [iNSTALLDIR]tools\pcb\bin\pre_check.exe:*:Enabled:pre_check.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\refresh_padstack.exe" = [iNSTALLDIR]tools\pcb\bin\refresh_padstack.exe:*:Enabled:refresh_padstack.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\refresh_symbol.exe" = [iNSTALLDIR]tools\pcb\bin\refresh_symbol.exe:*:Enabled:refresh_symbol.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\refresh_vs.exe" = [iNSTALLDIR]tools\pcb\bin\refresh_vs.exe:*:Enabled:refresh_vs.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\reftxt.exe" = [iNSTALLDIR]tools\pcb\bin\reftxt.exe:*:Enabled:reftxt.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\report.exe" = [iNSTALLDIR]tools\pcb\bin\report.exe:*:Enabled:report.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\smpd.exe" = [iNSTALLDIR]tools\pcb\bin\smpd.exe:*:Enabled:smpd.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\techfile.exe" = [iNSTALLDIR]tools\pcb\bin\techfile.exe:*:Enabled:techfile.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\wmpiconfig.exe" = [iNSTALLDIR]tools\pcb\bin\wmpiconfig.exe:*:Enabled:wmpiconfig.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\wmpiexec.exe" = [iNSTALLDIR]tools\pcb\bin\wmpiexec.exe:*:Enabled:wmpiexec.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\wmpiregister.exe" = [iNSTALLDIR]tools\pcb\bin\wmpiregister.exe:*:Enabled:wmpiregister.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\zrouter.exe" = [iNSTALLDIR]tools\pcb\bin\zrouter.exe:*:Enabled:zrouter.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\bodygen.exe" = [iNSTALLDIR]tools\fet\bin\bodygen.exe:*:Enabled:bodygen.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\newgenasym.exe" = [iNSTALLDIR]tools\fet\bin\newgenasym.exe:*:Enabled:newgenasym.exe (spb16.3)"[iNSTALLDIR]tools\msbase\vcredist_x86.exe" = [iNSTALLDIR]tools\msbase\vcredist_x86.exe:*:Enabled:vcredist_x86.exe (spb16.3)"[iNSTALLDIR]tools\perl5\bin\perl.exe" = [iNSTALLDIR]tools\perl5\bin\perl.exe:*:Enabled:perl.exe (spb16.3)"[iNSTALLDIR]tools\perl5\bin\perlglob.exe" = [iNSTALLDIR]tools\perl5\bin\perlglob.exe:*:Enabled:perlglob.exe (spb16.3)"[iNSTALLDIR]tools\perl5\ntt\cmd32.exe" = [iNSTALLDIR]tools\perl5\ntt\cmd32.exe:*:Enabled:cmd32.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\productServer.exe" = [iNSTALLDIR]tools\pcb\bin\productServer.exe:*:Enabled:productServer.exe (spb16.3)"[iNSTALLDIR]tools\bin\conceptNmpListCheck.exe" = [iNSTALLDIR]tools\bin\conceptNmpListCheck.exe:*:Enabled:conceptNmpListCheck.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\cpmaccess.exe" = [iNSTALLDIR]tools\fet\bin\cpmaccess.exe:*:Enabled:cpmaccess.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\libaccess.exe" = [iNSTALLDIR]tools\fet\bin\libaccess.exe:*:Enabled:libaccess.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\projmgr.exe" = [iNSTALLDIR]tools\fet\bin\projmgr.exe:*:Enabled:projmgr.exe (spb16.3)"[iNSTALLDIR]tools\fet\bin\pseteditor.exe" = [iNSTALLDIR]tools\fet\bin\pseteditor.exe:*:Enabled:pseteditor.exe (spb16.3)"[iNSTALLDIR]tools\specctra\bin\mbs2sp.exe" = [iNSTALLDIR]tools\specctra\bin\mbs2sp.exe:*:Enabled:mbs2sp.exe (spb16.3)"[iNSTALLDIR]tools\specctra\bin\sp2mbs.exe" = [iNSTALLDIR]tools\specctra\bin\sp2mbs.exe:*:Enabled:sp2mbs.exe (spb16.3)"[iNSTALLDIR]tools\specctra\bin\specctra.exe" = [iNSTALLDIR]tools\specctra\bin\specctra.exe:*:Enabled:specctra.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\signoise.exe" = [iNSTALLDIR]tools\pcb\bin\signoise.exe:*:Enabled:signoise.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\lis2buf.exe" = [iNSTALLDIR]tools\pcb\bin\lis2buf.exe:*:Enabled:lis2buf.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\modeleditor.exe" = [iNSTALLDIR]tools\pcb\bin\modeleditor.exe:*:Enabled:modeleditor.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\modelintegrity.exe" = [iNSTALLDIR]tools\pcb\bin\modelintegrity.exe:*:Enabled:modelintegrity.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\modelsim.exe" = [iNSTALLDIR]tools\pcb\bin\modelsim.exe:*:Enabled:modelsim.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spc2dml.exe" = [iNSTALLDIR]tools\pcb\bin\spc2dml.exe:*:Enabled:spc2dml.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sigxp.exe" = [iNSTALLDIR]tools\pcb\bin\sigxp.exe:*:Enabled:sigxp.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\aprepmap.exe" = [iNSTALLDIR]tools\pcb\bin\aprepmap.exe:*:Enabled:aprepmap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ashowmap.exe" = [iNSTALLDIR]tools\pcb\bin\ashowmap.exe:*:Enabled:ashowmap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\aconvmap.exe" = [iNSTALLDIR]tools\pcb\bin\aconvmap.exe:*:Enabled:aconvmap.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\brd2dml.exe" = [iNSTALLDIR]tools\pcb\bin\brd2dml.exe:*:Enabled:brd2dml.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dml2brd.exe" = [iNSTALLDIR]tools\pcb\bin\dml2brd.exe:*:Enabled:dml2brd.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dmlcheck.exe" = [iNSTALLDIR]tools\pcb\bin\dmlcheck.exe:*:Enabled:dmlcheck.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\dmlcrypt.exe" = [iNSTALLDIR]tools\pcb\bin\dmlcrypt.exe:*:Enabled:dmlcrypt.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ftsmerge.exe" = [iNSTALLDIR]tools\pcb\bin\ftsmerge.exe:*:Enabled:ftsmerge.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ibis2signoise.exe" = [iNSTALLDIR]tools\pcb\bin\ibis2signoise.exe:*:Enabled:ibis2signoise.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ibischk3.exe" = [iNSTALLDIR]tools\pcb\bin\ibischk3.exe:*:Enabled:ibischk3.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ibischk4.exe" = [iNSTALLDIR]tools\pcb\bin\ibischk4.exe:*:Enabled:ibischk4.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\icmchk.exe" = [iNSTALLDIR]tools\pcb\bin\icmchk.exe:*:Enabled:icmchk.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mergedml.exe" = [iNSTALLDIR]tools\pcb\bin\mergedml.exe:*:Enabled:mergedml.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\mkdeviceindex.exe" = [iNSTALLDIR]tools\pcb\bin\mkdeviceindex.exe:*:Enabled:mkdeviceindex.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\quad2signoise.exe" = [iNSTALLDIR]tools\pcb\bin\quad2signoise.exe:*:Enabled:quad2signoise.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sigwave.exe" = [iNSTALLDIR]tools\pcb\bin\sigwave.exe:*:Enabled:sigwave.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\sigxsect.exe" = [iNSTALLDIR]tools\pcb\bin\sigxsect.exe:*:Enabled:sigxsect.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\spc2spc.exe" = [iNSTALLDIR]tools\pcb\bin\spc2spc.exe:*:Enabled:spc2spc.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\tlsim.exe" = [iNSTALLDIR]tools\pcb\bin\tlsim.exe:*:Enabled:tlsim.exe (spb16.3)"[iNSTALLDIR]tools\pcb\bin\ts2dml.exe" = [iNSTALLDIR]tools\pcb\bin\ts2dml.exe:*:Enabled:ts2dml.exe (spb16.3)"C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe" = C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]"C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe" = C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)"C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe" = C:\Program Files (x86)\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)========== HKEY_LOCAL_MACHINE Uninstall List ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.0+ (r404)"{067A32A4-7E21-4BAA-95ED-9665BCE035F5}" = NI-RPC 4.1.1f0 for 64 Bit Windows"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)"{0B7AFE8D-1265-4025-AD23-3624CEAD4F3C}" = NI Xalan Delay Load 1.10.1 64-bit"{0CADBEE0-59CA-4382-9A67-BA5CB07B6EFC}" = NI Xerces Delay Load 2.7.1 64-bit"{104FB32A-7CE3-4C4B-B2AA-70C613FF9DFA}" = iTunes"{153DC15F-C59E-4603-BF81-00CEA1116DCA}" = NI LabVIEW Broker (64 bit)"{16EC1499-8B35-431A-B55D-3EE4558C1385}" = O&O UnErase"{174443DD-EF03-41F8-A66D-987EBBBC1517}" = NI System State Publisher (64-bit)"{21903252-3854-48D6-8F0C-F648CFA818C9}" = NI Help Assistant (64bit)"{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022"{41BF0DE4-5BAE-4B88-AFD3-86A30B222186}" = Bonjour"{4EBBC187-6988-4B10-A846-E1DBD2AD2B8D}" = NI Math Kernel Libraries (64-bit)"{62208237-D078-4D28-84FA-D1812FF6C940}" = NI Assistant Framework 64-bit"{639673E9-D53F-44F4-A046-485C8A6ADA16}" = Paint.NET v3.5.6"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.4.3"{79E44BF5-C355-4A5D-8F9F-25F53ACF794E}" = NI VC2008MSMs x64"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17"{8D273DE5-ABFA-4BD0-A9D7-EE9C971438C4}_is1" = PDF-Viewer"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010"{9328624D-0388-4F5B-98AB-9FBC5559F8E9}" = NI TDMS (64-bit)"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting"{999A9B8E-4E5C-4DF0-9E9C-FEC1E12190B4}" = NI MAX Support for 64 Bit Windows"{99FA9ED4-21E6-47E0-B986-F8D0998E453A}" = NI System API Windows 64-bit"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 260.89"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 260.89"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 260.89"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.10.0514"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.1.9.0"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053"{B7607FC8-72AD-486D-B6B7-A402D5876309}" = PerfectDisk 11 Professional"{B860298B-CE03-4DE2-B92E-422F2C20A2D8}_is1" = PDF-XChange Lite 4"{C5F268F1-0856-43E2-B6F1-2470EEE48D2A}" = ESET NOD32 Antivirus"{CA7DAF6F-D5F4-46FD-A824-7E0B472C3211}" = NI USI 1.7.0 64-Bit"{CCC79B52-19CF-4A50-BE60-AEE3DE96B3EA}" = NI Web Pipeline 2.0.1 64-bit support"{D0F9AD6F-2C2A-44A8-8961-F21B5356E050}" = NI Logos64 XT Support"{D4F0D273-9967-4BD8-B85F-FA03C2504475}" = NI DataSocket 4.7.0 (64-bit)"{D8C0E5E1-3B66-465D-8F9B-F591F5CDA726}" = NI Trace Engine (64-bit)"{DA7916C4-07D8-45D3-9EE7-BE24811554EB}" = NI-DAQmx - LabVIEW shared documentation for 64 Bit Windows 1.5.0"{E68686D1-A5BB-467A-8DE7-A01166722607}" = NI VC2005MSMs x64"{EC90795D-968C-4BCA-B958-27B111F3B3F6}" = NI Logos64 5.1"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile"{FB96D69B-1731-4312-8D92-5768478A0539}" = NI SSL Support (64-bit)"{FE096FC3-47A3-4555-AF67-1B49BF9DE0B3}" = NI Portable Configuration Help for 64 Bit Windows 4.6.0"{FF4E0155-F956-4895-9D0A-C3754456C1BE}" = NI MXS 4.6.0 for 64 Bit Windows"{FFFA9DD7-58D7-464B-BD5B-7224BFC4B039}" = NI Variable Engine (64-bit)"45A7283175C62FAC673F913C1F532C5361F97841" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (03/08/2007 2.2.1.0)"CCleaner" = CCleaner"C-Media PCI Audio Driver" = HT OMEGA STRIKER7.1"CPUID CPU-Z_is1" = CPUID CPU-Z 1.53"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile"NewsBin5" = NewsBin Pro"SP6" = Logitech SetPoint 6.15"WinRAR archiver" = WinRAR archiver[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam"{04B552B1-4EC5-4F1B-9F02-FD3DF5A71184}" = NI Assistant Framework"{04D66B46-4349-407C-9297-9B43648E4C84}" = NI LabVIEW Run-Time Engine Interop 2009"{05046BCC-5E64-4A85-8615-D84DE4C1D865}" = NI VC2005MSMs x86"{07A8ED9E-B98E-437F-B750-241B412BE924}" = Garmin USB Drivers"{07A99739-82EE-4537-AF2E-1607015D9992}" = NI Service Locator"{08133ED0-B6EB-49CD-B0EF-60502E41D15E}" = NI Xerces Delay Load 2.7.1"{094621AC-72E7-4167-8A06-CCDDBEBC233F}" = NI LabVIEW 2009 Help File"{0FB31DF8-38DF-4C9D-B313-AFAFC3FBA02B}" = NI LVBrokerAux 8.2.1"{0FD812C9-3BBE-4CC5-A43C-B7304E3EC581}" = NI Web Pipeline 2.0.1"{148E08FF-D7C4-46ED-8D4D-601C67FE0AFD}" = Rosetta Stone Version 3"{19C120B7-F7A6-4105-9D62-1F6305B2E2CF}" = NI DataSocket 4.7.0"{1B06E3AF-1CE2-4085-AE4E-DFEC369E86D3}" = NI Logos XT Support"{1D6F0B9D-F19E-43AB-9D8E-2E3653212C72}" = NI LabVIEW 2009 MeasAppChm File"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148"{1F85CAAA-B786-4E5B-AADD-638856992EF3}" = Opera 10.53"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool"{2108E50D-978D-4D62-A837-4F12A61ADF15}" = NI LabVIEW 2009 License"{229A26F7-81A9-4A17-9D00-6CF4D08CEA44}" = NI LabVIEW 2009 WWW"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT"{23940B09-32B3-4C36-88A9-E787862E2AE9}" = NI Variable Engine LabVIEW 2009 Support"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = Media Player Classic - Home Cinema v1.4.2499.0"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 22"{278AF4F9-DC1C-49DC-B871-C0BAEBD4F458}" = NI License Manager"{297FA251-FF30-4F16-978C-4A65EA804EFF}" = NI LabVIEW Real-Time Error Dialog"{2A98DB42-3743-4022-ADFA-42AE811484AE}" = NI EULA Depot"{2AD5E818-E2EE-4BBF-A2BF-29022C6FC236}" = NI Assistant Framework LabVIEW 2009 Support"{2BEB102E-F9CD-4881-984B-E288F66FD394}" = Quake Live Mozilla Plugin"{2D72E0EC-D695-4BFB-A246-F07BAAA91AA1}" = NI Remote Provider for MAX 4.6.0"{307300E8-6D0E-48AD-AC4B-D41A9549DEEB}" = NI LabVIEW 2009 Examples"{34EE2F0F-D6EA-4C36-8315-41107048D48D}" = NI-DAQmx - LabVIEW shared documentation"{35872655-EA55-4A90-8DAA-AD2B777B8CAC}" = NI LabVIEW 2009 Applibs"{383AD0A2-FD79-4CF0-B823-C695E32BD08D}" = NI LabVIEW Run-Time Engine Web Services"{38A0E959-7FC3-4583-8B2F-03A3E7A4A026}" = The iPod Application Installer II"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg"{3F188640-B4F5-44D5-BBF3-DAB70CF5629B}" = NI LabVIEW Compare Utility 9.0.0"{40D9D764-7FD7-4036-B565-6D94DEEBD4A5}" = NI LabVIEW Merge Utility 9.0.0"{4159DD60-49C1-4323-A1A5-FB060CBA35C5}" = NI Measurement Studio Recipe Processor"{416B50BB-64CE-46C5-81A6-7F842CC35CDC}" = NI LabVIEW MAX XML"{4186FEBC-F0CC-4185-A406-24292BC9877A}" = Nokia Software Updater"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant"{45A5461A-7D1D-4A91-B033-0B85E7AB25C2}" = NI MXS 4.6.0f0 for LabVIEW Real-Time"{45FA54F6-8574-49D2-9E2D-0BDDE6237822}" = NI LabVIEW Run-Time Engine 8.2.1"{47A0A80F-8DC0-43EB-B9B4-36FD86979DF7}" = Nokia Connectivity Cable Driver"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater"{4D581C40-11D0-476B-A943-76506924B722}" = NI Distributed System Manager 2009"{4E049CBB-01EE-4859-B4C8-26E42263CEE4}" = NI LabVIEW Run-Time Engine 2009"{50F9A1FC-39D8-46E8-8234-1A1A68A4033E}" = NI Variable Engine 2.3.0"{51E23D68-FE69-4728-A8EE-F12856B046C7}" = NI LabVIEW 2009 User.lib"{52C3DD72-17E5-4E0D-83A8-FB42FCE3A8EF}" = NI-RPC 4.1.1f0 for Phar Lap ETS"{57B77060-04B4-468E-89A9-F68EEE466F57}" = NI USI 1.7.0"{57F37CA1-6FA3-46D2-8F01-AD3A26FA4E9B}" = NI Assistant Framework LabVIEW Code Generator 2009"{596C11D1-2285-4057-99F6-735B50EB87E1}" = NI System API RT"{5A70FCD2-C019-4723-868F-07CD6C7755FF}" = NI Logos 5.1"{5E2E0DF8-75EC-47E2-9583-3229A4CF5C95}" = NI LabVIEW 2009 Project"{6447FE3A-8B2C-41DB-9791-322B8445B3E9}" = NI LabVIEW Deployable License 2009"{64D24684-9E7E-4876-B5E5-1E134996988D}" = Cadence SPB/OrCAD 16.3"{67ED38A3-4882-448B-B44D-3428AB00D7D5}" = Acronis True Image Home"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin"{6F7D11DC-DE87-45C8-A37E-A35B724FC771}" = NI Help Assistant"{71929EC1-FDB2-4A67-AAAD-936E4539FA84}_is1" = Driver Sweeper 2.1.0"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable"{74F5CBE0-D208-46E5-8593-C07D3FDF8454}" = NI LabVIEW 2009 CINtools"{7559B6F5-180B-479A-A8CD-2175EFBC61F8}" = NI LabVIEW 2009 Deployment Framework"{77B1B7C6-4C2F-4D0C-A807-F1A2910B7AC4}" = NI LabVIEW 2009 Resource"{79E9C7C5-4FCC-4DFF-B79E-17319E9522F3}" = MagicTunePremium"{7ACFB216-29F7-4331-A5ED-2563AEB51F21}" = NI Trace Engine"{7C62B54A-E524-4F3D-83E7-0F2ABAFC978A}" = NI Xalan Delay Load 1.10.1"{7E3668CB-1228-416E-B721-C2FA3247B985}" = NI LabVIEW Real-Time FIFO for Runtime"{7E7A035C-9DC5-40B0-B873-002B14CCE3B8}" = NI-RPC 4.1.1f0"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials"{81B2907E-0F93-4217-8840-A217EF59A244}" = PC Connectivity Solution"{82B8F87D-C75E-4270-B030-49ECDAFF1B53}" = NI MAX Remote Configuration Installer 4.6"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable"{88D1DA3C-09FA-4CA7-BB6B-2CEACCFA95D5}" = NI System State Publisher"{89A7BD8C-0FC3-49EF-9072-5C8371C0A4D6}" = NI LabVIEW Web Services Runtime"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight"{8A5D448D-FBA1-40B6-9131-03659BC83319}" = NI LabVIEW 2009 Menus"{8AF869D1-F416-4855-8177-EB75D73CC992}" = NI LabVIEW 2009 Web Server"{8F54D841-4334-49BC-AAB0-6DC4586CE812}" = Passware Kit Forensic 10.1"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010"{9033A0BF-9B8A-4C27-812B-40BA10855E2D}" = NI LabVIEW 2009 Simulation"{91FD3E1D-FE00-4ECB-8379-204704812A9D}" = Crystal10"{92769F9C-453B-40C9-B129-6E8E52586C8E}" = NI LabVIEW Broker"{927C1DDA-61DC-4B95-A138-8A1377E33A9A}" = NI Portable Configuration 4.6.0"{93B8921B-2AC6-4A58-A87C-19B633DB6860}" = NI Software Provider for MAX 4.6.0"{96094CE5-7920-47FD-8A02-68A7B5B1785F}" = NI System API Windows 32-bit"{96E3AED5-3D0B-4BB0-84C2-1EDADB204487}" = FlashFXP v4.0"{9862682B-2CDB-4D67-9D8B-EC3CDA85F1CB}" = NI LabVIEW 2009 VI.lib"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17"{9B79CE5E-ECAA-4D23-9924-0BF5A3F440F0}" = NI LabVIEW 2009 gMath"{9F7DBC83-611C-4407-8817-8FD63E149288}" = NI SSL LabVIEW 2009 Support"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable"{A4E71872-9E83-483C-8AE0-184B943C7EE5}" = Brother HL-2170W"{A5CBD7C5-CF16-443F-A4F2-3503C9DE311B}" = ACDSee Photo Manager 12"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger"{A96395DA-AFC5-459E-A374-CE10E84FEEB2}" = NI TDM Excel Add-In 2.1"{ABD79E99-F9E3-413B-8D18-11070754355F}" = NI Math Kernel Libraries"{AE9AA575-DE74-4711-B3B3-2977D76CC1BB}" = NI TDMS"{AF32BE73-E284-444E-B310-7EE80192949B}" = NI LabWindows/CVI DLL Builder for LabVIEW"{AFEDF70D-8DC3-40CB-93A0-F276E64BDF9C}" = NI VC2008MSMs x86"{B3C9A441-C34D-40F3-9D3B-00EDDDAC74F1}" = Garmin Communicator Plugin"{B4B6D62D-9BDF-48A6-AE95-E4F730369D26}" = NI Logos LabVIEW 2009 Support"{B5BD3DA8-1A63-4042-90FA-B26C361382C9}" = NI Remote PXI Provider for MAX 4.6.0"{B5F47039-9B19-4AC3-9A4A-E1CA3068E59F}" = ArcSoft TotalMedia Theatre 3"{B8E65E0D-30D8-49BD-B92C-0E77A09545D6}" = NI MAX LabVIEW Support 4.6.0"{B963C648-249B-4145-BC14-56488262E9A9}" = NI MDF Support"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX"{BA0C85C1-E5CC-4F58-84FB-8DA29F3412F0}" = NI Uninstaller"{BB4B8FCF-44B4-4957-B92F-5F5A631AF629}" = CADopia IntelliCAD 4"{BC724C7B-48C3-46B8-B6A2-F4296953B3FD}" = Cadence License Manager 10.80"{C25215FC-5900-48B0-B93C-8D3379027312}" = PASW Statistics 18"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update"{C484CC8D-03CF-4022-89C4-DB4F02E8A15B}" = Crystal Reports 2008 Runtime"{C57A08DC-0D4B-41E1-82A3-6290292E5B87}" = NI LabVIEW 2009 Instr.lib"{C6BF965C-5A8C-498E-A6AD-B594D583F7B3}" = NI LabVIEW 2009"{CEDA69AF-DD7A-42A8-B6D3-65BA0592D34E}" = NI Instrument IO Assistant for LabVIEW 9.0 32"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype Link to post Share on other sites More sharing options...
Elise Posted November 29, 2010 ID:352741 Share Posted November 29, 2010 Hi again, lets run the following instead of Rootkit Unhooker.Please download MBRCheck.exe by a_d_13 from one of the links provided below and save it to your desktop.Link 1Link 2Link 3Double-click on MBRCheck.exe to run it. Vista/Windows 7 users right-click and select Run As Administrator.It will open a black screen with some data on it...please do not fix anything (if it gives you an option).When complete, you should see Done! Press ENTER to exit.... Press Enter on the keyboard.A log named MBRCheck_date_time.txt (i.e. MBRCheck_07.21.10_10.22.51.txt) will be created on the desktop.Copy and paste the contents of that log in your next reply. Link to post Share on other sites More sharing options...
skookum Posted November 30, 2010 Author ID:353833 Share Posted November 30, 2010 MBRCheck, version 1.2.3© 2010, ADCommand-line: Windows Version: Windows 7 Ultimate EditionWindows Information: (build 7600), 64-bitBase Board Manufacturer: Gigabyte Technology Co., Ltd.BIOS Manufacturer: Award Software International, Inc.System Manufacturer: Gigabyte Technology Co., Ltd.System Product Name: EP45-UD3PLogical Drives Mask: 0x008003fcKernel Drivers (total 171): 0x02C63000 \SystemRoot\system32\ntoskrnl.exe 0x02C1A000 \SystemRoot\system32\hal.dll 0x00BB2000 \SystemRoot\system32\kdcom.dll 0x00CE8000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x00D2C000 \SystemRoot\system32\PSHED.dll 0x00D40000 \SystemRoot\system32\CLFS.SYS 0x00C00000 \SystemRoot\system32\CI.dll 0x00E66000 \SystemRoot\system32\drivers\Wdf01000.sys 0x00F0A000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x010CD000 \SystemRoot\System32\Drivers\spgu.sys 0x011F3000 \SystemRoot\System32\Drivers\WMILIB.SYS 0x01000000 \SystemRoot\System32\Drivers\SCSIPORT.SYS 0x0102F000 \SystemRoot\system32\DRIVERS\ACPI.sys 0x01086000 \SystemRoot\system32\DRIVERS\msisadrv.sys 0x01090000 \SystemRoot\system32\DRIVERS\vdrvroot.sys 0x00F19000 \SystemRoot\system32\DRIVERS\pci.sys 0x0109D000 \SystemRoot\System32\drivers\partmgr.sys 0x010B2000 \SystemRoot\system32\DRIVERS\volmgr.sys 0x00F4C000 \SystemRoot\System32\drivers\volmgrx.sys 0x00FA8000 \SystemRoot\system32\DRIVERS\pciide.sys 0x00FAF000 \SystemRoot\system32\DRIVERS\PCIIDEX.SYS 0x00FBF000 \SystemRoot\System32\drivers\mountmgr.sys 0x00FD9000 \SystemRoot\system32\DRIVERS\atapi.sys 0x00E00000 \SystemRoot\system32\DRIVERS\ataport.SYS 0x00E2A000 \SystemRoot\system32\DRIVERS\msahci.sys 0x00E35000 \SystemRoot\system32\DRIVERS\jraid.sys 0x00E50000 \SystemRoot\system32\DRIVERS\amdxata.sys 0x00D9E000 \SystemRoot\system32\drivers\fltmgr.sys 0x00FE2000 \SystemRoot\system32\drivers\fileinfo.sys 0x0120D000 \SystemRoot\System32\Drivers\Ntfs.sys 0x014ED000 \SystemRoot\System32\Drivers\msrpc.sys 0x0154B000 \SystemRoot\System32\Drivers\ksecdd.sys 0x01565000 \SystemRoot\System32\Drivers\cng.sys 0x015D8000 \SystemRoot\System32\drivers\pcw.sys 0x015E9000 \SystemRoot\System32\Drivers\Fs_Rec.sys 0x0162B000 \SystemRoot\system32\drivers\ndis.sys 0x0171D000 \SystemRoot\system32\drivers\NETIO.SYS 0x0177D000 \SystemRoot\System32\Drivers\ksecpkg.sys 0x01802000 \SystemRoot\System32\drivers\tcpip.sys 0x017A8000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x01400000 \SystemRoot\system32\DRIVERS\timntr.sys 0x01600000 \SystemRoot\system32\DRIVERS\vmstorfl.sys 0x013B0000 \SystemRoot\system32\DRIVERS\volsnap.sys 0x01A41000 \SystemRoot\system32\DRIVERS\tdrpm258.sys 0x01BAD000 \SystemRoot\System32\Drivers\spldr.sys 0x01BB5000 \SystemRoot\system32\DRIVERS\snapman.sys 0x01A00000 \SystemRoot\System32\drivers\rdyboost.sys 0x01610000 \SystemRoot\System32\Drivers\mup.sys 0x01BF5000 \SystemRoot\System32\drivers\hwpolicy.sys 0x01CD5000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x01D0F000 \SystemRoot\system32\DRIVERS\disk.sys 0x01D25000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS 0x01D8D000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x01DB7000 \SystemRoot\System32\Drivers\Null.SYS 0x01DC0000 \SystemRoot\System32\Drivers\Beep.SYS 0x01DC7000 \SystemRoot\system32\DRIVERS\ehdrv.sys 0x01DEC000 \SystemRoot\system32\drivers\MTiCtwl.sys 0x01C00000 \SystemRoot\System32\drivers\vga.sys 0x01C0E000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x01C33000 \SystemRoot\System32\drivers\watchdog.sys 0x01C43000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x01C4C000 \SystemRoot\system32\drivers\rdpencdd.sys 0x01C55000 \SystemRoot\system32\drivers\rdprefmp.sys 0x01C5E000 \SystemRoot\System32\Drivers\Msfs.SYS 0x01C69000 \SystemRoot\System32\Drivers\Npfs.SYS 0x01C7A000 \SystemRoot\system32\DRIVERS\tdx.sys 0x01C98000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x03EE9000 \SystemRoot\system32\drivers\afd.sys 0x03F73000 \SystemRoot\System32\DRIVERS\netbt.sys 0x03FB8000 \SystemRoot\system32\DRIVERS\wfplwf.sys 0x03FC1000 \SystemRoot\system32\DRIVERS\pacer.sys 0x03FE7000 \SystemRoot\system32\DRIVERS\netbios.sys 0x03E00000 \SystemRoot\system32\DRIVERS\serial.sys 0x03E1D000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x03E38000 \SystemRoot\system32\DRIVERS\termdd.sys 0x03E4C000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x03E9D000 \SystemRoot\system32\drivers\nsiproxy.sys 0x03EA9000 \SystemRoot\system32\ckldrv.sys 0x03EB4000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x03EBF000 \SystemRoot\System32\Drivers\ElbyCDIO.sys 0x03ECA000 \SystemRoot\System32\drivers\discache.sys 0x04030000 \SystemRoot\system32\drivers\csc.sys 0x040B3000 \SystemRoot\System32\Drivers\dfsc.sys 0x040D1000 \SystemRoot\system32\DRIVERS\blbdrive.sys 0x040E2000 \SystemRoot\system32\drivers\archlp.sys 0x04109000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x0412F000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x04C25000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys 0x057F7000 \SystemRoot\system32\DRIVERS\nvBridge.kmd 0x042AF000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x043A3000 \SystemRoot\System32\drivers\dxgmms1.sys 0x04200000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x04224000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x04231000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x04287000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x04145000 \SystemRoot\system32\DRIVERS\Rt64win7.sys 0x0440C000 \SystemRoot\system32\drivers\cmudax3.sys 0x04572000 \SystemRoot\system32\drivers\portcls.sys 0x045AF000 \SystemRoot\system32\drivers\drmk.sys 0x04184000 \SystemRoot\system32\drivers\ks.sys 0x045D1000 \SystemRoot\system32\drivers\ksthunk.sys 0x04634000 \SystemRoot\system32\DRIVERS\1394ohci.sys 0x04672000 \SystemRoot\system32\DRIVERS\serenum.sys 0x0467E000 \SystemRoot\system32\DRIVERS\parport.sys 0x0469B000 \SystemRoot\System32\Drivers\AnyDVD.sys 0x046BD000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x046CA000 \SystemRoot\system32\DRIVERS\CompositeBus.sys 0x046DA000 \SystemRoot\system32\DRIVERS\AgileVpn.sys 0x046F0000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x04714000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x04720000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x0474F000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x0476A000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x0478B000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x047A5000 \SystemRoot\System32\Drivers\pcouffin.sys 0x047BA000 \SystemRoot\system32\DRIVERS\rdpbus.sys 0x047C5000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x047D4000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x047E3000 \SystemRoot\system32\DRIVERS\VClone.sys 0x047F2000 \SystemRoot\system32\DRIVERS\swenum.sys 0x04600000 \SystemRoot\system32\DRIVERS\umbus.sys 0x05C0E000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x05C68000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x05C7D000 \SystemRoot\system32\drivers\nvhda64v.sys 0x05CA6000 \SystemRoot\System32\Drivers\crashdmp.sys 0x05CB4000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x05CC0000 \SystemRoot\System32\Drivers\dump_msahci.sys 0x05CCB000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0x05CDE000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x05CFB000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x05CFD000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x05D0B000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x05D24000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x05D2D000 \SystemRoot\system32\DRIVERS\LHidFilt.Sys 0x05D42000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x05D4F000 \SystemRoot\system32\DRIVERS\LMouFilt.Sys 0x05D63000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x05D7E000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x05D8C000 \SystemRoot\system32\drivers\usbaudio.sys 0x000F0000 \SystemRoot\System32\win32k.sys 0x05DA7000 \SystemRoot\System32\drivers\Dxapi.sys 0x05DB3000 \SystemRoot\system32\DRIVERS\monitor.sys 0x005A0000 \SystemRoot\System32\TSDDD.dll 0x00650000 \SystemRoot\System32\cdd.dll 0x05DC1000 \SystemRoot\system32\drivers\luafv.sys 0x05807000 \SystemRoot\system32\DRIVERS\eamonm.sys 0x058DE000 \SystemRoot\system32\drivers\WudfPf.sys 0x058FF000 \SystemRoot\System32\Drivers\DefragFS.SYS 0x05924000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x05939000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x0766D000 \SystemRoot\system32\drivers\HTTP.sys 0x07735000 \SystemRoot\system32\DRIVERS\bowser.sys 0x07753000 \SystemRoot\System32\drivers\mpsdrv.sys 0x0776B000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x07798000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x07600000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x07623000 \??\C:\Windows\system32\drivers\cpuz132_x64.sys 0x0762B000 \SystemRoot\system32\DRIVERS\epfwwfpr.sys 0x05951000 \SystemRoot\system32\drivers\peauth.sys 0x0764C000 \??\C:\Windows\system32\drivers\regi.sys 0x07654000 \SystemRoot\System32\Drivers\secdrv.SYS 0x041C7000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x077E6000 \SystemRoot\System32\drivers\tcpipreg.sys 0x077F8000 \??\C:\Users\Chris\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries24.gadget\WinRing0x64.sys 0x07A22000 \SystemRoot\System32\DRIVERS\srv2.sys 0x07A89000 \SystemRoot\System32\DRIVERS\srv.sys 0x07B1F000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0x07B50000 \SystemRoot\system32\DRIVERS\asyncmac.sys 0x76F20000 \Windows\System32\ntdll.dll 0x48510000 \Windows\System32\smss.exe 0xFF240000 \Windows\System32\apisetschema.dllProcesses (total 48): 0 System Idle Process 4 System 436 C:\Windows\System32\smss.exe 904 csrss.exe 968 C:\Windows\System32\wininit.exe 976 csrss.exe 108 C:\Windows\System32\services.exe 408 C:\Windows\System32\lsass.exe 548 C:\Windows\System32\lsm.exe 672 C:\Windows\System32\winlogon.exe 892 C:\Windows\System32\svchost.exe 1056 C:\Windows\System32\svchost.exe 1132 C:\Windows\System32\svchost.exe 1208 C:\Windows\System32\svchost.exe 1260 C:\Windows\System32\svchost.exe 1424 C:\Windows\System32\svchost.exe 1628 C:\Windows\System32\svchost.exe 1748 C:\Windows\System32\spoolsv.exe 1820 C:\Windows\System32\svchost.exe 1944 C:\Program Files (x86)\Bonjour\mDNSResponder.exe 2016 C:\Windows\System32\Crypserv.exe 1080 C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe 1568 C:\Windows\System32\svchost.exe 1784 C:\Windows\System32\svchost.exe 2468 WUDFHost.exe 2496 C:\Windows\System32\svchost.exe 2628 C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 3036 C:\Windows\System32\taskhost.exe 620 C:\Windows\System32\dwm.exe 2672 C:\Windows\explorer.exe 2776 C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 232 C:\Windows\SysWOW64\rundll32.exe 1052 C:\Program Files\Logitech\SetPointP\SetPoint.exe 852 C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe 2004 C:\Users\Chris\AppData\Local\Apps\F.lux\flux.exe 2168 C:\Program Files\Windows Sidebar\sidebar.exe 1764 C:\Program Files (x86)\foobar2000\foobar2000.exe 3316 C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe 3328 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 3568 C:\Windows\System32\SearchIndexer.exe 3628 C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe 2508 C:\Windows\System32\svchost.exe 2112 C:\Windows\System32\SearchProtocolHost.exe 4600 C:\Windows\System32\SearchFilterHost.exe 4800 C:\Windows\System32\audiodg.exe 1556 C:\Users\Chris\Desktop\MBRCheck.exe 1532 C:\Windows\System32\conhost.exe 2940 C:\Windows\System32\dllhost.exe\\.\C: --> \\.\PhysicalDrive1 at offset 0x00000000`00100000 (NTFS)\\.\X: --> \\.\PhysicalDrive0 at offset 0x00000000`007e0000 (NTFS)PhysicalDrive1 Model Number: WDCWD6401AALS-00L3B2, Rev: 01.03B01PhysicalDrive0 Model Number: SAMSUNGHD103SJ, Rev: 1AJ10001 Size Device Name MBR Status -------------------------------------------- 596 GB \\.\PhysicalDrive1 MBR Code Faked! SHA1: 1BB72AA843C54C64E74C9F6C9BD22FA2AFA08966 931 GB \\.\PhysicalDrive0 Unknown MBR code SHA1: 639AC5CDF8A5CF3245975932C6A4215450A7B98FFound non-standard or infected MBR.Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done! Link to post Share on other sites More sharing options...
Elise Posted November 30, 2010 ID:353840 Share Posted November 30, 2010 Hi again,Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply. Link to post Share on other sites More sharing options...
skookum Posted December 3, 2010 Author ID:355642 Share Posted December 3, 2010 2010/12/03 07:01:12.0722 TDSS rootkit removing tool 2.4.10.1 Dec 2 2010 12:28:012010/12/03 07:01:12.0722 ================================================================================2010/12/03 07:01:12.0722 SystemInfo:2010/12/03 07:01:12.0722 2010/12/03 07:01:12.0722 OS Version: 6.1.7600 ServicePack: 0.02010/12/03 07:01:12.0722 Product type: Workstation2010/12/03 07:01:12.0722 ComputerName: ROOK2010/12/03 07:01:12.0722 UserName: Chris2010/12/03 07:01:12.0722 Windows directory: C:\Windows2010/12/03 07:01:12.0722 System windows directory: C:\Windows2010/12/03 07:01:12.0722 Running under WOW642010/12/03 07:01:12.0722 Processor architecture: Intel x642010/12/03 07:01:12.0722 Number of processors: 22010/12/03 07:01:12.0722 Page size: 0x10002010/12/03 07:01:12.0722 Boot type: Normal boot2010/12/03 07:01:12.0722 ================================================================================2010/12/03 07:01:12.0723 Utility is running under WOW642010/12/03 07:01:12.0988 Initialize success2010/12/03 07:01:17.0717 ================================================================================2010/12/03 07:01:17.0717 Scan started2010/12/03 07:01:17.0717 Mode: Manual; 2010/12/03 07:01:17.0717 ================================================================================2010/12/03 07:01:19.0611 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys2010/12/03 07:01:19.0630 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys2010/12/03 07:01:19.0651 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys2010/12/03 07:01:19.0698 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys2010/12/03 07:01:19.0722 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys2010/12/03 07:01:19.0748 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys2010/12/03 07:01:19.0776 afcdp (3f5fdc12ffa4794fc3a178a26d48e7cf) C:\Windows\system32\DRIVERS\afcdp.sys2010/12/03 07:01:19.0806 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys2010/12/03 07:01:19.0830 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys2010/12/03 07:01:19.0843 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys2010/12/03 07:01:19.0858 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys2010/12/03 07:01:19.0870 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys2010/12/03 07:01:19.0881 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys2010/12/03 07:01:19.0903 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys2010/12/03 07:01:19.0926 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys2010/12/03 07:01:19.0938 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys2010/12/03 07:01:19.0977 AnyDVD (454b3cb335089b674917247ca67d5bb0) C:\Windows\system32\Drivers\AnyDVD.sys2010/12/03 07:01:19.0988 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys2010/12/03 07:01:20.0027 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys2010/12/03 07:01:20.0066 archlp (f97c3aaf0699e0b85df1a02de8aae333) C:\Windows\system32\drivers\archlp.sys2010/12/03 07:01:20.0082 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys2010/12/03 07:01:20.0126 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys2010/12/03 07:01:20.0137 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys2010/12/03 07:01:20.0167 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys2010/12/03 07:01:20.0202 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys2010/12/03 07:01:20.0225 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys2010/12/03 07:01:20.0258 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys2010/12/03 07:01:20.0273 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys2010/12/03 07:01:20.0283 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys2010/12/03 07:01:20.0295 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys2010/12/03 07:01:20.0310 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys2010/12/03 07:01:20.0322 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys2010/12/03 07:01:20.0335 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys2010/12/03 07:01:20.0346 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys2010/12/03 07:01:20.0358 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys2010/12/03 07:01:20.0393 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys2010/12/03 07:01:20.0416 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys2010/12/03 07:01:20.0437 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys2010/12/03 07:01:20.0468 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys2010/12/03 07:01:20.0508 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys2010/12/03 07:01:20.0547 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys2010/12/03 07:01:20.0593 cmuda3 (2835bf2a864cde9184c80cf4e6a485f9) C:\Windows\system32\drivers\cmudax3.sys2010/12/03 07:01:20.0650 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys2010/12/03 07:01:20.0673 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys2010/12/03 07:01:20.0695 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys2010/12/03 07:01:20.0790 cpuz132 (c9c25778efe890baa4087e32937016a0) C:\Windows\system32\drivers\cpuz132_x64.sys2010/12/03 07:01:20.0800 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys2010/12/03 07:01:20.0841 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys2010/12/03 07:01:20.0903 DefragFS (cec7f24e28b40829c0fd2d523e72b5d3) C:\Windows\system32\drivers\DefragFS.sys2010/12/03 07:01:20.0921 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys2010/12/03 07:01:20.0957 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys2010/12/03 07:01:20.0970 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys2010/12/03 07:01:21.0011 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys2010/12/03 07:01:21.0041 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys2010/12/03 07:01:21.0090 eamonm (398fdc5694f2ba9e51e321ca40d1706e) C:\Windows\system32\DRIVERS\eamonm.sys2010/12/03 07:01:21.0156 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys2010/12/03 07:01:21.0228 ehdrv (e99457900012b53b2226f146ecaf9136) C:\Windows\system32\DRIVERS\ehdrv.sys2010/12/03 07:01:21.0277 ElbyCDIO (a14d6e3ef78f6d6ac42f98d633f2400a) C:\Windows\system32\Drivers\ElbyCDIO.sys2010/12/03 07:01:21.0300 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys2010/12/03 07:01:21.0346 ENTECH64 (12c061d9f9621be916d58191872ec281) C:\Windows\system32\DRIVERS\ENTECH64.sys2010/12/03 07:01:21.0368 epfwwfpr (a2af094dcbe8bff7e898d327750506a0) C:\Windows\system32\DRIVERS\epfwwfpr.sys2010/12/03 07:01:21.0406 epmntdrv (9eafb3b3b60b8ad958985152a9309aca) C:\Windows\system32\epmntdrv.sys2010/12/03 07:01:21.0426 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys2010/12/03 07:01:21.0456 EuGdiDrv (fb949ed2c93c878a189039f3d7730942) C:\Windows\system32\EuGdiDrv.sys2010/12/03 07:01:21.0473 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys2010/12/03 07:01:21.0495 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys2010/12/03 07:01:21.0518 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys2010/12/03 07:01:21.0540 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys2010/12/03 07:01:21.0560 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys2010/12/03 07:01:21.0576 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys2010/12/03 07:01:21.0598 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys2010/12/03 07:01:21.0626 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys2010/12/03 07:01:21.0642 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys2010/12/03 07:01:21.0670 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys2010/12/03 07:01:21.0692 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys2010/12/03 07:01:21.0737 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys2010/12/03 07:01:21.0758 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys2010/12/03 07:01:21.0792 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys2010/12/03 07:01:21.0816 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys2010/12/03 07:01:21.0826 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys2010/12/03 07:01:21.0837 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys2010/12/03 07:01:21.0848 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys2010/12/03 07:01:21.0873 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys2010/12/03 07:01:21.0907 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys2010/12/03 07:01:21.0936 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys2010/12/03 07:01:21.0952 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys2010/12/03 07:01:21.0976 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys2010/12/03 07:01:21.0996 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys2010/12/03 07:01:22.0022 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys2010/12/03 07:01:22.0045 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys2010/12/03 07:01:22.0058 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys2010/12/03 07:01:22.0077 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys2010/12/03 07:01:22.0091 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys2010/12/03 07:01:22.0106 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys2010/12/03 07:01:22.0126 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys2010/12/03 07:01:22.0142 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys2010/12/03 07:01:22.0162 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys2010/12/03 07:01:22.0192 JRAID (3ce8227864a5c4574f5fd99658d69885) C:\Windows\system32\DRIVERS\jraid.sys2010/12/03 07:01:22.0208 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys2010/12/03 07:01:22.0227 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys2010/12/03 07:01:22.0260 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys2010/12/03 07:01:22.0288 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys2010/12/03 07:01:22.0305 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys2010/12/03 07:01:22.0333 L8042Kbd (f33c5d79d3273530e1892a0922283a7b) C:\Windows\system32\DRIVERS\L8042Kbd.sys2010/12/03 07:01:22.0385 LHidFilt (0a7d6ed578d85f0c35353424ee3f5245) C:\Windows\system32\DRIVERS\LHidFilt.Sys2010/12/03 07:01:22.0431 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys2010/12/03 07:01:22.0451 LMouFilt (6542e2e6db58118fbb1b82a68ce3aff9) C:\Windows\system32\DRIVERS\LMouFilt.Sys2010/12/03 07:01:22.0477 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys2010/12/03 07:01:22.0497 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys2010/12/03 07:01:22.0513 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys2010/12/03 07:01:22.0540 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys2010/12/03 07:01:22.0557 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys2010/12/03 07:01:22.0662 MagicTune (b3b7c5f26f3f8c7992350b7ede64f5c9) C:\Windows\system32\drivers\MTiCtwl.sys2010/12/03 07:01:22.0820 MBAMProtector (e330051cce41eb4522e5dcebc15adcea) C:\Windows\system32\drivers\mbam.sys2010/12/03 07:01:22.0842 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys2010/12/03 07:01:22.0862 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys2010/12/03 07:01:22.0906 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys2010/12/03 07:01:22.0927 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys2010/12/03 07:01:22.0957 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys2010/12/03 07:01:22.0985 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys2010/12/03 07:01:23.0001 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys2010/12/03 07:01:23.0021 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys2010/12/03 07:01:23.0042 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys2010/12/03 07:01:23.0066 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys2010/12/03 07:01:23.0093 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys2010/12/03 07:01:23.0115 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys2010/12/03 07:01:23.0132 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys2010/12/03 07:01:23.0147 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys2010/12/03 07:01:23.0170 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys2010/12/03 07:01:23.0191 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys2010/12/03 07:01:23.0216 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys2010/12/03 07:01:23.0226 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys2010/12/03 07:01:23.0261 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys2010/12/03 07:01:23.0280 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys2010/12/03 07:01:23.0297 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys2010/12/03 07:01:23.0311 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys2010/12/03 07:01:23.0335 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys2010/12/03 07:01:23.0356 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys2010/12/03 07:01:23.0377 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys2010/12/03 07:01:23.0393 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys2010/12/03 07:01:23.0433 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys2010/12/03 07:01:23.0475 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys2010/12/03 07:01:23.0502 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys2010/12/03 07:01:23.0525 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys2010/12/03 07:01:23.0545 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys2010/12/03 07:01:23.0568 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys2010/12/03 07:01:23.0590 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys2010/12/03 07:01:23.0610 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys2010/12/03 07:01:23.0632 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys2010/12/03 07:01:23.0688 NetworkX (2263727032e9b19231a706046b8c82d3) C:\Windows\system32\ckldrv.sys2010/12/03 07:01:23.0715 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys2010/12/03 07:01:23.0765 nmwcdcx64 (2c761cc067acf0fb4ea13930b09bfeea) C:\Windows\system32\drivers\ccdcmbox64.sys2010/12/03 07:01:23.0801 nmwcdnsucx64 (ce90d1dd60db810a45e13fccea47e890) C:\Windows\system32\drivers\nmwcdnsucx64.sys2010/12/03 07:01:23.0826 nmwcdnsux64 (f5a8219ea8a6b67280308fae169b65c0) C:\Windows\system32\drivers\nmwcdnsux64.sys2010/12/03 07:01:23.0853 nmwcdx64 (63051819d5cac0fa49c425fc5e1a2b5c) C:\Windows\system32\drivers\ccdcmbx64.sys2010/12/03 07:01:23.0886 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys2010/12/03 07:01:23.0908 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys2010/12/03 07:01:23.0945 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys2010/12/03 07:01:23.0967 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys2010/12/03 07:01:24.0013 NVHDA (ed9380f201c8126425c09bed96dbe1e5) C:\Windows\system32\drivers\nvhda64v.sys2010/12/03 07:01:24.0196 nvlddmkm (f9efa2f16c2e2ce32918957b45037e01) C:\Windows\system32\DRIVERS\nvlddmkm.sys2010/12/03 07:01:24.0376 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys2010/12/03 07:01:24.0421 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys2010/12/03 07:01:24.0440 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys2010/12/03 07:01:24.0468 pccsmcfd (bc0018c2d29f655188a0ed3fa94fdb24) C:\Windows\system32\DRIVERS\pccsmcfdx64.sys2010/12/03 07:01:24.0481 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys2010/12/03 07:01:24.0493 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys2010/12/03 07:01:24.0515 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys2010/12/03 07:01:24.0551 pcouffin (af7ce12c4f3dc8cb2b07685c916bbcfe) C:\Windows\system32\Drivers\pcouffin.sys2010/12/03 07:01:24.0568 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys2010/12/03 07:01:24.0613 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys2010/12/03 07:01:24.0678 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys2010/12/03 07:01:24.0691 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys2010/12/03 07:01:24.0718 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys2010/12/03 07:01:24.0751 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys2010/12/03 07:01:24.0780 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys2010/12/03 07:01:24.0805 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys2010/12/03 07:01:24.0823 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys2010/12/03 07:01:24.0853 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys2010/12/03 07:01:24.0875 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys2010/12/03 07:01:24.0900 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys2010/12/03 07:01:24.0921 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys2010/12/03 07:01:24.0940 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys2010/12/03 07:01:24.0957 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys2010/12/03 07:01:24.0973 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys2010/12/03 07:01:24.0990 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys2010/12/03 07:01:25.0011 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys2010/12/03 07:01:25.0035 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys2010/12/03 07:01:25.0056 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys2010/12/03 07:01:25.0081 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys2010/12/03 07:01:25.0133 regi (4d9afddda0efe97cdbfd3b5fa48b05f6) C:\Windows\system32\drivers\regi.sys2010/12/03 07:01:25.0173 Revoflt (9c3ac71a9934b884fac567a8807e9c4d) C:\Windows\system32\DRIVERS\revoflt.sys2010/12/03 07:01:25.0201 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys2010/12/03 07:01:25.0235 RTL8167 (3b01789ee4eaee97f5eb46b711387d5e) C:\Windows\system32\DRIVERS\Rt64win7.sys2010/12/03 07:01:25.0257 RTL8169 (faeeed5a8949e6ba611a7b738ad28cee) C:\Windows\system32\DRIVERS\Rtlh64.sys2010/12/03 07:01:25.0273 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys2010/12/03 07:01:25.0300 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys2010/12/03 07:01:25.0320 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys2010/12/03 07:01:25.0345 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys2010/12/03 07:01:25.0368 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys2010/12/03 07:01:25.0383 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys2010/12/03 07:01:25.0411 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys2010/12/03 07:01:25.0453 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys2010/12/03 07:01:25.0468 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys2010/12/03 07:01:25.0483 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys2010/12/03 07:01:25.0495 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys2010/12/03 07:01:25.0543 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys2010/12/03 07:01:25.0558 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys2010/12/03 07:01:25.0577 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys2010/12/03 07:01:25.0607 snapman (27ba49f89468fddae6c2b311c53bce3a) C:\Windows\system32\DRIVERS\snapman.sys2010/12/03 07:01:25.0632 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys2010/12/03 07:01:25.0678 sptd (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys2010/12/03 07:01:25.0678 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb2010/12/03 07:01:25.0682 sptd - detected Locked file (1)2010/12/03 07:01:25.0720 srv (de6f5658da951c4bc8e498570b5b0d5f) C:\Windows\system32\DRIVERS\srv.sys2010/12/03 07:01:25.0746 srv2 (4d33d59c0b930c523d29f9bd40cda9d2) C:\Windows\system32\DRIVERS\srv2.sys2010/12/03 07:01:25.0772 srvnet (5a663fd67049267bc5c3f3279e631ffb) C:\Windows\system32\DRIVERS\srvnet.sys2010/12/03 07:01:25.0815 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys2010/12/03 07:01:25.0845 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys2010/12/03 07:01:25.0867 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys2010/12/03 07:01:25.0883 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys2010/12/03 07:01:25.0946 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys2010/12/03 07:01:25.0990 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys2010/12/03 07:01:26.0017 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys2010/12/03 07:01:26.0035 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys2010/12/03 07:01:26.0073 tdrpman258 (bf7ac81df6fbe09438d9dc7188178ea9) C:\Windows\system32\DRIVERS\tdrpm258.sys2010/12/03 07:01:26.0095 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys2010/12/03 07:01:26.0113 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys2010/12/03 07:01:26.0142 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys2010/12/03 07:01:26.0181 timounter (2c1caf5563548a15515eab07d2a069c6) C:\Windows\system32\DRIVERS\timntr.sys2010/12/03 07:01:26.0215 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys2010/12/03 07:01:26.0242 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys2010/12/03 07:01:26.0253 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys2010/12/03 07:01:26.0278 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys2010/12/03 07:01:26.0315 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys2010/12/03 07:01:26.0330 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys2010/12/03 07:01:26.0341 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys2010/12/03 07:01:26.0391 upperdev (bcd611d240604ceee7f90805361fab50) C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys2010/12/03 07:01:26.0412 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys2010/12/03 07:01:26.0435 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys2010/12/03 07:01:26.0447 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys2010/12/03 07:01:26.0466 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys2010/12/03 07:01:26.0483 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys2010/12/03 07:01:26.0502 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys2010/12/03 07:01:26.0512 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys2010/12/03 07:01:26.0542 usbser (0f0c72a657c622286013788b886968ad) C:\Windows\system32\drivers\usbser.sys2010/12/03 07:01:26.0566 UsbserFilt (d91be2644b18b4e3c69982fe0e1e97d6) C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys2010/12/03 07:01:26.0582 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS2010/12/03 07:01:26.0601 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys2010/12/03 07:01:26.0635 VClone (84bb306b7863883018d7f3eb0c453bd5) C:\Windows\system32\DRIVERS\VClone.sys2010/12/03 07:01:26.0653 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys2010/12/03 07:01:26.0667 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys2010/12/03 07:01:26.0683 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys2010/12/03 07:01:26.0696 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys2010/12/03 07:01:26.0715 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys2010/12/03 07:01:26.0731 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys2010/12/03 07:01:26.0743 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys2010/12/03 07:01:26.0756 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys2010/12/03 07:01:26.0781 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys2010/12/03 07:01:26.0806 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys2010/12/03 07:01:26.0836 vpcbus (abd9b4a7e2d0ae51a3b8df1af3152d61) C:\Windows\system32\DRIVERS\vpchbus.sys2010/12/03 07:01:26.0858 vpcusb (31924e31bc315773e6d149b157db46d5) C:\Windows\system32\DRIVERS\vpcusb.sys2010/12/03 07:01:26.0886 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys2010/12/03 07:01:26.0911 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys2010/12/03 07:01:26.0926 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys2010/12/03 07:01:26.0947 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys2010/12/03 07:01:26.0955 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys2010/12/03 07:01:26.0983 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys2010/12/03 07:01:27.0017 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys2010/12/03 07:01:27.0061 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys2010/12/03 07:01:27.0083 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys2010/12/03 07:01:27.0195 WinRing0_1_2_0 (0c0195c48b6b8582fa6f6373032118da) C:\Users\Chris\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries24.gadget\WinRing0x64.sys2010/12/03 07:01:27.0226 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys2010/12/03 07:01:27.0242 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys2010/12/03 07:01:27.0270 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys2010/12/03 07:01:27.0318 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys2010/12/03 07:01:27.0346 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys2010/12/03 07:01:27.0391 \HardDisk1 - detected Rootkit.Win32.TDSS.tdl4 (0)2010/12/03 07:01:27.0402 ================================================================================2010/12/03 07:01:27.0402 Scan finished2010/12/03 07:01:27.0402 ================================================================================2010/12/03 07:01:27.0408 Detected object count: 22010/12/03 07:01:36.0782 Locked file(sptd) - User select action: Skip 2010/12/03 07:01:36.0814 \HardDisk1 - will be cured after reboot2010/12/03 07:01:36.0814 Rootkit.Win32.TDSS.tdl4(\HardDisk1) - User select action: Cure 2010/12/03 07:01:42.0455 Deinitialize success Link to post Share on other sites More sharing options...
Elise Posted December 3, 2010 ID:355643 Share Posted December 3, 2010 That was a naty rootkit, but apparently not on your active drive. How are things running now? Link to post Share on other sites More sharing options...
skookum Posted December 5, 2010 Author ID:356635 Share Posted December 5, 2010 That was a naty rootkit, but apparently not on your active drive. How are things running now?Seems like everything is working normally now, thank you for the help! Link to post Share on other sites More sharing options...
Elise Posted December 5, 2010 ID:356638 Share Posted December 5, 2010 I'm glad to hear that. P2P WARNING-------------------Going over your logs I noticed that you have uTorrent installed.[*] Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs. [*]They are a security risk which can make your computer susceptible to a sm Link to post Share on other sites More sharing options...
skookum Posted December 5, 2010 Author ID:356640 Share Posted December 5, 2010 Malwarebytes' Anti-Malware 1.50www.malwarebytes.orgDatabase version: 5248Windows 6.1.7600Internet Explorer 8.0.7600.1638512/5/2010 8:14:59 AMmbam-log-2010-12-05 (08-14-59).txtScan type: Quick scanObjects scanned: 164160Time elapsed: 1 minute(s), 17 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 3Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 63Files Infected: 574Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{52794457-AF6C-4C50-9DEF-F2E24F4C8889} (PUP.WhiteSmoke) -> Quarantined and deleted successfully.HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{52794457-AF6C-4C50-9DEF-F2E24F4C8889} (PUP.WhiteSmoke) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52794457-AF6C-4C50-9DEF-F2E24F4C8889} (PUP.WhiteSmoke) -> Quarantined and deleted successfully.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:c:\program files (x86)\whitesmoketoolbar (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\modules (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\newtab (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\newtab\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\scripts (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\scripts (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\scripts (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\scripts (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\dynamicelements (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\rss (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\search (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\weather (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dtxwizard (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dtxwizard\skin (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dtxwizard\skin\icon_library (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dtxwizard\skin\icon_library\Basics (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\scripts (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\icons (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\options (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\searchbar (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\components (PUP.WhiteSmoke) -> Quarantined and deleted successfully.Files Infected:c:\program files (x86)\whitesmoketoolbar\manifest.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\toolbar.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\uninstall.exe (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\whitesmoketoolbar.dll (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\neterror.xhtml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\preferences.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\toolbar.htm (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\toolbar.xul (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\vmncode.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\vmnrsswin.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\about.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\dtxpanel.xul (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\dtxpanelwin.xul (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\dtxprefwin.xul (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\dtxwin.xul (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\emailnotifierproviders.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\external.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\neterror.xhtml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\rsspreview.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\rsswin.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\rsswin.xsl (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\vmncode.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\lib\wmpstreamer.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\modules\datastore.jsm (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\newtab\newtab.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\newtab\images\btn_search.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\newtab\images\bullet.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\newtab\images\field_bg.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\newtab\images\powered_by_yahoo.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\tb_icon.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\widget.jsw (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\widget.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\widget_version.txt (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\main.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\css\dialog.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\bg.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\btn-wide-close-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\btn-wide-close.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\default.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\transparent.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\win-btm-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\win-btm-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\win-btm-right-resize.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\images\win-btm-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.facebook\skin\scripts\defscript.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\tb_icon.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\Thumbs.db (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\widget.jsw (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\widget.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\widget_version.txt (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\css\twitter.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\btn-login-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\btn-login.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\btn-submit.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\loginbg.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\refresh-over.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\refresh.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrollbottom-disable.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrollbottom-down.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrollbottom-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrollbottom.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrolltop-disable.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrolltop-down.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrolltop-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\scrolltop.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\tab-off-l.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\tab-off-r.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\tab-on-l.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\tab-on-r.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\throbber.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\Thumbs.db (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\twitter-logo48.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\images\twitter_top.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\js\jquery.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\js\scripts.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\main.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\css\dialog.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\bg.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\btn-wide-close-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\btn-wide-close.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\default.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\transparent.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\win-btm-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\win-btm-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\win-btm-right-resize.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\images\win-btm-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.twitter\skin\scripts\defscript.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\tb_icon.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\widget.jsw (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\widget.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\widget_version.txt (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\main.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\css\dialog.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\bg.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\btn-search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\btn-wide-close-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\btn-wide-close.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\default.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\Thumbs.db (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\transparent.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\win-btm-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\win-btm-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\win-btm-right-resize.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\images\win-btm-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.webtv\skin\scripts\defscript.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\index.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\tb_icon.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\widget.jsw (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\widget.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\widget_version.txt (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\css\dialog.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\arrow-grey.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\arrows_grey-left.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\arrows_grey-right.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\btn-search-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\btn-search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\powered-by-youtube.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\scrollb-disable.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\scrollb-down.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\scrollb.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\scrollt-disable.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\scrollt-down.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\scrollt.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-off-l.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-off-r.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-on-l.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-on-r.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-over-l.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-over-r.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-red-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-red-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-red-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-white-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-white-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\tab-white-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\throbber.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\Thumbs.db (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\vid-bg.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\images\youtube.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\js\jquery-1.3.2.min.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\js\jquery.autocomplete.min.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\main.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\css\dialog.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\bg.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\btn-search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\btn-wide-close-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\btn-wide-close.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\default.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\Thumbs.db (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\transparent.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\win-btm-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\win-btm-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\win-btm-right-resize.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\images\win-btm-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\content\widgets\net.vmn.www.youtube\skin\scripts\defscript.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\dynamicelements\vmntoolbar.xsl (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\rss\rss.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\search\engines.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\search\search.xsl (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\data\weather\icons.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\634017460871087500_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\about.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\babylon_logo.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\bing_16x16.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\bing_searchicon_20x22_spaced_hover_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\bing_searchicon_20x22_spaced_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\blank_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\bluelite.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\bluesky.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\btn-search-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\btn-search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\btn-settings-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\btn-settings.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\btn-widgets-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\btn-widgets.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\btn_settings.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\ca.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\checkmytext_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\checkmytext_png_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dictionary.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dictionary_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dictionary_png_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\divider.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\downloadcom.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dtxlogo.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\email.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\email_on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\eteacher_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\facebook.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\feed_icon2_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\feed_icon_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\france_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\games.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\gamesicon_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\games_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred0.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred0_5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred1.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred1_5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred2.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred2_5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred3.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred3_5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred4.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred4_5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphred5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\graphredna.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\grey.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\ico-shield.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\images.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\italy_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lichen.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\logo-about.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\logo-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\logo-separator.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\logo.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\mail.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\menuseparatorback.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\modify-save.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\modify.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\modifyhot.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\music.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\namespacetoolbar.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\networkicons_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\news.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\orange.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\pixsy.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\protect-id.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\relatedlinks.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-collapse.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-delete.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-expand.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-feed.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-folder-remove.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-folder-rename.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-folder.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-found.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-reload.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss-subscribe.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rssback.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rsstopback.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\rss_feed_icon_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\search-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\settings.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\shopping.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\siteinfo.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\skin-bluelite.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\skin-bluesky.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\skin-grey.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\skin-lichen.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\skin-orange.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\skin-yellow.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\skin.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\spain_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\technorati.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\throbber.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\toolbarsplitter.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\translate.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\translate_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\translate_png_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\truste_about.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\tvicons_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\tvicon_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\tv_icon3_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\usa_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\vmn.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\vmn.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\web.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\whtsmke_logo_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\whtsmke_logo_png2_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\whtsmke_logo_png3_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\whtsmke_logo_png4_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\whtsmke_logo_png5_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\whtsmke_logo_png_png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\wikipedia.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\yahoosearch.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\yellow.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\youtube.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\zoom.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\dtxwizard\skin\icon_library\Basics\folder.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\add.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\aol.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\arrow-dn.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\arrow-right-disabled.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\arrow-right.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\arrow-up.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btn-divider.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btn-end.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btn-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btn-mdl_ff.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btn-start.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btnover-divider.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btnover-end.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btnover-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btnover-mdl_ff.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\bg-btnover-start.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\blank.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btn-widgets-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btn-widgets.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btnback-down-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btnback-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btnleft-down-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btnleft-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btnright-down-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btnright-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\btn_slider.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\button-splitter-down-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\button-splitter-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\checkmark.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\chevron.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\collapse.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\comcast.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\dtx.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\edit-back-hot.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\edit-back.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\expand.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\found.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\gmail.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\highlight.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\highlight_blue.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\highlight_cyan.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\highlight_lime.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\highlight_magenta.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\highlight_yellow.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\hotmail.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\ico-check.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\imap.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\lastsearch-thumb-back.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\loadingmid.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\lock.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\logo-separator.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\mailcom.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menuitem-splitter.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menuitemback-down-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menuitemback-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menuitemleft-down-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menuitemleft-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menuitemright-down-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menuitemright-vista.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menu_bg-basic.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menu_separator_bar.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\menu_separator_white.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\modify.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\move.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\movetarget.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\pop.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\reload.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\remove.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\rename.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\resize-box.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\rss.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\rsschannelback.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\RSSLogo.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\rsstabdivider.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\scroll-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\scroll-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\search-go.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\text-ellipsis.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\throbber.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\toolbarsplitter.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\transparent_1px.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\yahoo.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\footer.htm (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\gamecategory.xsl (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\gameData.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\gameList.xsl (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\games.xsl (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\gametype.xsl (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\inithtml.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\popupgames.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\popuphtml.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\popuprss.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\popupwidgets.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\scroll.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\css\panels.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\css\popupabout.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\css\popupgames.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\css\popupRSS.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\css\popupwidgets.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\main.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\css\dialog.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\bg.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\btn-search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\btn-wide-close.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\default.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\tab-off-l.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\tab-off-r.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\tab-on-l.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\tab-on-r.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\transparent.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\ttlbar-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\ttlbar-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\win-btm-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\win-btm-mdl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\win-btm-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\win-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\images\win-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\default\scripts\defscript.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\arrow-dn.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\arrow-sml-drop.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\arrow-sml.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\arrow-up.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\arrowr-bluew5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\bg-aboutbox.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\bg-btnover.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\bg-pnl520x390.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-back.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-close-grey.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-close-greyover.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-drag.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-moredetails.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-next-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-next.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-previous-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-previous.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\bullet-orange.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\gamethumb-on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\gamethumb2-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\ico-calendar.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\ico-download.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\ico-joystick24.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\ico-news24.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\ico-play.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\ico-tags.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\icon-Add.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\icon-download.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\icon-info.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\icon-play.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\icon-shop.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\menul-bgon.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\menul-bgover.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\panel-botm-noscroll.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scroll-bg-206.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scroll-bg.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scroll-topwin.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollb-disable.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollb-down.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollb-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollb.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollt-disable.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollt-down.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollt-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\scrollt.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\star_x_grey.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\star_x_orange.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\truste_about.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\view-detailed-on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\view-detailed-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\view-thumb-on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\view-thumb-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\widgets-square-16px.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\widgets-square-24px.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\panels\images\widgets.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\managerpanel.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\volumeslider.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\css\manager.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\css\slider.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\bg-pnl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\btn-close-grey.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\btn-close-greyover.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\collapsed_button.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\expanded_button.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\ico-playstation-down.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\ico-playstation-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\ico-playstation.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\ico-radio.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\music-note.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-btn-pause-on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-btn-pause.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-btn-play-on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-btn-play.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-eq-bg.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-eq-buffer.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-eq-busy.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-eq-off.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-eq-on.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-eq-warning.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-options-design-on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-options-design.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-options-on.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-options.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-volume-0.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-volume-1.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-volume-2.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-volume-3.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\radio-volume-mute.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\scrollbar-handle.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\scrollbar-track.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\slider.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\slideron.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\radio\images\track.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_02.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_03.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_04.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_06.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_07.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_08.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_09.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_10.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_11.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_12.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_13.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_14.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_15.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_16.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_18.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_19.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_20.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\border_21.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\btn-close-grey.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\btn-close-greyover.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\close-hot.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\close-normal.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\loadingmid.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\proxy.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\template.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\template.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\templateff.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\uwa\throbber.gif (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\icons\cond999.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\icons\icons.xml (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\icons\na-s.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\icons\na-t.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\icons\na.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\icons\weather.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\popupweather.css (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\popupweather.html (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\add.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\box-check.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\options\options-main.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\options\options-search.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\options\options-weather.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\options\options-widgets.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\searchbar\searchbar-background-left.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\searchbar\searchbar-background-middle.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\chrome\skin\searchbar\searchbar-background-right.png (PUP.WhiteSmoke) -> Quarantined and deleted successfully.c:\program files (x86)\whitesmoketoolbar\components\windowmediator.js (PUP.WhiteSmoke) -> Quarantined and deleted successfully. Link to post Share on other sites More sharing options...
skookum Posted December 5, 2010 Author ID:356643 Share Posted December 5, 2010 This white smoke thing must be something new, MBAM wasn't catching it until I updated to 1.50..My browser seems snappier now Link to post Share on other sites More sharing options...
Elise Posted December 5, 2010 ID:356647 Share Posted December 5, 2010 Please run a new quick scan to verify everything is gone now. Link to post Share on other sites More sharing options...
skookum Posted December 5, 2010 Author ID:356648 Share Posted December 5, 2010 Please run a new quick scan to verify everything is gone now.All clear!Malwarebytes' Anti-Malware 1.50www.malwarebytes.orgDatabase version: 5248Windows 6.1.7600Internet Explorer 8.0.7600.1638512/5/2010 8:34:14 AMmbam-log-2010-12-05 (08-34-14).txtScan type: Quick scanObjects scanned: 164191Time elapsed: 1 minute(s), 12 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
skookum Posted December 5, 2010 Author ID:356649 Share Posted December 5, 2010 Thank you for the help Link to post Share on other sites More sharing options...
Elise Posted December 5, 2010 ID:356657 Share Posted December 5, 2010 That looks better! Lets do one last scan for leftovers.ESET ONLINE SCANNER----------------------------I'd like us to scan your machine with ESET OnlineScanHold down Control and click on the following link to open ESET OnlineScan in a new window.ESET OnlineScanClick the button.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)Click on to download the ESET Smart Installer. Save it to your desktop.Double click on the icon on your desktop.Check Click the button.Accept any security warnings from your browser.Check Push the Start button.ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.When the scan completes, push Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.Note - when ESET doesn't find any threats, no report will be created.Push the button.Push Link to post Share on other sites More sharing options...
LDTate Posted December 30, 2010 ID:367679 Share Posted December 30, 2010 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts