Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hit With Google Redirect


  • This topic is locked This topic is locked
41 replies to this topic

#1 CrisGer

CrisGer

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 12:20 PM

Hi there,
Got hit by Google ReDirect, i can type in an address and get there but any attempt to use a link redirects to generic shopping pages. will post logs and stand by for help when you all have time thanks.

DDS Log:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_31
Run by Chris at 11:12:17 on 2012-05-05
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2559.1898 [GMT -6:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Skype\Phone\Skype.exe
svchost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wuauclt.exe
\\.\globalroot\SystemRoot\system32\svchost.exe -k netsvcs
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {6E45F3E8-2683-4824-A6BE-08108022FB36} - {23249465-AA46-4DED-BD4B-8EFB20F968FE} - c:\program files\donottrackplus\ScriptHost.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
LSP: mswsock.dll
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} - hxxp://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
TCP: Interfaces\{2C0B2D02-DF33-4C85-BBA5-9640083FBAB3} : DhcpNameServer = 192.168.1.1 192.168.1.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\chris\application data\mozilla\firefox\profiles\z4bp4e8o.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npdeployJava1.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npWebLaunch.dll
.
---- FIREFOX POLICIES ----
FF - user.js: signed.applets.codebase_principal_support - true
/* To avoid the user interaction, add the following lines: */
FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.id - hxxp://yael.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.id - hxxp://localhost/
/* GLDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.id - hxxp://gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.id - hxxp://www.gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.id - hxxp://glde-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.id - hxxps://gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.id - hxxps://www.gamesflatrate.de/
/* BGFR */
FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.id - hxxp://linternaute.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.id - hxxps://linternaute.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.id - hxxp://bgfr-int.metaboli.fr/
/* BILD */
FF - user.js: capability.principal.codebase.YummyPlayer_BILD.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BILD.id - hxxp://bild.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.id - hxxps://bild.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.id - hxxp://bild-int.metaboli.fr/
/* BTUK */
FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.id - hxxp://btvision.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.id - hxxps://btvision.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.id - hxxp://bt-int.metaboli.fr/
/* CLIC */
FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.id - hxxp://clubic.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.id - hxxps://clubic.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.id - hxxp://clic-int.metaboli.fr/
/* COUK */
FF - user.js: capability.principal.codebase.YummyPlayer_COUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_COUK.id - hxxp://metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.id - hxxp://www.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.id - hxxps://www.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.id - hxxps://metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.id - hxxp://uk-int.metaboli.fr/
/* MEDE */
FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.id - hxxp://metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.id - hxxp://www.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.id - hxxps://metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.id - hxxp://de-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.id - hxxps://www.metaboli.de/
/* CUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.id - hxxp://custompc.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.id - hxxps://custompc.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.id - hxxp://cuuk-int.metaboli.fr/
/* EUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.id - hxxp://eurogamer.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.id - hxxps://eurogamer.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.id - hxxp://euuk-int.metaboli.fr/
/* FUNR */
FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.id - hxxp://fun.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.id - hxxps://fun.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.id - hxxp://fun-int.metaboli.fr/
/* GONE */
FF - user.js: capability.principal.codebase.YummyPlayer_GONE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GONE.id - hxxp://gameone.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.id - hxxps://gameone.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.id - hxxp://gone-int.metaboli.fr/
/* GUDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.id - hxxp://gamerunlimited.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.id - hxxps://gamerunlimited.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.id - hxxp://gude-int.metaboli.fr/
/* META */
FF - user.js: capability.principal.codebase.YummyPlayer_META.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_META.id - hxxp://metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.id - hxxp://www.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.id - hxxps://metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.id - hxxps://www.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.id - hxxp://fr-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.id - hxxp://www.preprod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.id - hxxp://www.preprod.metaboli.fr/
/* MNDE */
FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.id - hxxp://livegames.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.id - hxxps://livegames.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.id - hxxp://msde-int.metaboli.fr/
/* MNFR */
FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.id - hxxp://livegames.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.id - hxxps://livegames.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.id - hxxp://msfr-int.metaboli.fr/
/* MNUK */
FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.id - hxxp://livegames.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.id - hxxps://livegames.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.id - hxxp://msuk-int.metaboli.fr/
/* NCNU */
FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.id - hxxp://numericable.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.id - hxxps://numericable.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.id - hxxp://ncnu-int.metaboli.fr/
/* QPUK */
FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.id - hxxp://quintplay.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.id - hxxps://quintplay.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.id - hxxp://qpuk-int.metaboli.fr/
/* SFFR */
FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.id - hxxp://jeux-pc.sfr.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.id - hxxps://jeux-pc.sfr.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.id - hxxp://sfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.id - hxxps://sfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.id - hxxp://sfr-int.metaboli.fr/
/* SPDE */
FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.id - hxxp://spieletipps.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.id - hxxps://spieletipps.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.id - hxxp://spde-int.metaboli.fr/
/* WOJ_ */
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.id - hxxp://woj-prod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.id - hxxps://woj-prod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.id - hxxp://woj-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.id - hxxps://woj-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.id - hxxp://woj-pp.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.id - hxxps://woj-pp.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.id - hxxp://woj-int.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.id - hxxps://woj-int.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.id - hxxp://preprod-god.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.id - hxxps://preprod-god.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.id - hxxp://prod.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.id - hxxps://prod.jeu.orange.fr/
user_pref(capability.principal.codebase.YummyPlayer_XX0001.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0001.id,hxxp://www.neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0002.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0002.id,hxxps://www.neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0003.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0003.id,hxxp://neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0004.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0004.id,hxxp://ad.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0005.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0005.id,hxxps://ad.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0006.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0006.id,hxxp://ads.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0007.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0007.id,hxxps://ads.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0008.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0008.id,hxxp://ads.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0009.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0009.id,hxxps://ads.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0010.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0010.id,hxxp://ads.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0011.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0011.id,hxxps://ads.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0012.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0012.id,hxxp://ag.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0013.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0013.id,hxxps://ag.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0014.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0014.id,hxxp://alice.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0015.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0015.id,hxxps://alice.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0016.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0016.id,hxxp://allocine.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0017.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0017.id,hxxps://allocine.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0018.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0018.id,hxxp://am.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0019.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0019.id,hxxps://am.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0020.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0020.id,hxxp://aol.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0021.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0021.id,hxxps://aol.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0022.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0022.id,hxxp://bc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0023.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0023.id,hxxps://bc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0024.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0024.id,hxxp://linternaute.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0025.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0025.id,hxxps://linternaute.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0026.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0026.id,hxxp://bild.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0027.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0027.id,hxxps://bild.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0028.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0028.id,hxxp://btvision.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0029.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0029.id,hxxps://btvision.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0030.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0030.id,hxxp://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0031.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0031.id,hxxp://cg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0032.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0032.id,hxxps://cg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0033.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0033.id,hxxp://cibleclick.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0034.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0034.id,hxxps://cibleclick.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0035.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0035.id,hxxp://cegetel.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0036.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0036.id,hxxps://cegetel.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0037.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0037.id,hxxp://choc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0038.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0038.id,hxxps://choc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0039.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0039.id,hxxp://cj.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0040.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0040.id,hxxps://cj.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0041.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0041.id,hxxp://cj.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0042.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0042.id,hxxps://cj.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0043.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0043.id,hxxp://cj.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0044.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0044.id,hxxps://cj.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0045.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0045.id,hxxp://cj.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0046.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0046.id,hxxps://cj.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0047.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0047.id,hxxp://metaboli.clubic.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0048.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0048.id,hxxps://metaboli.clubic.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0049.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0049.id,hxxp://metaboli.club-internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0050.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0050.id,hxxps://metaboli.club-internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0051.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0051.id,hxxp://coeur.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0052.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0052.id,hxxps://coeur.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0053.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0053.id,hxxp://come.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0054.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0054.id,hxxps://come.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0055.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0055.id,hxxp://lesaccros2.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0056.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0056.id,hxxps://lesaccros2.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0057.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0057.id,hxxp://surcouf.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0058.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0058.id,hxxps://surcouf.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0059.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0059.id,hxxp://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0060.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0060.id,hxxps://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0061.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0061.id,hxxp://cs.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0062.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0062.id,hxxps://cs.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0063.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0063.id,hxxp://custompc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0064.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0064.id,hxxps://custompc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0065.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0065.id,hxxp://cvg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0066.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0066.id,hxxps://cvg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0067.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0067.id,hxxp://daooda.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0068.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0068.id,hxxps://daooda.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0069.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0069.id,hxxp://daooda.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0070.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0070.id,hxxps://daooda.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0071.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0071.id,hxxp://daooda.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0072.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0072.id,hxxps://daooda.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0073.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0073.id,hxxp://digitaldownload.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0074.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0074.id,hxxps://digitaldownload.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0075.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0075.id,hxxp://eurogamer.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0076.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0076.id,hxxps://eurogamer.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0077.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0077.id,hxxp://eurogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0078.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0078.id,hxxps://eurogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0079.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0079.id,hxxp://exagame.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0080.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0080.id,hxxps://exagame.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0081.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0081.id,hxxp://fb.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0082.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0082.id,hxxps://fb.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0083.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0083.id,hxxp://fb.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0084.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0084.id,hxxps://fb.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0085.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0085.id,hxxp://fb.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0086.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0086.id,hxxps://fb.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0087.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0087.id,hxxp://firstcoffee.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0088.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0088.id,hxxps://firstcoffee.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0089.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0089.id,hxxp://fnac.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0090.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0090.id,hxxps://fnac.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0091.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0091.id,hxxp://fox.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0092.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0092.id,hxxps://fox.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0093.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0093.id,hxxp://fox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0094.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0094.id,hxxps://fox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0095.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0095.id,hxxp://fox.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0096.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0096.id,hxxps://fox.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0097.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0097.id,hxxp://free.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0098.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0098.id,hxxps://free.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0099.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0099.id,hxxp://funsta.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0100.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0100.id,hxxps://funsta.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0101.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0101.id,hxxp://funsta.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0102.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0102.id,hxxps://funsta.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0103.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0103.id,hxxp://metaboli.funradio.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0104.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0104.id,hxxps://metaboli.funradio.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0105.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0105.id,hxxp://fastweb.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0106.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0106.id,hxxps://fastweb.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0107.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0107.id,hxxp://god1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0108.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0108.id,hxxps://god1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0109.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0109.id,hxxp://god2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0110.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0110.id,hxxps://god2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0111.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0111.id,hxxp://god3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0112.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0112.id,hxxps://god3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0113.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0113.id,hxxp://gamona.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0114.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0114.id,hxxps://gamona.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0115.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0115.id,hxxp://giga.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0116.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0116.id,hxxps://giga.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0117.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0117.id,hxxp://gameseek.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0118.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0118.id,hxxps://gameseek.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0119.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0119.id,hxxp://www.gamesflatrate.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0120.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0120.id,hxxps://www.gamesflatrate.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0121.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0121.id,hxxp://games24.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0122.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0122.id,hxxps://games24.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0123.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0123.id,hxxp://ondemand.game.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0124.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0124.id,hxxps://ondemand.game.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0125.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0125.id,hxxp://google.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0126.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0126.id,hxxps://google.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0127.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0127.id,hxxp://google.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0128.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0128.id,hxxps://google.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0129.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0129.id,hxxp://gameone.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0130.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0130.id,hxxps://gameone.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0131.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0131.id,hxxp://google.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0132.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0132.id,hxxps://google.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0133.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0133.id,hxxp://goog.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0134.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0134.id,hxxps://goog.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0135.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0135.id,hxxp://google.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0136.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0136.id,hxxps://google.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0137.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0137.id,hxxp://gameplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0138.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0138.id,hxxps://gameplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0139.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0139.id,hxxp://gamesonradar.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0140.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0140.id,hxxps://gamesonradar.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0141.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0141.id,hxxp://gameshadow.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0142.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0142.id,hxxps://gameshadow.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0143.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0143.id,hxxp://gametap.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0144.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0144.id,hxxps://gametap.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0145.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0145.id,hxxp://gametap2.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0146.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0146.id,hxxps://gametap2.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0147.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0147.id,hxxp://gamespot.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0148.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0148.id,hxxps://gamespot.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0149.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0149.id,hxxp://gamerunlimited.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0150.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0150.id,hxxps://gamerunlimited.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0151.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0151.id,hxxp://guts.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0152.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0152.id,hxxps://guts.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0153.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0153.id,hxxp://gameswelt.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0154.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0154.id,hxxps://gameswelt.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0155.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0155.id,hxxp://gmx.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0156.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0156.id,hxxps://gmx.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0157.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0157.id,hxxp://hoaxbuster.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0158.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0158.id,hxxps://hoaxbuster.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0159.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0159.id,hxxp://incgamers.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0160.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0160.id,hxxps://incgamers.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0161.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0161.id,hxxp://imbogames.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0162.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0162.id,hxxps://imbogames.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0163.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0163.id,hxxp://ja.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0164.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0164.id,hxxps://ja.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0165.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0165.id,hxxp://janews.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0166.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0166.id,hxxps://janews.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0167.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0167.id,hxxp://jvfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0168.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0168.id,hxxps://jvfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0169.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0169.id,hxxp://jeux-pc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0170.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0170.id,hxxps://jeux-pc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0171.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0171.id,hxxp://kelkoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0172.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0172.id,hxxps://kelkoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0173.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0173.id,hxxp://gamekult.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0174.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0174.id,hxxps://gamekult.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0175.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0175.id,hxxp://ld.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0176.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0176.id,hxxps://ld.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0177.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0177.id,hxxp://leguide.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0178.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0178.id,hxxps://leguide.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0179.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0179.id,hxxp://leguide.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0180.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0180.id,hxxps://leguide.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0181.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0181.id,hxxp://leguide.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0182.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0182.id,hxxps://leguide.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0183.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0183.id,hxxp://leguide.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0184.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0184.id,hxxps://leguide.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0185.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0185.id,hxxp://jeuvideo.m6jeux.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0186.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0186.id,hxxps://jeuvideo.m6jeux.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0187.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0187.id,hxxp://magcity.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0188.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0188.id,hxxps://magcity.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0189.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0189.id,hxxp://medion.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0190.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0190.id,hxxps://medion.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0191.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0191.id,hxxp://medion.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0192.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0192.id,hxxps://medion.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0193.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0193.id,hxxp://www.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0194.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0194.id,hxxps://www.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0195.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0195.id,hxxp://medion.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0196.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0196.id,hxxps://medion.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0197.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0197.id,hxxp://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0198.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0198.id,hxxps://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0199.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0199.id,hxxp://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0200.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0200.id,hxxp://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0201.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0201.id,hxxps://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0202.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0202.id,hxxp://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0203.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0203.id,hxxp://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0204.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0204.id,hxxps://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0205.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0205.id,hxxp://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0206.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0206.id,hxxp://www.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0207.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0207.id,hxxps://www.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0208.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0208.id,hxxp://mirago.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0209.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0209.id,hxxps://mirago.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0210.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0210.id,hxxp://msn-games.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0211.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0211.id,hxxps://msn-games.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0212.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0212.id,hxxp://msn-jeux.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0213.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0213.id,hxxps://msn-jeux.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0214.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0214.id,hxxp://msn-games.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0215.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0215.id,hxxps://msn-games.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0216.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0216.id,hxxp://multiplayer.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0217.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0217.id,hxxps://multiplayer.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0218.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0218.id,hxxp://msn.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0219.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0219.id,hxxps://msn.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0220.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0220.id,hxxp://msn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0221.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0221.id,hxxps://msn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0222.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0222.id,hxxp://metaboli.msn.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0223.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0223.id,hxxps://metaboli.msn.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0224.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0224.id,hxxp://msn.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0225.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0225.id,hxxps://msn.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0226.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0226.id,hxxp://miva.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0227.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0227.id,hxxps://miva.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0228.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0228.id,hxxp://miva.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0229.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0229.id,hxxps://miva.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0230.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0230.id,hxxp://miva.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0231.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0231.id,hxxps://miva.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0232.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0232.id,hxxp://maxim.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0233.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0233.id,hxxps://maxim.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0234.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0234.id,hxxp://modulonet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0235.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0235.id,hxxps://modulonet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0236.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0236.id,hxxp://ncn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0237.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0237.id,hxxps://ncn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0238.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0238.id,hxxp://news.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0239.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0239.id,hxxps://news.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0240.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0240.id,hxxp://news.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0241.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0241.id,hxxps://news.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0242.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0242.id,hxxp://news.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0243.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0243.id,hxxps://news.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0244.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0244.id,hxxp://news.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0245.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0245.id,hxxps://news.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0246.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0246.id,hxxp://metaboli.noos.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0247.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0247.id,hxxps://metaboli.noos.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0248.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0248.id,hxxp://newprice.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0249.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0249.id,hxxps://newprice.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0250.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0250.id,hxxp://onlyplanet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0251.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0251.id,hxxps://onlyplanet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0252.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0252.id,hxxp://orange.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0253.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0253.id,hxxps://orange.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0254.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0254.id,hxxp://onlinewelten.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0255.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0255.id,hxxps://onlinewelten.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0256.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0256.id,hxxp://playart1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0257.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0257.id,hxxps://playart1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0258.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0258.id,hxxp://playart2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0259.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0259.id,hxxps://playart2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0260.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0260.id,hxxp://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0261.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0261.id,hxxps://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0262.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0262.id,hxxp://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0263.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0263.id,hxxps://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0264.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0264.id,hxxp://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0265.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0265.id,hxxps://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0266.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0266.id,hxxp://playart3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0267.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0267.id,hxxps://playart3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0268.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0268.id,hxxp://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0269.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0269.id,hxxps://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0270.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0270.id,hxxp://playart5.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0271.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0271.id,hxxps://playart5.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0272.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0272.id,hxxp://playart6.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0273.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0273.id,hxxps://playart6.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0274.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0274.id,hxxp://sevengamesbe.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0275.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0275.id,hxxps://sevengamesbe.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0276.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0276.id,hxxp://sevengames.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0277.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0277.id,hxxps://sevengames.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0278.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0278.id,hxxp://sevengames.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0279.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0279.id,hxxps://sevengames.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0280.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0280.id,hxxp://sevengamesnl.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0281.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0281.id,hxxps://sevengamesnl.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0282.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0282.id,hxxp://sevengamesno.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0283.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0283.id,hxxps://sevengamesno.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0284.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0284.id,hxxp://sevengames.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0285.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0285.id,hxxps://sevengames.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0286.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0286.id,hxxp://playart8.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0287.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0287.id,hxxps://playart8.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0288.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0288.id,hxxp://playart9.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0289.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0289.id,hxxps://playart9.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0290.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0290.id,hxxp://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0291.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0291.id,hxxps://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0292.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0292.id,hxxp://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0293.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0293.id,hxxps://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0294.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0294.id,hxxp://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0295.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0295.id,hxxps://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0296.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0296.id,hxxp://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0297.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0297.id,hxxps://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0298.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0298.id,hxxp://puntaeclicca.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0299.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0299.id,hxxps://puntaeclicca.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0300.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0300.id,hxxp://pg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0301.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0301.id,hxxps://pg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0302.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0302.id,hxxp://pg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0303.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0303.id,hxxps://pg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0304.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0304.id,hxxp://pg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0305.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0305.id,hxxps://pg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0306.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0306.id,hxxp://pg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0307.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0307.id,hxxps://pg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0308.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0308.id,hxxp://gameplazza.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0309.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0309.id,hxxps://gameplazza.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0310.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0310.id,hxxp://partner.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0311.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0311.id,hxxps://partner.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0312.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0312.id,hxxp://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0313.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0313.id,hxxps://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0314.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0314.id,hxxp://pr.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0315.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0315.id,hxxps://pr.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0316.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0316.id,hxxp://pr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0317.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0317.id,hxxps://pr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0318.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0318.id,hxxp://pro.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0319.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0319.id,hxxps://pro.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0320.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0320.id,hxxp://pr.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0321.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0321.id,hxxps://pr.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0322.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0322.id,hxxp://pixmania.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0323.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0323.id,hxxps://pixmania.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0324.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0324.id,hxxp://quintplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0325.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0325.id,hxxps://quintplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0326.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0326.id,hxxp://rap.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0327.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0327.id,hxxps://rap.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0328.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0328.id,hxxp://videogamesondemand.rossoalice.alice.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0329.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0329.id,hxxps://videogamesondemand.rossoalice.alice.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0330.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0330.id,hxxp://metaboli.rtl.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0331.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0331.id,hxxps://metaboli.rtl.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0332.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0332.id,hxxp://rueducommerce.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0333.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0333.id,hxxps://rueducommerce.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0334.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0334.id,hxxp://sat1spiele.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0335.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0335.id,hxxps://sat1spiele.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0336.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0336.id,hxxp://sfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0337.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0337.id,hxxps://sfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0338.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0338.id,hxxp://sg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0339.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0339.id,hxxps://sg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0340.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0340.id,hxxp://sg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0341.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0341.id,hxxps://sg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0342.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0342.id,hxxp://sg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0343.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0343.id,hxxps://sg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0344.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0344.id,hxxp://sg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0345.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0345.id,hxxps://sg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0346.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0346.id,hxxp://shopping.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0347.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0347.id,hxxps://shopping.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0348.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0348.id,hxxp://shopping.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0349.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0349.id,hxxps://shopping.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0350.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0350.id,hxxp://shoot.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0351.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0351.id,hxxps://shoot.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0352.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0352.id,hxxp://shopping.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0353.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0353.id,hxxps://shopping.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0354.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0354.id,hxxp://spieletipps.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0355.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0355.id,hxxps://spieletipps.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0356.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0356.id,hxxp://sqoops.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0357.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0357.id,hxxps://sqoops.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0358.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0358.id,hxxp://tiscali.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0359.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0359.id,hxxps://tiscali.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0360.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0360.id,hxxp://tradedoubler.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0361.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0361.id,hxxps://tradedoubler.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0362.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0362.id,hxxp://metaboli.tele2internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0363.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0363.id,hxxps://metaboli.tele2internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0364.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0364.id,hxxp://www.metaboli.fr:8889);
user_pref(capability.principal.codebase.YummyPlayer_XX0365.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0365.id,hxxps://www.metaboli.fr:8889);
user_pref(capability.principal.codebase.YummyPlayer_XX0366.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0366.id,hxxp://telecharger.tomsgames.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0367.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0367.id,hxxps://telecharger.tomsgames.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0368.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0368.id,hxxp://to-record.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0369.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0369.id,hxxps://to-record.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0370.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0370.id,hxxp://turbo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0371.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0371.id,hxxps://turbo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0372.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0372.id,hxxp://twenga.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0373.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0373.id,hxxps://twenga.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0374.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0374.id,hxxp://vc.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0375.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0375.id,hxxps://vc.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0376.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0376.id,hxxp://vc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0377.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0377.id,hxxps://vc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0378.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0378.id,hxxp://vc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0379.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0379.id,hxxps://vc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0380.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0380.id,hxxp://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0381.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0381.id,hxxps://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0382.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0382.id,hxxp://jeuxvideopc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0383.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0383.id,hxxps://jeuxvideopc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0384.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0384.id,hxxp://virginmega.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0385.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0385.id,hxxps://virginmega.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0386.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0386.id,hxxp://virginmedia.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0387.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0387.id,hxxps://virginmedia.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0388.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0388.id,hxxp://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0389.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0389.id,hxxps://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0390.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0390.id,hxxp://webde.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0391.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0391.id,hxxps://webde.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0392.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0392.id,hxxp://metaboli.libero.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0393.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0393.id,hxxps://metaboli.libero.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0394.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0394.id,hxxp://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0395.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0395.id,hxxps://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0396.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0396.id,hxxp://jeuxvideo.orange.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0397.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0397.id,hxxps://jeuxvideo.orange.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0398.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0398.id,hxxp://yahoo.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0399.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0399.id,hxxps://yahoo.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0400.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0400.id,hxxp://yahoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0401.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0401.id,hxxps://yahoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0402.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0402.id,hxxp://yahoo.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0403.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0403.id,hxxps://yahoo.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0404.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0404.id,hxxp://yahooclic.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0405.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0405.id,hxxps://yahooclic.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0406.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0406.id,hxxp://zanox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0407.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0407.id,hxxps://zanox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0408.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0408.id,hxxp://zavvi.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0409.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0409.id,hxxps://zavvi.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0410.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0410.id,hxxp://go.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0411.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0411.id,hxxps://go.metaboli.fr);
/* added 17-03-09 */
user_pref(capability.principal.codebase.YummyPlayer_XX0412.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0412.id,hxxp://cnet.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0413.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0413.id,hxxps://cnet.metaboli.co.uk);
/* GWDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GWDE.id - hxxp://gwde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GWDEINT.id - hxxp://gwde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDE.id - hxxps://gwde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDEINT.id - hxxps://gwde.int.metaboli.fr/
/* GMUK */
FF - user.js: capability.principal.codebase.YummyPlayer_GMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMUK.id - hxxp://game.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_GMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMUKINT.id - hxxp://gmuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUK.id - hxxps://game.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUKINT.id - hxxps://gmuk.int.metaboli.fr/
/* CNET */
FF - user.js: capability.principal.codebase.YummyPlayer_CNET.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CNET.id - hxxp://cnet.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CNETINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CNETINT.id - hxxp://cnet.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCNET.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCNET.id - hxxps://cnet.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCNETINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCNETINT.id - hxxps://cnet.int.metaboli.fr/
/* IGUK */
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK.id - hxxp://iguk.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_IGUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUKINT.id - hxxp://iguk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK.id - hxxps://iguk.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUKINT.id - hxxps://iguk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK2.id - hxxp://Incgamers.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK2.id - hxxps://Incgamers.metaboli.co.uk/
/* SKFR */
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR.id - hxxp://skfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFRINT.id - hxxp://skfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR.id - hxxps://skfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFRINT.id - hxxps://skfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR2.id - hxxp://Skyrock.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR2.id - hxxps://Skyrock.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR3.id - hxxp://ondemand.premium.games.skyrock.net/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR3.id - hxxps://ondemand.premium.games.skyrock.net/
FF - user.js: capability.principal.codebase.YummyPlayer_FREEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FREEINT.id - hxxp://free-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFREEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFREEINT.id - hxxps://free-int.metaboli.fr/
/* GNUK */
FF - user.js: capability.principal.codebase.YummyPlayer_GNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GNUK.id - hxxp://gamestation.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SGNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGNUK.id - hxxps://gamestation.metaboli.co.uk/
/* NEW MSN UK DE */
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNUK.id - hxxp://playnow.tech.uk.msn.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNUK.id - hxxps://playnow.tech.uk.msn.com/
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNDE.id - hxxp://pc-spiele-flatrate.msn.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNDE.id - hxxps://pc-spiele-flatrate.msn.de/
/* VMUK */
FF - user.js: capability.principal.codebase.YummyPlayer_VMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_VMUK.id - hxxp://virginmedia.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUK.id - hxxps://virginmedia.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_VMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_VMUKINT.id - hxxp://vmuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUKINT.id - hxxps://vmuk.int.metaboli.fr/
/* WDDE (web de) INT */
FF - user.js: capability.principal.codebase.YummyPlayer_WDDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WDDEINT.id - hxxp://wdde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWDDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWDDEINT.id - hxxps://wdde.int.metaboli.fr/
/* ORUK */
FF - user.js: capability.principal.codebase.YummyPlayer_ORUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ORUK.id - hxxp://orange.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SORUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SORUK.id - hxxps://orange.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_ORUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ORUKINT.id - hxxp://oruk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SORUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SORUKINT.id - hxxps://oruk.int.metaboli.fr/
/* MEDI int */
FF - user.js: capability.principal.codebase.YummyPlayer_MEDIINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDIINT.id - hxxp://medi.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDIINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDIINT.id - hxxps://medi.int.metaboli.fr/
/* SAT1 */
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1.id - hxxp://spieleflatrate.sat1.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1.id - hxxps://spieleflatrate.sat1.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1INT.id - hxxp://sat1.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1INT.id - hxxps://sat1.int.metaboli.fr/
/* OWDE */
FF - user.js: capability.principal.codebase.YummyPlayer_OWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OWDE.id - hxxp://onlinewelten.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDE.id - hxxps://onlinewelten.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_OWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OWDEINT.id - hxxp://owde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDEINT.id - hxxps://owde.int.metaboli.fr/
/* GRAD INT */
FF - user.js: capability.principal.codebase.YummyPlayer_GRADINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GRADINT.id - hxxp://grad.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGRADINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGRADINT.id - hxxps://grad.int.metaboli.fr/
/* RTLN */
FF - user.js: capability.principal.codebase.YummyPlayer_RTLN.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_RTLN.id - hxxp://rtl.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLN.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLN.id - hxxps://rtl.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_RTLNINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_RTLNINT.id - hxxp://rtln.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLNINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLNINT.id - hxxps://rtln.int.metaboli.fr/
/* MNIT */
FF - user.js: capability.principal.codebase.YummyPlayer_MNIT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNIT.id - hxxp://pcgames.msn.it/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNIT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNIT.id - hxxps://pcgames.msn.it/
FF - user.js: capability.principal.codebase.YummyPlayer_MNITINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNITINT.id - hxxp://mnit.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNITINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNITINT.id - hxxps://mnit.int.metaboli.fr/
/* CUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.id - hxxp://atheneum.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.id - hxxps://atheneum.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.id - hxxp://cuuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUKINT.id - hxxps://cuuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_CCUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CCUK2.id - hxxp://atheneum.uk.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SCCUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCCUK2.id - hxxps://atheneum.uk.com/
/* SCDE */
FF - user.js: capability.principal.codebase.YummyPlayer_SCDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCDE.id - hxxp://schueler.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSCDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSCDE.id - hxxps://schueler.metaboli.de/
/* MNSE */
FF - user.js: capability.principal.codebase.YummyPlayer_MNSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNSE.id - hxxp://spela.pcspel.msn.se/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNSE.id - hxxps://spela.pcspel.msn.se/
/* GMSE */
FF - user.js: capability.principal.codebase.YummyPlayer_GMSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMSE.id - hxxp://game.metaboli.se/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMSE.id - hxxps://game.metaboli.se/
/* OHFR */
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR.id - hxxp://jeuxpc.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR.id - hxxps://jeuxpc.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_OHFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFRINT.id - hxxp://ohfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFRINT.id - hxxps://ohfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR2.id - hxxp://ohfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR2.id - hxxps://ohfr.metaboli.fr/
/* OHDE */
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE.id - hxxp://pcspiele.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE.id - hxxps://pcspiele.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_OHDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDEINT.id - hxxp://ohde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDEINT.id - hxxps://ohde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE2.id - hxxp://ohde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE2.id - hxxps://ohde.metaboli.de/
/* GAMETAP */
FF - user.js: capability.principal.codebase.YummyPlayer_GTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GTUS.id - hxxp://www.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGTUS.id - hxxps://www.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_IGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGTUS.id - hxxp://integ.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_ISGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ISGTUS.id - hxxps://integ.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_IIGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IIGTUS.id - hxxp://gtus.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_IISGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IISGTUS.id - hxxps://gtus.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_PPGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPGTUS.id - hxxp://preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPSGTUS.id - hxxps://preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.id - hxxp://unlimited-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.id - hxxps://unlimited-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.id - hxxp://retro-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.id - hxxps://retro-preprod.gametap.com/
.
============= SERVICES / DRIVERS ===============
.
R0 tdrpman140;Acronis Try&Decide and Restore Points filter (build 140);c:\windows\system32\drivers\tdrpm140.sys [2011-4-17 971168]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2010-2-17 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2010-6-29 116608]
R2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2010-2-24 185472]
R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.sys [2010-3-18 99416]
R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.sys [2010-3-18 555096]
R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.sys [2010-3-18 566360]
S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;\??\c:\program files\vmlaunch\buddyvm.sys --> c:\program files\vmlaunch\BuddyVM.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [2012-3-15 2560]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-12-18 2253120]
S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.sys [2010-3-18 99416]
S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.sys [2010-3-18 555096]
S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.sys [2010-3-18 100952]
S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.sys [2010-3-18 100952]
S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.sys [2010-3-18 566360]
S3 jfdcd;jfdcd;\??\c:\docume~1\chris\locals~1\temp\jfdcd.sys --> c:\docume~1\chris\locals~1\temp\jfdcd.sys [?]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2008-4-14 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2010-4-30 79360]
.
=============== File Associations ===============
.
vbefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
vbsfile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
jsefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
.
=============== Created Last 30 ================
.
2012-05-05 10:07:29 0 --sha-w- c:\windows\system32\dds_trash_log.cmd
2012-04-18 23:10:25 388096 ----a-r- c:\documents and settings\chris\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2012-04-18 22:52:11 -------- d-----w- c:\program files\CCleaner
2012-04-18 22:46:13 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-04-18 22:24:49 -------- d-----w- c:\program files\VS Revo Group
2012-04-15 22:18:50 -------- d-----w- c:\program files\TinkleBell
2012-04-13 16:17:51 -------- d-----w- C:\TDSSKiller_Quarantine
2012-04-11 02:50:07 745368 ----a-w- c:\program files\microsoft games\train simulator\routes\westvale\activities\troop_train\Troop Train.exe
2012-04-11 02:10:15 693690 ----a-w- c:\program files\microsoft games\train simulator\routes\westvale\activities\midland johnson\UKTS_3707_MR_240_v1.1.exe
2012-04-10 00:41:02 70656 ----a-w- c:\windows\system32\zlib1.dll
2012-04-10 00:36:09 785920 ----a-w- c:\windows\system32\imgdll.dll
2012-04-10 00:34:45 137728 ----a-w- c:\windows\system32\ijl10.dll
2012-04-08 21:48:06 626688 ----a-w- c:\program files\mozilla firefox\msvcr80.dll
2012-04-08 21:48:06 592824 ----a-w- c:\program files\mozilla firefox\gkmedias.dll
2012-04-08 21:48:06 548864 ----a-w- c:\program files\mozilla firefox\msvcp80.dll
2012-04-08 21:48:06 479232 ----a-w- c:\program files\mozilla firefox\msvcm80.dll
2012-04-08 21:48:06 44472 ----a-w- c:\program files\mozilla firefox\mozglue.dll
2012-04-08 21:48:06 2106216 ----a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll
2012-04-08 21:48:06 1998168 ----a-w- c:\program files\mozilla firefox\d3dx9_43.dll
2012-04-08 21:13:16 -------- d-----w- c:\windows\system32\wbem\repository\FS
2012-04-08 21:13:16 -------- d-----w- c:\windows\system32\wbem\Repository
.
==================== Find3M ====================
.
2012-05-05 05:22:25 1497 --sha-w- c:\windows\system32\mmf.sys
2012-05-04 07:06:17 285176 ----a-w- c:\windows\system32\nvdrsdb0.bin
2012-05-04 07:06:17 1 ----a-w- c:\windows\system32\nvdrssel.bin
2012-05-04 07:05:10 285176 ----a-w- c:\windows\system32\nvdrsdb1.bin
2012-04-18 22:46:00 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-09 22:05:22 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2012-04-04 21:56:40 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-22 01:14:37 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-15 21:21:09 126976 ----a-w- c:\windows\lcmmfu.cpl
2012-03-15 21:21:08 48640 ----a-w- c:\windows\mmfs.dll
2012-03-15 21:21:08 2560 ----a-w- c:\windows\Runservice.exe
2012-02-29 14:10:16 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10:16 148480 ----a-w- c:\windows\system32\imagehlp.dll
2011-09-04 01:39:39 379256 ----a-w- c:\program files\UnGEXUSACAN.exe
2006-05-03 19:06:54 163328 --sha-r- c:\windows\system32\flvDX.dll
2007-02-21 20:47:16 31232 --sha-r- c:\windows\system32\msfDX.dll
2008-03-16 22:30:52 216064 --sha-r- c:\windows\system32\nbDX.dll
2010-01-07 07:00:00 107520 --sha-r- c:\windows\system32\TAKDSDecoder.dll
.
============= FINISH: 11:15:52.32 ===============

I will send you the Attach file in a PM attackment as it never works to attach with the tool here for my system for some reason

GMER log:
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-05-05 11:19:31
Windows 5.1.2600 Service Pack 3
Running: x793fei3.exe; Driver: C:\DOCUME~1\Chris\LOCALS~1\Temp\uxtdrpob.sys


---- System - GMER 1.0.15 ----

SSDT spsu.sys ZwCreateKey [0xB7EB50E0]
SSDT spsu.sys ZwEnumerateKey [0xB7ECDDA4]
SSDT spsu.sys ZwEnumerateValueKey [0xB7ECE132]
SSDT spsu.sys ZwOpenKey [0xB7EB50C0]
SSDT spsu.sys ZwQueryKey [0xB7ECE20A]
SSDT spsu.sys ZwQueryValueKey [0xB7ECE08A]
SSDT spsu.sys ZwSetValueKey [0xB7ECE29C]

INT 0x62 ? 8AD4ABF8
INT 0x63 ? 8ACE1BF8
INT 0x82 ? 8AD4ABF8
INT 0x94 ? 8AB2EBF8
INT 0xA4 ? 8AB2EBF8
INT 0xB4 ? 8ACE1BF8

---- Kernel code sections - GMER 1.0.15 ----

? spsu.sys The system cannot find the file specified. !
.text USBPORT.SYS!DllUnload B75EC8AC 5 Bytes JMP 8AB2E1D8
.text redbook.sys!?ShowClassNew@@YGPAGF<V B8159000 188 Bytes [C7, 45, EC, 00, 00, 00, 00, ...]
.text redbook.sys!?ShowClassNew@@YGPAGF<V B81590BD 442 Bytes [55, 10, 83, E2, 04, 0F, 84, ...]
.text redbook.sys!?ShowClassNew@@YGPAGF<V B8159278 142 Bytes [04, 00, CC, CC, CC, CC, CC, ...]
.text redbook.sys!?ShowClassNew@@YGPAGF<V B8159307 168 Bytes JMP B815946A \SystemRoot\system32\DRIVERS\redbook.sys (Redbook Audio Filter Driver/Microsoft Corporation)
.text redbook.sys!?ShowClassNew@@YGPAGF<V B81593B0 746 Bytes [0C, 8B, 50, 38, 2B, 51, 30, ...]
.text ...
.text redbook.sys!?SendSizeW@@YGMFM<V + 5 B815BAF7 46 Bytes CALL B8158A0F \SystemRoot\system32\DRIVERS\redbook.sys (Redbook Audio Filter Driver/Microsoft Corporation)
.text redbook.sys!?ShowHeightExA@@YGFPAFHEPAI<V + 20 B815BB26 34 Bytes [35, 00, 00, C0, 75, 19, 68, ...]
.text redbook.sys!?ShowHeightExA@@YGFPAFHEPAI<V + 43 B815BB49 47 Bytes [7D, 40, 8B, 0D, 14, A5, 15, ...]
.text redbook.sys!?ShowHeightExA@@YGFPAFHEPAI<V + 74 B815BB7A 5 Bytes [EB, 07, C7, 45, F0]
.text redbook.sys!?ShowHeightExA@@YGFPAFHEPAI<V + 7B B815BB81 9 Bytes [00, 00, 8B, 45, F8, E9, 1C, ...]
.text redbook.sys!?ShowHeightExA@@YGFPAFHEPAI<V + 85 B815BB8B 11 Bytes [68, 52, 42, 72, 67, 8B, 55, ...] {PUSH 0x67724252; MOV EDX, [EBP+0xc]; MOVZX EAX, [EDX]}
.text ...
.text redbook.sys!?InvalidateThreadExW@@YGPAGGNPAEPAD<V + 1A B815D07D 63 Bytes [00, 00, 00, 00, 00, 8B, 45, ...]
.text redbook.sys!?InvalidateThreadExW@@YGPAGGNPAEPAD<V + 5A B815D0BD 93 Bytes [0C, A4, 15, B8, 6A, 27, 8B, ...]
.text redbook.sys!?InvalidateThreadExW@@YGPAGGNPAEPAD<V + B8 B815D11B 2 Bytes [74, 22] {JZ 0x24}
.text redbook.sys!?InvalidateThreadExW@@YGPAGGNPAEPAD<V + BB B815D11E 3 Bytes [0C, A4, 15]
.text redbook.sys!?InvalidateThreadExW@@YGPAGGNPAEPAD<V + BF B815D122 18 Bytes [6A, 29, A1, 0C, A5, 15, B8, ...]
.text ...
.text redbook.sys!?ShowClassNew@@YGPAGF<V + 35 B815EF87 6 Bytes [00, 00, 8B, 15, 14, A5]
.text redbook.sys!?ShowClassNew@@YGPAGF<V + 3C B815EF8E 15 Bytes [B8, 81, E2, 80, 00, 00, 00, ...]
.text redbook.sys!?ShowClassNew@@YGPAGF<V + 4D B815EF9F 67 Bytes [00, 0F, BE, 51, 30, 52, 8B, ...]
.text redbook.sys!?ShowClassNew@@YGPAGF<V + 92 B815EFE4 32 Bytes [00, 74, 28, 0F, BE, 45, F7, ...]
.text redbook.sys!?ShowClassNew@@YGPAGF<V + B4 B815F006 14 Bytes [C7, 45, A0, 01, 00, 00, 00, ...]
.text ...
? C:\WINDOWS\system32\DRIVERS\redbook.sys suspicious PE modification
.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB6087380, 0x8D6CD5, 0xE8000020]
.text amcegvik.SYS B5E5E386 35 Bytes [00, 00, 00, 00, 00, 00, 20, ...]
.text amcegvik.SYS B5E5E3AA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text amcegvik.SYS B5E5E3C4 3 Bytes [00, 80, 02]
.text amcegvik.SYS B5E5E3C9 1 Byte [30]
.text amcegvik.SYS B5E5E3C9 11 Bytes [30, 00, 00, 00, 5E, 02, 00, ...] {XOR [EAX], AL; ADD [EAX], AL; POP ESI; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.vmp2 C:\WINDOWS\system32\drivers\acedrv11.sys entry point in ".vmp2" section [0xAB4B569D]
.text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0xAB44B300, 0x3AF78, 0xE8000020]
.text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xB8468300, 0x1BCE, 0xE8000020]
? C:\DOCUME~1\Chris\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1044] USER32.dll!GetWindowInfo 7E42C49C 5 Bytes JMP 1044FE0A C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1044] USER32.dll!TrackPopupMenu 7E46531E 5 Bytes JMP 104503C5 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 011E9720 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] kernel32.dll!VirtualAlloc 7C809AF1 5 Bytes JMP 0141E21B C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] kernel32.dll!MapViewOfFile 7C80B9A5 5 Bytes JMP 0141E1F4 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] GDI32.dll!CreateDIBSection 77F19E19 5 Bytes JMP 0141E17E C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] CRYPT32.dll!CryptMsgCountersignEncoded + 27A 77A92F52 7 Bytes JMP 02DD1A30
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] CRYPT32.dll!CertComparePublicKeyInfo + 1E8 77A9B75E 7 Bytes JMP 02DD1A10

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 8ACDC1F8

AttachedDevice \FileSystem\Ntfs \Ntfs tdrpm140.sys (Acronis Try&Decide Volume Filter Driver/Acronis)

Device \Driver\usbohci \Device\USBPDO-0 8AB911F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 8AD4B1F8
Device \Driver\dmio \Device\DmControl\DmConfig 8AD4B1F8
Device \Driver\dmio \Device\DmControl\DmPnP 8AD4B1F8
Device \Driver\dmio \Device\DmControl\DmInfo 8AD4B1F8
Device \Driver\usbehci \Device\USBPDO-1 8AB65500
Device \Driver\Ftdisk \Device\HarddiskVolume1 8ACDF1F8

AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 tdrpm140.sys (Acronis Try&Decide Volume Filter Driver/Acronis)

Device \Driver\Ftdisk \Device\HarddiskVolume2 8ACDF1F8

AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 tdrpm140.sys (Acronis Try&Decide Volume Filter Driver/Acronis)

Device \Driver\Cdrom \Device\CdRom0 8AB7A1F8
Device \Driver\Cdrom \Device\CdRom1 8AB7A1F8
Device \Driver\Cdrom \Device\CdRom2 8AB7A1F8
Device \Driver\NetBT \Device\NetBt_Wins_Export 895D4500
Device \Driver\nvata \Device\00000079 8AD4A1F8
Device \Driver\NetBT \Device\NetbiosSmb 895D4500
Device \Driver\PCI_PNP0446 \Device\0000005a spsu.sys
Device \Driver\usbohci \Device\USBFDO-0 8AB911F8
Device \Driver\nvata \Device\0000007a 8AD4A1F8
Device \Driver\nvata \Device\NvAta0 8AD4A1F8
Device \Driver\usbehci \Device\USBFDO-1 8AB65500
Device \Driver\NetBT \Device\NetBT_Tcpip_{2C0B2D02-DF33-4C85-BBA5-9640083FBAB3} 895D4500
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 895D11F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 895D11F8
Device \Driver\sptd \Device\3573079196 spsu.sys
Device \Driver\Ftdisk \Device\FtControl 8ACDF1F8
Device \Driver\amcegvik \Device\Scsi\amcegvik1 8AB051F8
Device \Driver\nvgts \Device\Scsi\nvgts2Port2Path0Target0Lun0 8ACDD1F8
Device \Driver\nvgts \Device\Scsi\nvgts1Port1Path1Target1Lun0 8ACDD1F8
Device \Driver\amcegvik \Device\Scsi\amcegvik1Port3Path0Target0Lun0 8AB051F8
Device \Driver\nvgts \Device\Scsi\nvgts1 8ACDD1F8
Device \Driver\nvgts \Device\Scsi\nvgts2 8ACDD1F8
Device \FileSystem\Cdfs \Cdfs 89400500

---- Modules - GMER 1.0.15 ----

Module (noname) (*** hidden *** ) AA1F8000-AA20F000 (94208 bytes)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x2A 0xB2 0x4A 0x24 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xC6 0x39 0x70 0x4B ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x9A 0x62 0x8D 0x2F ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x06 0x21 0x82 0x62 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xC6 0x39 0x70 0x4B ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x32 0x7C 0x1E 0xE8 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x01 0x1A 0xBE 0x62 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xC6 0x39 0x70 0x4B ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x65 0x11 0x4A 0x63 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x06 0x21 0x82 0x62 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xC6 0x39 0x70 0x4B ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x32 0x7C 0x1E 0xE8 ...
Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

BC AdBot (Login to Remove)

 


#2 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:03:41 AM

Posted 05 May 2012 - 12:29 PM

Hello CrisGer ! Welcome to BleepingComputer Forums! :welcome:

My name is Georgi and and I will be helping you with your computer problems.

Before we begin, please note the following:
  • I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The logs can take some time to research, so please be patient with me.
  • Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • Instructions that I give are for your system only!
  • Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
  • Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
  • Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.





IMPORTANT NOTE: One or more of the identified infections is related to the rootkit ZeroAccess. Rootkits, backdoor Trojans, Botnets, and IRCBots are very dangerous because they compromise system integrity by making changes that allow it to be used be the attacker for malicious purposes. Rootkits are used be Trojans to conceal its presence (hide from view) in order to prevent detection of an attacker's software and make removal more difficult. Many rootkits can hook into the Windows 32-bit kernel, and patch several APIs to hide new registry keys and files they install. They can disable your anti-virus and security tools to prevent detection and removal. Remote attackers use backdoors as a means of accessing and taking control of a computer that bepasses security mechanisms. This type of exploit allows them to steal sensitive information like passwords, personal and financial data which is send back to the hacker. To learn more about these types of infections, you can refer to:If your computer was used for online banking, has credit card information or other sensitive data on it, you should stay disconnected from the Internet until your system is fully cleaned. All passwords should be changed immediately to include those used for banking, email, eBay, paypal and online forums. You should consider them to be compromised and change each password using a clean computer, not the infected one. If not, an attacker may get the new passwords and transaction information. If using a router, you need to reset it with a strong logon/password so the malware cannot gain control before connect again. Banking and credit card institutions should be notified of the possible security breach. Because your computer was compromised please read:Although the infection has been identified and may be removed, your PC has likely been compromised and there is no way to be sure the computer can ever be trusted again. It is dangerous and incorrect to assume the computer is secure even if the malware appears to have been removed. In some instances an infection may have caused so much damage to your system that it cannot be completely cleaned or repaired so you can never be sure that you have completely removed a rootkit. The malware may leave so many remnants behind that security tools cannot find them. Tools that claim to be able to remove rootkits cannot guarantee that all traces of it will be removed. Many experts in the security community believe that once infected with this type of malware, the best course of action is to wipe the drive clean, reformat and reinstall the OS. Please read:




We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. If you decide to continue please do this:


Please download ComboFix from the link below:

Combofix

Save it to your Desktop <-- Important!!!

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Please refer to this link for instructions.

  • Double click it & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply



Regards,
Georgi

cXfZ4wS.png


#3 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 02:04 PM

Ok thanks Gaorgi, starting Combofix scan now...
Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

#4 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 02:37 PM

ComboFix 12-05-05.06 - Chris 05/05/2012 13:11:51.17.1 - x86
Running from: c:\documents and settings\Chris\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Chris\Application Data\vso_ts_preview.xml
c:\documents and settings\Chris\Recent\Thumbs.db
c:\windows\$NtUninstallKB57309$\1534552622
c:\windows\$NtUninstallKB57309$\2414104633\@
c:\windows\$NtUninstallKB57309$\2414104633\cfg.ini
c:\windows\$NtUninstallKB57309$\2414104633\Desktop.ini
c:\windows\$NtUninstallKB57309$\2414104633\L\ygeauqpy
c:\windows\$NtUninstallKB57309$\2414104633\oemid
c:\windows\$NtUninstallKB57309$\2414104633\U\00000001.@
c:\windows\$NtUninstallKB57309$\2414104633\U\00000002.@
c:\windows\$NtUninstallKB57309$\2414104633\U\00000004.@
c:\windows\$NtUninstallKB57309$\2414104633\U\80000000.@
c:\windows\$NtUninstallKB57309$\2414104633\U\80000004.@
c:\windows\$NtUninstallKB57309$\2414104633\U\80000032.@
c:\windows\$NtUninstallKB57309$\2414104633\version
c:\windows\system32\dds_trash_log.cmd
c:\windows\system32\MSVCRT.1
c:\windows\system32\vnxservice.dll
c:\windows\$NtUninstallKB57309$\2414104633\cfg.ini . . . . Failed to delete
.
Infected copy of c:\windows\system32\drivers\redbook.sys was found and disinfected
Restored copy from - The cat found it :)
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SWMX00
-------\Service_SWMX00
.
.
((((((((((((((((((((((((( Files Created from 2012-04-05 to 2012-05-05 )))))))))))))))))))))))))))))))
.
.
2012-05-05 19:08 . 2008-04-13 18:40 57600 ----a-w- c:\windows\system32\drivers\redbook.sys
2012-05-05 17:44 . 2012-05-05 17:44 -------- d-----w- c:\program files\Google
2012-04-18 23:10 . 2012-04-18 23:10 388096 ----a-r- c:\documents and settings\Chris\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-04-18 22:52 . 2012-04-18 22:52 -------- d-----w- c:\program files\CCleaner
2012-04-18 22:46 . 2012-04-18 22:46 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-04-18 22:45 . 2012-04-18 22:45 -------- d-----w- c:\program files\Java
2012-04-18 22:24 . 2012-04-18 22:24 -------- d-----w- c:\program files\VS Revo Group
2012-04-15 22:18 . 2012-04-15 22:18 -------- d-----w- c:\program files\TinkleBell
2012-04-13 16:17 . 2012-04-13 16:17 -------- d-----w- C:\TDSSKiller_Quarantine
2012-04-10 00:41 . 2012-04-10 00:40 70656 ----a-w- c:\windows\system32\zlib1.dll
2012-04-10 00:36 . 2004-01-05 00:12 785920 ----a-w- c:\windows\system32\imgdll.dll
2012-04-10 00:34 . 2004-01-27 21:58 137728 ----a-w- c:\windows\system32\ijl10.dll
2012-04-08 21:48 . 2012-03-13 04:39 44472 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
2012-04-08 21:48 . 2012-03-13 04:39 592824 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-04-08 21:48 . 2012-03-13 04:38 626688 ----a-w- c:\program files\Mozilla Firefox\msvcr80.dll
2012-04-08 21:48 . 2012-03-13 04:38 548864 ----a-w- c:\program files\Mozilla Firefox\msvcp80.dll
2012-04-08 21:48 . 2012-03-13 04:38 479232 ----a-w- c:\program files\Mozilla Firefox\msvcm80.dll
2012-04-08 21:48 . 2012-03-13 04:38 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2012-04-08 21:48 . 2012-03-13 04:38 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2012-04-08 21:13 . 2012-04-08 21:13 -------- d-----w- c:\windows\system32\wbem\Repository
2012-04-08 20:55 . 2012-04-08 20:55 -------- d-----w- c:\documents and settings\NetworkService\IETldCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-18 22:46 . 2010-05-03 06:28 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-09 22:05 . 2010-05-01 22:58 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2012-04-04 21:56 . 2010-05-01 02:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-22 01:14 . 2012-01-06 20:57 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-15 21:21 . 2012-03-15 21:21 126976 ----a-w- c:\windows\lcmmfu.cpl
2012-03-15 21:21 . 2012-03-15 21:21 48640 ----a-w- c:\windows\mmfs.dll
2012-03-15 21:21 . 2012-03-15 21:21 2560 ----a-w- c:\windows\Runservice.exe
2012-02-29 14:10 . 2008-04-14 11:42 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10 . 2008-04-14 11:41 148480 ----a-w- c:\windows\system32\imagehlp.dll
2011-09-04 01:39 . 2010-05-02 06:55 379256 ----a-w- c:\program files\UnGEXUSACAN.exe
2012-03-13 04:39 . 2011-04-17 17:00 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2006-05-03 19:06 163328 --sha-r- c:\windows\system32\flvDX.dll
2007-02-21 20:47 31232 --sha-r- c:\windows\system32\msfDX.dll
2008-03-16 22:30 216064 --sha-r- c:\windows\system32\nbDX.dll
2010-01-07 07:00 107520 --sha-r- c:\windows\system32\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-02-01 21898024]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2006-10-27 434528]
"NvMediaCenter"="NvMCTray.dll" [2011-10-08 203072]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-10-08 16744256]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-11-13 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"d:\\backup\\Program Files\\Curious Labs\\Poser 6\\Poser.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\EA GAMES\\Medal of Honor Pacific Assault™\\mohpa.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\mafia ii\\pc\\mafia2.exe"=
"c:\\Ubisoft\\Silent Hunter 5\\sh5.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Electronic Arts\\BioWare\\Star Wars - The Old Republic\\swtor\\retailclient\\swtor.exe"=
"c:\\Program Files\\Electronic Arts\\BioWare\\Star Wars - The Old Republic\\launcher.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
"5353:UDP"= 5353:UDP:Bonjour Port 5353
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [10/3/2010 04:11 PM 691696]
R0 tdrpman140;Acronis Try&Decide and Restore Points filter (build 140);c:\windows\system32\drivers\tdrpm140.sys [4/17/2011 12:41 PM 971168]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2/17/2010 12:25 PM 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 12:41 PM 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [6/29/2010 11:48 AM 116608]
R2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2/24/2010 04:22 AM 185472]
R2 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [3/15/2012 03:21 PM 2560]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [12/18/2011 01:21 PM 2253120]
R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.sys [3/18/2010 08:39 PM 99416]
R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.sys [3/18/2010 08:39 PM 555096]
R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.sys [3/18/2010 08:39 PM 566360]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [10/25/2010 10:50 AM 47360]
S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;\??\c:\program files\VMLaunch\BuddyVM.sys --> c:\program files\VMLaunch\BuddyVM.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 02:16 PM 130384]
S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.sys [3/18/2010 08:39 PM 99416]
S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.sys [3/18/2010 08:39 PM 555096]
S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.sys [3/18/2010 08:39 PM 100952]
S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.sys [3/18/2010 08:39 PM 100952]
S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.sys [3/18/2010 08:39 PM 566360]
S3 jfdcd;jfdcd;\??\c:\docume~1\Chris\LOCALS~1\Temp\jfdcd.sys --> c:\docume~1\Chris\LOCALS~1\Temp\jfdcd.sys [?]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [4/14/2008 05:42 AM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 02:16 PM 753504]
S4 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [4/30/2010 04:44 PM 79360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ZSMC301b
SWMX00
basic2
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
FF - ProfilePath - c:\documents and settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - user.js: signed.applets.codebase_principal_support - true
/* To avoid the user interaction, add the following lines: */
FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.id - hxxp://yael.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.id - hxxp://localhost/
/* GLDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.id - hxxp://gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.id - hxxp://www.gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.id - hxxp://glde-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.id - hxxps://gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.id - hxxps://www.gamesflatrate.de/
/* BGFR */
FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.id - hxxp://linternaute.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.id - hxxps://linternaute.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.id - hxxp://bgfr-int.metaboli.fr/
/* BILD */
FF - user.js: capability.principal.codebase.YummyPlayer_BILD.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BILD.id - hxxp://bild.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.id - hxxps://bild.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.id - hxxp://bild-int.metaboli.fr/
/* BTUK */
FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.id - hxxp://btvision.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.id - hxxps://btvision.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.id - hxxp://bt-int.metaboli.fr/
/* CLIC */
FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.id - hxxp://clubic.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.id - hxxps://clubic.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.id - hxxp://clic-int.metaboli.fr/
/* COUK */
FF - user.js: capability.principal.codebase.YummyPlayer_COUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_COUK.id - hxxp://metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.id - hxxp://www.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.id - hxxps://www.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.id - hxxps://metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.id - hxxp://uk-int.metaboli.fr/
/* MEDE */
FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.id - hxxp://metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.id - hxxp://www.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.id - hxxps://metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.id - hxxp://de-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.id - hxxps://www.metaboli.de/
/* CUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.id - hxxp://custompc.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.id - hxxps://custompc.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.id - hxxp://cuuk-int.metaboli.fr/
/* EUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.id - hxxp://eurogamer.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.id - hxxps://eurogamer.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.id - hxxp://euuk-int.metaboli.fr/
/* FUNR */
FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.id - hxxp://fun.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.id - hxxps://fun.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.id - hxxp://fun-int.metaboli.fr/
/* GONE */
FF - user.js: capability.principal.codebase.YummyPlayer_GONE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GONE.id - hxxp://gameone.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.id - hxxps://gameone.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.id - hxxp://gone-int.metaboli.fr/
/* GUDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.id - hxxp://gamerunlimited.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.id - hxxps://gamerunlimited.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.id - hxxp://gude-int.metaboli.fr/
/* META */
FF - user.js: capability.principal.codebase.YummyPlayer_META.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_META.id - hxxp://metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.id - hxxp://www.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.id - hxxps://metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.id - hxxps://www.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.id - hxxp://fr-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.id - hxxp://www.preprod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.id - hxxp://www.preprod.metaboli.fr/
/* MNDE */
FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.id - hxxp://livegames.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.id - hxxps://livegames.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.id - hxxp://msde-int.metaboli.fr/
/* MNFR */
FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.id - hxxp://livegames.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.id - hxxps://livegames.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.id - hxxp://msfr-int.metaboli.fr/
/* MNUK */
FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.id - hxxp://livegames.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.id - hxxps://livegames.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.id - hxxp://msuk-int.metaboli.fr/
/* NCNU */
FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.id - hxxp://numericable.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.id - hxxps://numericable.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.id - hxxp://ncnu-int.metaboli.fr/
/* QPUK */
FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.id - hxxp://quintplay.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.id - hxxps://quintplay.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.id - hxxp://qpuk-int.metaboli.fr/
/* SFFR */
FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.id - hxxp://jeux-pc.sfr.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.id - hxxps://jeux-pc.sfr.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.id - hxxp://sfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.id - hxxps://sfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.id - hxxp://sfr-int.metaboli.fr/
/* SPDE */
FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.id - hxxp://spieletipps.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.id - hxxps://spieletipps.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.id - hxxp://spde-int.metaboli.fr/
/* WOJ_ */
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.id - hxxp://woj-prod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.id - hxxps://woj-prod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.id - hxxp://woj-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.id - hxxps://woj-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.id - hxxp://woj-pp.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.id - hxxps://woj-pp.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.id - hxxp://woj-int.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.id - hxxps://woj-int.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.id - hxxp://preprod-god.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.id - hxxps://preprod-god.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.id - hxxp://prod.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.id - hxxps://prod.jeu.orange.fr/
user_pref(capability.principal.codebase.YummyPlayer_XX0001.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0001.id,hxxp://www.neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0002.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0002.id,hxxps://www.neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0003.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0003.id,hxxp://neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0004.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0004.id,hxxp://ad.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0005.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0005.id,hxxps://ad.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0006.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0006.id,hxxp://ads.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0007.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0007.id,hxxps://ads.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0008.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0008.id,hxxp://ads.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0009.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0009.id,hxxps://ads.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0010.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0010.id,hxxp://ads.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0011.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0011.id,hxxps://ads.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0012.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0012.id,hxxp://ag.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0013.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0013.id,hxxps://ag.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0014.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0014.id,hxxp://alice.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0015.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0015.id,hxxps://alice.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0016.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0016.id,hxxp://allocine.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0017.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0017.id,hxxps://allocine.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0018.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0018.id,hxxp://am.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0019.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0019.id,hxxps://am.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0020.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0020.id,hxxp://aol.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0021.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0021.id,hxxps://aol.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0022.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0022.id,hxxp://bc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0023.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0023.id,hxxps://bc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0024.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0024.id,hxxp://linternaute.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0025.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0025.id,hxxps://linternaute.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0026.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0026.id,hxxp://bild.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0027.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0027.id,hxxps://bild.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0028.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0028.id,hxxp://btvision.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0029.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0029.id,hxxps://btvision.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0030.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0030.id,hxxp://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0031.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0031.id,hxxp://cg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0032.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0032.id,hxxps://cg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0033.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0033.id,hxxp://cibleclick.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0034.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0034.id,hxxps://cibleclick.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0035.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0035.id,hxxp://cegetel.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0036.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0036.id,hxxps://cegetel.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0037.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0037.id,hxxp://choc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0038.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0038.id,hxxps://choc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0039.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0039.id,hxxp://cj.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0040.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0040.id,hxxps://cj.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0041.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0041.id,hxxp://cj.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0042.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0042.id,hxxps://cj.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0043.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0043.id,hxxp://cj.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0044.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0044.id,hxxps://cj.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0045.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0045.id,hxxp://cj.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0046.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0046.id,hxxps://cj.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0047.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0047.id,hxxp://metaboli.clubic.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0048.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0048.id,hxxps://metaboli.clubic.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0049.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0049.id,hxxp://metaboli.club-internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0050.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0050.id,hxxps://metaboli.club-internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0051.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0051.id,hxxp://coeur.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0052.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0052.id,hxxps://coeur.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0053.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0053.id,hxxp://come.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0054.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0054.id,hxxps://come.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0055.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0055.id,hxxp://lesaccros2.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0056.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0056.id,hxxps://lesaccros2.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0057.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0057.id,hxxp://surcouf.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0058.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0058.id,hxxps://surcouf.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0059.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0059.id,hxxp://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0060.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0060.id,hxxps://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0061.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0061.id,hxxp://cs.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0062.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0062.id,hxxps://cs.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0063.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0063.id,hxxp://custompc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0064.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0064.id,hxxps://custompc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0065.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0065.id,hxxp://cvg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0066.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0066.id,hxxps://cvg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0067.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0067.id,hxxp://daooda.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0068.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0068.id,hxxps://daooda.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0069.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0069.id,hxxp://daooda.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0070.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0070.id,hxxps://daooda.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0071.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0071.id,hxxp://daooda.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0072.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0072.id,hxxps://daooda.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0073.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0073.id,hxxp://digitaldownload.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0074.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0074.id,hxxps://digitaldownload.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0075.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0075.id,hxxp://eurogamer.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0076.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0076.id,hxxps://eurogamer.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0077.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0077.id,hxxp://eurogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0078.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0078.id,hxxps://eurogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0079.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0079.id,hxxp://exagame.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0080.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0080.id,hxxps://exagame.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0081.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0081.id,hxxp://fb.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0082.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0082.id,hxxps://fb.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0083.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0083.id,hxxp://fb.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0084.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0084.id,hxxps://fb.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0085.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0085.id,hxxp://fb.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0086.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0086.id,hxxps://fb.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0087.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0087.id,hxxp://firstcoffee.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0088.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0088.id,hxxps://firstcoffee.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0089.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0089.id,hxxp://fnac.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0090.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0090.id,hxxps://fnac.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0091.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0091.id,hxxp://fox.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0092.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0092.id,hxxps://fox.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0093.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0093.id,hxxp://fox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0094.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0094.id,hxxps://fox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0095.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0095.id,hxxp://fox.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0096.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0096.id,hxxps://fox.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0097.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0097.id,hxxp://free.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0098.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0098.id,hxxps://free.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0099.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0099.id,hxxp://funsta.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0100.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0100.id,hxxps://funsta.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0101.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0101.id,hxxp://funsta.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0102.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0102.id,hxxps://funsta.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0103.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0103.id,hxxp://metaboli.funradio.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0104.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0104.id,hxxps://metaboli.funradio.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0105.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0105.id,hxxp://fastweb.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0106.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0106.id,hxxps://fastweb.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0107.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0107.id,hxxp://god1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0108.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0108.id,hxxps://god1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0109.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0109.id,hxxp://god2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0110.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0110.id,hxxps://god2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0111.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0111.id,hxxp://god3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0112.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0112.id,hxxps://god3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0113.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0113.id,hxxp://gamona.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0114.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0114.id,hxxps://gamona.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0115.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0115.id,hxxp://giga.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0116.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0116.id,hxxps://giga.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0117.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0117.id,hxxp://gameseek.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0118.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0118.id,hxxps://gameseek.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0119.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0119.id,hxxp://www.gamesflatrate.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0120.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0120.id,hxxps://www.gamesflatrate.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0121.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0121.id,hxxp://games24.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0122.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0122.id,hxxps://games24.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0123.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0123.id,hxxp://ondemand.game.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0124.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0124.id,hxxps://ondemand.game.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0125.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0125.id,hxxp://google.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0126.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0126.id,hxxps://google.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0127.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0127.id,hxxp://google.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0128.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0128.id,hxxps://google.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0129.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0129.id,hxxp://gameone.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0130.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0130.id,hxxps://gameone.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0131.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0131.id,hxxp://google.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0132.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0132.id,hxxps://google.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0133.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0133.id,hxxp://goog.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0134.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0134.id,hxxps://goog.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0135.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0135.id,hxxp://google.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0136.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0136.id,hxxps://google.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0137.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0137.id,hxxp://gameplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0138.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0138.id,hxxps://gameplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0139.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0139.id,hxxp://gamesonradar.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0140.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0140.id,hxxps://gamesonradar.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0141.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0141.id,hxxp://gameshadow.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0142.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0142.id,hxxps://gameshadow.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0143.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0143.id,hxxp://gametap.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0144.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0144.id,hxxps://gametap.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0145.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0145.id,hxxp://gametap2.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0146.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0146.id,hxxps://gametap2.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0147.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0147.id,hxxp://gamespot.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0148.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0148.id,hxxps://gamespot.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0149.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0149.id,hxxp://gamerunlimited.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0150.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0150.id,hxxps://gamerunlimited.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0151.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0151.id,hxxp://guts.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0152.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0152.id,hxxps://guts.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0153.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0153.id,hxxp://gameswelt.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0154.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0154.id,hxxps://gameswelt.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0155.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0155.id,hxxp://gmx.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0156.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0156.id,hxxps://gmx.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0157.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0157.id,hxxp://hoaxbuster.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0158.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0158.id,hxxps://hoaxbuster.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0159.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0159.id,hxxp://incgamers.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0160.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0160.id,hxxps://incgamers.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0161.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0161.id,hxxp://imbogames.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0162.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0162.id,hxxps://imbogames.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0163.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0163.id,hxxp://ja.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0164.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0164.id,hxxps://ja.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0165.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0165.id,hxxp://janews.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0166.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0166.id,hxxps://janews.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0167.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0167.id,hxxp://jvfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0168.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0168.id,hxxps://jvfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0169.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0169.id,hxxp://jeux-pc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0170.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0170.id,hxxps://jeux-pc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0171.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0171.id,hxxp://kelkoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0172.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0172.id,hxxps://kelkoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0173.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0173.id,hxxp://gamekult.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0174.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0174.id,hxxps://gamekult.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0175.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0175.id,hxxp://ld.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0176.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0176.id,hxxps://ld.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0177.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0177.id,hxxp://leguide.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0178.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0178.id,hxxps://leguide.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0179.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0179.id,hxxp://leguide.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0180.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0180.id,hxxps://leguide.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0181.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0181.id,hxxp://leguide.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0182.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0182.id,hxxps://leguide.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0183.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0183.id,hxxp://leguide.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0184.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0184.id,hxxps://leguide.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0185.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0185.id,hxxp://jeuvideo.m6jeux.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0186.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0186.id,hxxps://jeuvideo.m6jeux.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0187.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0187.id,hxxp://magcity.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0188.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0188.id,hxxps://magcity.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0189.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0189.id,hxxp://medion.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0190.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0190.id,hxxps://medion.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0191.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0191.id,hxxp://medion.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0192.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0192.id,hxxps://medion.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0193.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0193.id,hxxp://www.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0194.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0194.id,hxxps://www.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0195.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0195.id,hxxp://medion.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0196.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0196.id,hxxps://medion.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0197.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0197.id,hxxp://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0198.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0198.id,hxxps://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0199.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0199.id,hxxp://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0200.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0200.id,hxxp://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0201.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0201.id,hxxps://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0202.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0202.id,hxxp://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0203.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0203.id,hxxp://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0204.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0204.id,hxxps://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0205.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0205.id,hxxp://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0206.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0206.id,hxxp://www.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0207.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0207.id,hxxps://www.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0208.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0208.id,hxxp://mirago.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0209.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0209.id,hxxps://mirago.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0210.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0210.id,hxxp://msn-games.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0211.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0211.id,hxxps://msn-games.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0212.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0212.id,hxxp://msn-jeux.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0213.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0213.id,hxxps://msn-jeux.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0214.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0214.id,hxxp://msn-games.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0215.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0215.id,hxxps://msn-games.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0216.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0216.id,hxxp://multiplayer.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0217.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0217.id,hxxps://multiplayer.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0218.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0218.id,hxxp://msn.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0219.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0219.id,hxxps://msn.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0220.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0220.id,hxxp://msn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0221.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0221.id,hxxps://msn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0222.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0222.id,hxxp://metaboli.msn.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0223.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0223.id,hxxps://metaboli.msn.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0224.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0224.id,hxxp://msn.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0225.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0225.id,hxxps://msn.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0226.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0226.id,hxxp://miva.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0227.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0227.id,hxxps://miva.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0228.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0228.id,hxxp://miva.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0229.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0229.id,hxxps://miva.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0230.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0230.id,hxxp://miva.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0231.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0231.id,hxxps://miva.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0232.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0232.id,hxxp://maxim.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0233.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0233.id,hxxps://maxim.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0234.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0234.id,hxxp://modulonet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0235.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0235.id,hxxps://modulonet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0236.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0236.id,hxxp://ncn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0237.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0237.id,hxxps://ncn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0238.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0238.id,hxxp://news.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0239.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0239.id,hxxps://news.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0240.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0240.id,hxxp://news.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0241.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0241.id,hxxps://news.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0242.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0242.id,hxxp://news.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0243.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0243.id,hxxps://news.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0244.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0244.id,hxxp://news.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0245.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0245.id,hxxps://news.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0246.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0246.id,hxxp://metaboli.noos.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0247.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0247.id,hxxps://metaboli.noos.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0248.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0248.id,hxxp://newprice.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0249.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0249.id,hxxps://newprice.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0250.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0250.id,hxxp://onlyplanet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0251.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0251.id,hxxps://onlyplanet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0252.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0252.id,hxxp://orange.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0253.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0253.id,hxxps://orange.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0254.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0254.id,hxxp://onlinewelten.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0255.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0255.id,hxxps://onlinewelten.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0256.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0256.id,hxxp://playart1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0257.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0257.id,hxxps://playart1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0258.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0258.id,hxxp://playart2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0259.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0259.id,hxxps://playart2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0260.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0260.id,hxxp://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0261.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0261.id,hxxps://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0262.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0262.id,hxxp://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0263.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0263.id,hxxps://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0264.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0264.id,hxxp://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0265.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0265.id,hxxps://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0266.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0266.id,hxxp://playart3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0267.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0267.id,hxxps://playart3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0268.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0268.id,hxxp://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0269.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0269.id,hxxps://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0270.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0270.id,hxxp://playart5.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0271.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0271.id,hxxps://playart5.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0272.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0272.id,hxxp://playart6.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0273.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0273.id,hxxps://playart6.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0274.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0274.id,hxxp://sevengamesbe.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0275.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0275.id,hxxps://sevengamesbe.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0276.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0276.id,hxxp://sevengames.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0277.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0277.id,hxxps://sevengames.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0278.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0278.id,hxxp://sevengames.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0279.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0279.id,hxxps://sevengames.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0280.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0280.id,hxxp://sevengamesnl.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0281.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0281.id,hxxps://sevengamesnl.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0282.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0282.id,hxxp://sevengamesno.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0283.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0283.id,hxxps://sevengamesno.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0284.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0284.id,hxxp://sevengames.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0285.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0285.id,hxxps://sevengames.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0286.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0286.id,hxxp://playart8.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0287.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0287.id,hxxps://playart8.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0288.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0288.id,hxxp://playart9.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0289.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0289.id,hxxps://playart9.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0290.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0290.id,hxxp://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0291.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0291.id,hxxps://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0292.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0292.id,hxxp://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0293.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0293.id,hxxps://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0294.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0294.id,hxxp://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0295.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0295.id,hxxps://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0296.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0296.id,hxxp://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0297.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0297.id,hxxps://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0298.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0298.id,hxxp://puntaeclicca.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0299.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0299.id,hxxps://puntaeclicca.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0300.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0300.id,hxxp://pg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0301.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0301.id,hxxps://pg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0302.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0302.id,hxxp://pg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0303.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0303.id,hxxps://pg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0304.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0304.id,hxxp://pg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0305.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0305.id,hxxps://pg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0306.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0306.id,hxxp://pg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0307.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0307.id,hxxps://pg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0308.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0308.id,hxxp://gameplazza.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0309.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0309.id,hxxps://gameplazza.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0310.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0310.id,hxxp://partner.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0311.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0311.id,hxxps://partner.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0312.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0312.id,hxxp://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0313.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0313.id,hxxps://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0314.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0314.id,hxxp://pr.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0315.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0315.id,hxxps://pr.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0316.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0316.id,hxxp://pr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0317.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0317.id,hxxps://pr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0318.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0318.id,hxxp://pro.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0319.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0319.id,hxxps://pro.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0320.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0320.id,hxxp://pr.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0321.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0321.id,hxxps://pr.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0322.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0322.id,hxxp://pixmania.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0323.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0323.id,hxxps://pixmania.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0324.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0324.id,hxxp://quintplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0325.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0325.id,hxxps://quintplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0326.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0326.id,hxxp://rap.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0327.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0327.id,hxxps://rap.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0328.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0328.id,hxxp://videogamesondemand.rossoalice.alice.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0329.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0329.id,hxxps://videogamesondemand.rossoalice.alice.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0330.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0330.id,hxxp://metaboli.rtl.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0331.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0331.id,hxxps://metaboli.rtl.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0332.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0332.id,hxxp://rueducommerce.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0333.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0333.id,hxxps://rueducommerce.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0334.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0334.id,hxxp://sat1spiele.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0335.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0335.id,hxxps://sat1spiele.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0336.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0336.id,hxxp://sfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0337.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0337.id,hxxps://sfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0338.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0338.id,hxxp://sg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0339.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0339.id,hxxps://sg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0340.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0340.id,hxxp://sg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0341.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0341.id,hxxps://sg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0342.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0342.id,hxxp://sg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0343.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0343.id,hxxps://sg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0344.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0344.id,hxxp://sg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0345.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0345.id,hxxps://sg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0346.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0346.id,hxxp://shopping.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0347.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0347.id,hxxps://shopping.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0348.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0348.id,hxxp://shopping.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0349.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0349.id,hxxps://shopping.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0350.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0350.id,hxxp://shoot.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0351.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0351.id,hxxps://shoot.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0352.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0352.id,hxxp://shopping.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0353.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0353.id,hxxps://shopping.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0354.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0354.id,hxxp://spieletipps.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0355.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0355.id,hxxps://spieletipps.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0356.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0356.id,hxxp://sqoops.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0357.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0357.id,hxxps://sqoops.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0358.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0358.id,hxxp://tiscali.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0359.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0359.id,hxxps://tiscali.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0360.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0360.id,hxxp://tradedoubler.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0361.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0361.id,hxxps://tradedoubler.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0362.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0362.id,hxxp://metaboli.tele2internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0363.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0363.id,hxxps://metaboli.tele2internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0364.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0364.id,hxxp://www.metaboli.fr:8889);
user_pref(capability.principal.codebase.YummyPlayer_XX0365.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0365.id,hxxps://www.metaboli.fr:8889);
user_pref(capability.principal.codebase.YummyPlayer_XX0366.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0366.id,hxxp://telecharger.tomsgames.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0367.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0367.id,hxxps://telecharger.tomsgames.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0368.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0368.id,hxxp://to-record.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0369.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0369.id,hxxps://to-record.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0370.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0370.id,hxxp://turbo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0371.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0371.id,hxxps://turbo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0372.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0372.id,hxxp://twenga.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0373.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0373.id,hxxps://twenga.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0374.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0374.id,hxxp://vc.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0375.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0375.id,hxxps://vc.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0376.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0376.id,hxxp://vc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0377.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0377.id,hxxps://vc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0378.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0378.id,hxxp://vc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0379.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0379.id,hxxps://vc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0380.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0380.id,hxxp://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0381.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0381.id,hxxps://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0382.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0382.id,hxxp://jeuxvideopc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0383.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0383.id,hxxps://jeuxvideopc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0384.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0384.id,hxxp://virginmega.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0385.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0385.id,hxxps://virginmega.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0386.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0386.id,hxxp://virginmedia.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0387.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0387.id,hxxps://virginmedia.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0388.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0388.id,hxxp://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0389.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0389.id,hxxps://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0390.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0390.id,hxxp://webde.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0391.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0391.id,hxxps://webde.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0392.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0392.id,hxxp://metaboli.libero.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0393.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0393.id,hxxps://metaboli.libero.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0394.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0394.id,hxxp://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0395.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0395.id,hxxps://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0396.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0396.id,hxxp://jeuxvideo.orange.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0397.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0397.id,hxxps://jeuxvideo.orange.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0398.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0398.id,hxxp://yahoo.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0399.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0399.id,hxxps://yahoo.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0400.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0400.id,hxxp://yahoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0401.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0401.id,hxxps://yahoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0402.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0402.id,hxxp://yahoo.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0403.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0403.id,hxxps://yahoo.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0404.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0404.id,hxxp://yahooclic.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0405.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0405.id,hxxps://yahooclic.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0406.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0406.id,hxxp://zanox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0407.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0407.id,hxxps://zanox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0408.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0408.id,hxxp://zavvi.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0409.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0409.id,hxxps://zavvi.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0410.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0410.id,hxxp://go.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0411.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0411.id,hxxps://go.metaboli.fr);
/* added 17-03-09 */
user_pref(capability.principal.codebase.YummyPlayer_XX0412.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0412.id,hxxp://cnet.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0413.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0413.id,hxxps://cnet.metaboli.co.uk);
/* GWDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GWDE.id - hxxp://gwde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GWDEINT.id - hxxp://gwde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDE.id - hxxps://gwde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDEINT.id - hxxps://gwde.int.metaboli.fr/
/* GMUK */
FF - user.js: capability.principal.codebase.YummyPlayer_GMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMUK.id - hxxp://game.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_GMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMUKINT.id - hxxp://gmuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUK.id - hxxps://game.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUKINT.id - hxxps://gmuk.int.metaboli.fr/
/* CNET */
FF - user.js: capability.principal.codebase.YummyPlayer_CNET.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CNET.id - hxxp://cnet.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CNETINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CNETINT.id - hxxp://cnet.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCNET.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCNET.id - hxxps://cnet.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCNETINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCNETINT.id - hxxps://cnet.int.metaboli.fr/
/* IGUK */
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK.id - hxxp://iguk.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_IGUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUKINT.id - hxxp://iguk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK.id - hxxps://iguk.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUKINT.id - hxxps://iguk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK2.id - hxxp://Incgamers.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK2.id - hxxps://Incgamers.metaboli.co.uk/
/* SKFR */
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR.id - hxxp://skfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFRINT.id - hxxp://skfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR.id - hxxps://skfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFRINT.id - hxxps://skfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR2.id - hxxp://Skyrock.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR2.id - hxxps://Skyrock.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR3.id - hxxp://ondemand.premium.games.skyrock.net/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR3.id - hxxps://ondemand.premium.games.skyrock.net/
FF - user.js: capability.principal.codebase.YummyPlayer_FREEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FREEINT.id - hxxp://free-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFREEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFREEINT.id - hxxps://free-int.metaboli.fr/
/* GNUK */
FF - user.js: capability.principal.codebase.YummyPlayer_GNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GNUK.id - hxxp://gamestation.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SGNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGNUK.id - hxxps://gamestation.metaboli.co.uk/
/* NEW MSN UK DE */
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNUK.id - hxxp://playnow.tech.uk.msn.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNUK.id - hxxps://playnow.tech.uk.msn.com/
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNDE.id - hxxp://pc-spiele-flatrate.msn.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNDE.id - hxxps://pc-spiele-flatrate.msn.de/
/* VMUK */
FF - user.js: capability.principal.codebase.YummyPlayer_VMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_VMUK.id - hxxp://virginmedia.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUK.id - hxxps://virginmedia.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_VMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_VMUKINT.id - hxxp://vmuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUKINT.id - hxxps://vmuk.int.metaboli.fr/
/* WDDE (web de) INT */
FF - user.js: capability.principal.codebase.YummyPlayer_WDDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WDDEINT.id - hxxp://wdde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWDDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWDDEINT.id - hxxps://wdde.int.metaboli.fr/
/* ORUK */
FF - user.js: capability.principal.codebase.YummyPlayer_ORUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ORUK.id - hxxp://orange.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SORUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SORUK.id - hxxps://orange.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_ORUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ORUKINT.id - hxxp://oruk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SORUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SORUKINT.id - hxxps://oruk.int.metaboli.fr/
/* MEDI int */
FF - user.js: capability.principal.codebase.YummyPlayer_MEDIINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDIINT.id - hxxp://medi.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDIINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDIINT.id - hxxps://medi.int.metaboli.fr/
/* SAT1 */
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1.id - hxxp://spieleflatrate.sat1.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1.id - hxxps://spieleflatrate.sat1.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1INT.id - hxxp://sat1.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1INT.id - hxxps://sat1.int.metaboli.fr/
/* OWDE */
FF - user.js: capability.principal.codebase.YummyPlayer_OWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OWDE.id - hxxp://onlinewelten.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDE.id - hxxps://onlinewelten.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_OWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OWDEINT.id - hxxp://owde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDEINT.id - hxxps://owde.int.metaboli.fr/
/* GRAD INT */
FF - user.js: capability.principal.codebase.YummyPlayer_GRADINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GRADINT.id - hxxp://grad.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGRADINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGRADINT.id - hxxps://grad.int.metaboli.fr/
/* RTLN */
FF - user.js: capability.principal.codebase.YummyPlayer_RTLN.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_RTLN.id - hxxp://rtl.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLN.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLN.id - hxxps://rtl.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_RTLNINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_RTLNINT.id - hxxp://rtln.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLNINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLNINT.id - hxxps://rtln.int.metaboli.fr/
/* MNIT */
FF - user.js: capability.principal.codebase.YummyPlayer_MNIT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNIT.id - hxxp://pcgames.msn.it/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNIT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNIT.id - hxxps://pcgames.msn.it/
FF - user.js: capability.principal.codebase.YummyPlayer_MNITINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNITINT.id - hxxp://mnit.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNITINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNITINT.id - hxxps://mnit.int.metaboli.fr/
/* CUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.id - hxxp://atheneum.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.id - hxxps://atheneum.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.id - hxxp://cuuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUKINT.id - hxxps://cuuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_CCUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CCUK2.id - hxxp://atheneum.uk.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SCCUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCCUK2.id - hxxps://atheneum.uk.com/
/* SCDE */
FF - user.js: capability.principal.codebase.YummyPlayer_SCDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCDE.id - hxxp://schueler.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSCDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSCDE.id - hxxps://schueler.metaboli.de/
/* MNSE */
FF - user.js: capability.principal.codebase.YummyPlayer_MNSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNSE.id - hxxp://spela.pcspel.msn.se/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNSE.id - hxxps://spela.pcspel.msn.se/
/* GMSE */
FF - user.js: capability.principal.codebase.YummyPlayer_GMSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMSE.id - hxxp://game.metaboli.se/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMSE.id - hxxps://game.metaboli.se/
/* OHFR */
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR.id - hxxp://jeuxpc.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR.id - hxxps://jeuxpc.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_OHFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFRINT.id - hxxp://ohfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFRINT.id - hxxps://ohfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR2.id - hxxp://ohfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR2.id - hxxps://ohfr.metaboli.fr/
/* OHDE */
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE.id - hxxp://pcspiele.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE.id - hxxps://pcspiele.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_OHDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDEINT.id - hxxp://ohde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDEINT.id - hxxps://ohde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE2.id - hxxp://ohde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE2.id - hxxps://ohde.metaboli.de/
/* GAMETAP */
FF - user.js: capability.principal.codebase.YummyPlayer_GTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GTUS.id - hxxp://www.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGTUS.id - hxxps://www.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_IGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGTUS.id - hxxp://integ.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_ISGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ISGTUS.id - hxxps://integ.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_IIGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IIGTUS.id - hxxp://gtus.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_IISGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IISGTUS.id - hxxps://gtus.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_PPGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPGTUS.id - hxxp://preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPSGTUS.id - hxxps://preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.id - hxxp://unlimited-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.id - hxxps://unlimited-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.id - hxxp://retro-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.id - hxxps://retro-preprod.gametap.com/
.
.
------- File Associations -------
.
vbefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
vbsfile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
jsefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-DB BR 38 with "Wannentender" - c:\documents and settings\CHRIS\DESKTOP\GERMAN STOCK STEAM\DB38_Uninstal.exe
AddRemove-Fs Etr480 - c:\windows\Fs Etr480 \uninstall.exe
AddRemove-MSTS Add-ons WestJapan RAILSTAR - c:\aerosoft\Trains\Trainset\Rs700\UNWISE.EXE
AddRemove-Oblivion mod manager_is1 - c:\program files\Bethesda Softworks\Oblivion\obmm\uninstall\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-05-05 13:31
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
.
c:\windows\$NtUninstallKB57309$:SummaryInformation 0 bytes hidden from API
.
scan completed successfully
hidden files: 1
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \E07E2E0BA8832060]
"1"=hex:59,ee,b1,0b,e7,cb,ba,22,10,c4,11,95,b8,27,ac,e2,d0,7f,55,22,bd,75,c1,
b4,b7,49,b9,16,b4,4c,81,20,bd,94,24,2d,a4,c1,d4,54
"2"=hex:55,1f,8a,dc,f0,b0,19,f4,38,b9,76,f2,65,2c,c7,f5,3b,6e,27,e9,a0,e7,a8,
2c
"3"=hex:59,ee,b1,0b,e7,cb,ba,22,10,c4,11,95,b8,27,ac,e2,d0,7f,55,22,bd,75,c1,
b4,4c,21,70,f3,81,0b,5f,da,13,46,a0,ca,b9,83,ed,3e,85,53,a4,d2,bc,7a,d9,b2,\
.
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \E07E2E0BA8832060\812AB6DF785DC81371F7CEBBF3486B36]
"1"=hex:7c,26,85,e2,b6,72,1a,ee,ac,b2,e6,d4,35,ae,84,6d,ca,a1,18,51,07,3c,35,
f8
"2"=hex:14,ce,87,8d,79,74,ee,b2
"3"=hex:de,be,e5,52,19,e9,de,9b,e6,8e,67,6a,8f,ad,dc,62,6c,5d,70,35,47,ed,f7,
41,02,12,02,ca,a5,a3,e9,9b,f3,53,e3,26,59,7d,d2,b7,6e,17,57,ab,bc,b5,1c,f8,\
"4"=hex:2f,ad,a2,e7,8a,bf,05,5e
"5"=hex:bf,e5,23,7b,b0,66,d6,fc,b8,e8,6b,a0,96,52,f7,32,80,09,8f,24,b7,b3,55,
1a,98,d1,47,16,02,43,61,1c,b9,d5,8f,2a,7b,81,b1,fb,95,22,f8,b3,2c,53,9d,ae,\
"6"=hex:7c,26,85,e2,b6,72,1a,ee,dc,2c,b3,1f,4a,c5,61,cf,75,ba,92,5e,19,17,22,
1e,ed,d0,78,61,a8,b2,e2,df,90,a1,d7,0b,8d,de,a6,56,01,a3,35,01,e3,17,41,55,\
"7"=hex:71,0b,18,e0,11,38,27,ce,ea,13,d4,c2,2b,5e,30,76,6d,8f,2e,5f,89,e6,1e,
b9,5f,7a,b6,b2,22,cd,de,66,df,14,e1,4e,6f,fb,20,d4,72,05,68,95,c4,22,f5,e6,\
"8"=hex:f8,6e,66,d3,34,5e,51,d1,cf,e5,46,ce,ef,61,d0,d3,82,33,e8,cc,a2,0f,1c,
cf,5e,98,2a,19,c3,4b,a0,04,b5,35,d2,55,2c,e9,cf,2e,4c,40,1c,84,8e,58,12,1a,\
"9"=hex:81,20,8f,ab,28,6a,52,9c
"18"=hex:70,56,26,33,e3,20,f8,ab
"10"=hex:81,20,8f,ab,28,6a,52,9c
"11"=hex:81,20,8f,ab,28,6a,52,9c
"12"=hex:15,27,21,9e,50,8c,c2,69,c0,33,34,37,24,57,1a,ef,bf,20,92,96,25,e8,a5,
51,ed,4f,87,b7,5b,dd,36,c4,1e,67,07,32,3e,f1,43,48,cb,73,93,eb,5f,c9,d8,b0,\
"13"=hex:e0,10,cd,4f,0b,b2,8e,c7,2c,6e,4a,f6,fd,c1,30,ae,bc,05,2b,57,12,58,29,
85
"14"=hex:c7,cf,c0,2f,91,9f,c5,f8
"24"=hex:81,20,8f,ab,28,6a,52,9c
"26"=hex:81,20,8f,ab,28,6a,52,9c
"27"=hex:81,20,8f,ab,28,6a,52,9c
"19"=hex:95,df,d3,8f,75,8d,db,71,d9,98,49,3b,b2,70,db,f4
"22"=hex:81,20,8f,ab,28,6a,52,9c
"15"=hex:39,5e,65,68,05,ce,0b,3b,08,0e,42,0e,a0,d4,7f,9d,a8,1c,58,f1,df,ec,a0,
99,de,b4,c7,7e,07,7a,38,0b,0d,86,89,ca,f9,92,9b,75,d7,4e,f8,5a,50,f7,1e,00,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(628)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
.
- - - - - - - > 'explorer.exe'(3148)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\windows\system32\RunDLL32.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\nHancer\nHancerService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2012-05-05 13:35:40 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-05 19:35
ComboFix2.txt 2012-04-17 07:52
.
Pre-Run: 42,560,892,928 bytes free
Post-Run: 42,574,786,560 bytes free
.
- - End Of File - - E4D25AC0F0D65A1B775E4326E8CE7D3F
Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

#5 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:03:41 AM

Posted 05 May 2012 - 03:44 PM

Hi,



Please post the content of the TDSSKiller log (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" in your next reply.





Your log(s) show that you are using so called peer-to-peer or file-sharing programmes (in your case
Vuze
). These programmes allow to share files between users as the name(s) suggest. In today's world the cyber crime has come to an enormous dimension and any means is used to infect personal computers to make use of their stored data or machine power for further propagation of the malware files. A popular means is the use of file-sharing tools as a tremendous amount of prospective victims can be reached through it.

It is therefore possible to be infected by downloading manipulated files via peer-to-peer tools and thus suggested to be used with intense care. Some further readings on this subject, along the included links, are as follows: "File-Sharing, otherwise known as Peer To Peer" and "Risks of File-Sharing Technology."

It is also important to note that sharing entertainment files and proprietary software infringes the copyright laws in many countries over the world and you are putting yourself at risk of being indicted through organisations watching over the rights of the authors of such files (i.e. the RIAA for music files, or the MPAA for movie files in the USA) or the authors of the files themselves.

Naturally there are also legal ways to use these services, such as downloading Linux distributions or office suites such as "Open Office."


Also, please take a look here:

How cyber criminals infect victims via P2P with pirated software





We need to execute a CFScript to clean some remnants.

Please do this:


1. Open notepad => navigate to format and make sure that wordwrap is unchecked. <--- important !!!

2. Copy/paste the text in the codebox below into it:

Driver::
ZSMC301b
SWMX00
basic2
NetSvc::
ZSMC301b
SWMX00
basic2
Folder::
c:\windows\$NtUninstallKB57309$

3. Save this as CFScript.txt to your flash drive and then transfer it to the infected PC. Save it in the same place as ComboFix.exe.

4. Close any open browsers.

5. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

6. Referring to the picture below, drag CFScript into ComboFix.exe

Posted Image


When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.



Also reply back to let me know how things are going. Still no internet ?



Regards,
Georgi

cXfZ4wS.png


#6 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 04:55 PM

TDSKIller Log:

14:59:22.0953 3404 TDSS rootkit removing tool 2.7.34.0 May 2 2012 09:59:18
14:59:23.0578 3404 ============================================================
14:59:23.0578 3404 Current date / time: 2012/05/05 14:59:23.0578
14:59:23.0578 3404 SystemInfo:
14:59:23.0578 3404
14:59:23.0578 3404 OS Version: 5.1.2600 ServicePack: 3.0
14:59:23.0578 3404 Product type: Workstation
14:59:23.0578 3404 ComputerName: ATHLON
14:59:23.0578 3404 UserName: Chris
14:59:23.0578 3404 Windows directory: C:\WINDOWS
14:59:23.0578 3404 System windows directory: C:\WINDOWS
14:59:23.0578 3404 Processor architecture: Intel x86
14:59:23.0578 3404 Number of processors: 1
14:59:23.0578 3404 Page size: 0x1000
14:59:23.0578 3404 Boot type: Normal boot
14:59:23.0578 3404 ============================================================
14:59:24.0078 3404 Drive \Device\Harddisk0\DR0 - Size: 0x45DECD2000 (279.48 Gb), SectorSize: 0x200, Cylinders: 0x8E83, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
14:59:24.0093 3404 Drive \Device\Harddisk1\DR1 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0xA181, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000058
14:59:24.0093 3404 ============================================================
14:59:24.0093 3404 \Device\Harddisk0\DR0:
14:59:24.0093 3404 MBR partitions:
14:59:24.0093 3404 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x22EEEBC3
14:59:24.0093 3404 \Device\Harddisk1\DR1:
14:59:24.0093 3404 MBR partitions:
14:59:24.0093 3404 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x254297C1
14:59:24.0093 3404 ============================================================
14:59:24.0109 3404 C: <-> \Device\Harddisk1\DR1\Partition0
14:59:24.0125 3404 D: <-> \Device\Harddisk0\DR0\Partition0
14:59:24.0125 3404 ============================================================
14:59:24.0125 3404 Initialize success
14:59:24.0125 3404 ============================================================
14:59:26.0015 2588 ============================================================
14:59:26.0015 2588 Scan started
14:59:26.0015 2588 Mode: Manual;
14:59:26.0015 2588 ============================================================
14:59:26.0203 2588 !SASCORE (c0393eb99a6c72c6bef9bfc4a72b33a6) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
14:59:26.0203 2588 !SASCORE - ok
14:59:26.0296 2588 Abiosdsk - ok
14:59:26.0312 2588 abp480n5 - ok
14:59:26.0437 2588 ACDaemon (61a581e5481e22a76a88490c57015105) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
14:59:26.0453 2588 ACDaemon - ok
14:59:26.0484 2588 acedrv11 (e6f53d6c0dea3d375362265e175ca638) C:\WINDOWS\system32\drivers\acedrv11.sys
14:59:26.0484 2588 acedrv11 - ok
14:59:26.0531 2588 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
14:59:26.0531 2588 ACPI - ok
14:59:26.0562 2588 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
14:59:26.0562 2588 ACPIEC - ok
14:59:26.0625 2588 AcrSch2Svc (744ed7aaba941c0e3b7668f5ca4e345f) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
14:59:26.0656 2588 AcrSch2Svc - ok
14:59:26.0656 2588 adpu160m - ok
14:59:26.0687 2588 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
14:59:26.0687 2588 aec - ok
14:59:26.0765 2588 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
14:59:26.0765 2588 Afc - ok
14:59:26.0828 2588 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
14:59:26.0828 2588 AFD - ok
14:59:26.0843 2588 Aha154x - ok
14:59:26.0859 2588 aic78u2 - ok
14:59:26.0875 2588 aic78xx - ok
14:59:26.0984 2588 ALCXWDM (933933288df5ed26d1928215c97d05c7) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
14:59:27.0046 2588 ALCXWDM - ok
14:59:27.0125 2588 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:\WINDOWS\system32\alrsvc.dll
14:59:27.0125 2588 Alerter - ok
14:59:27.0171 2588 ALG (8c515081584a38aa007909cd02020b3d) C:\WINDOWS\System32\alg.exe
14:59:27.0171 2588 ALG - ok
14:59:27.0187 2588 AliIde - ok
14:59:27.0250 2588 AmdPPM (033448d435e65c4bd72e70521fd05c76) C:\WINDOWS\system32\DRIVERS\AmdPPM.sys
14:59:27.0250 2588 AmdPPM - ok
14:59:27.0265 2588 amsint - ok
14:59:27.0296 2588 AppMgmt (d8849f77c0b66226335a59d26cb4edc6) C:\WINDOWS\System32\appmgmts.dll
14:59:27.0296 2588 AppMgmt - ok
14:59:27.0343 2588 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
14:59:27.0343 2588 Arp1394 - ok
14:59:27.0359 2588 asc - ok
14:59:27.0359 2588 asc3350p - ok
14:59:27.0375 2588 asc3550 - ok
14:59:27.0468 2588 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:59:27.0468 2588 aspnet_state - ok
14:59:27.0500 2588 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:59:27.0500 2588 AsyncMac - ok
14:59:27.0531 2588 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
14:59:27.0531 2588 atapi - ok
14:59:27.0546 2588 Atdisk - ok
14:59:27.0593 2588 atksgt (e46d344412d1abc60c58e95c73bcdc70) C:\WINDOWS\system32\DRIVERS\atksgt.sys
14:59:27.0593 2588 atksgt - ok
14:59:27.0609 2588 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
14:59:27.0609 2588 Atmarpc - ok
14:59:27.0640 2588 AudioSrv (def7a7882bec100fe0b2ce2549188f9d) C:\WINDOWS\System32\audiosrv.dll
14:59:27.0640 2588 AudioSrv - ok
14:59:27.0656 2588 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
14:59:27.0656 2588 audstub - ok
14:59:27.0671 2588 basic2 - ok
14:59:27.0703 2588 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
14:59:27.0718 2588 Beep - ok
14:59:27.0796 2588 BITS (574738f61fca2935f5265dc4e5691314) C:\WINDOWS\system32\qmgr.dll
14:59:27.0796 2588 BITS - ok
14:59:27.0812 2588 Browser (a06ce3399d16db864f55faeb1f1927a9) C:\WINDOWS\System32\browser.dll
14:59:27.0828 2588 Browser - ok
14:59:27.0921 2588 catchme - ok
14:59:27.0937 2588 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
14:59:27.0937 2588 cbidf2k - ok
14:59:27.0984 2588 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
14:59:27.0984 2588 CCDECODE - ok
14:59:27.0984 2588 cd20xrnt - ok
14:59:28.0031 2588 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
14:59:28.0031 2588 Cdaudio - ok
14:59:28.0046 2588 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
14:59:28.0046 2588 Cdfs - ok
14:59:28.0078 2588 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
14:59:28.0078 2588 Cdrom - ok
14:59:28.0093 2588 Changer - ok
14:59:28.0125 2588 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:\WINDOWS\system32\cisvc.exe
14:59:28.0125 2588 CiSvc - ok
14:59:28.0156 2588 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:\WINDOWS\system32\clipsrv.exe
14:59:28.0156 2588 ClipSrv - ok
14:59:28.0234 2588 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:59:28.0234 2588 clr_optimization_v2.0.50727_32 - ok
14:59:28.0312 2588 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:59:28.0312 2588 clr_optimization_v4.0.30319_32 - ok
14:59:28.0328 2588 CmdIde - ok
14:59:28.0359 2588 COMMONFX (ef44c32b1aef62380426b260bf2c66f1) C:\WINDOWS\system32\drivers\COMMONFX.SYS
14:59:28.0359 2588 COMMONFX - ok
14:59:28.0375 2588 COMMONFX.SYS (ef44c32b1aef62380426b260bf2c66f1) C:\WINDOWS\System32\drivers\COMMONFX.SYS
14:59:28.0375 2588 COMMONFX.SYS - ok
14:59:28.0390 2588 COMSysApp - ok
14:59:28.0406 2588 Cpqarray - ok
14:59:28.0484 2588 Creative Audio Engine Licensing Service (c0ead9f8ab83d41ff07303c75589c2b8) C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
14:59:28.0484 2588 Creative Audio Engine Licensing Service - ok
14:59:28.0515 2588 CryptSvc (3d4e199942e29207970e04315d02ad3b) C:\WINDOWS\System32\cryptsvc.dll
14:59:28.0515 2588 CryptSvc - ok
14:59:28.0625 2588 ctac32k (357c534b38019b597f51c8bf7186c118) C:\WINDOWS\system32\drivers\ctac32k.sys
14:59:28.0625 2588 ctac32k - ok
14:59:28.0890 2588 ctaud2k (691f8259a1f9c983356d8db2cde8043c) C:\WINDOWS\system32\drivers\ctaud2k.sys
14:59:28.0890 2588 ctaud2k - ok
14:59:29.0156 2588 CTAUDFX (7fc78aa6521ef3d9f16e51efab0bf13b) C:\WINDOWS\system32\drivers\CTAUDFX.SYS
14:59:29.0156 2588 CTAUDFX - ok
14:59:29.0171 2588 CTAUDFX.SYS (7fc78aa6521ef3d9f16e51efab0bf13b) C:\WINDOWS\System32\drivers\CTAUDFX.SYS
14:59:29.0171 2588 CTAUDFX.SYS - ok
14:59:29.0328 2588 CTAudSvcService (5ce3d0e1d1b3832ee052cfc442eee0fa) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
14:59:29.0343 2588 CTAudSvcService - ok
14:59:29.0375 2588 ctdvda2k (8545d70b0335a05498f34e7e3f8ca9a2) C:\WINDOWS\system32\drivers\ctdvda2k.sys
14:59:29.0390 2588 ctdvda2k - ok
14:59:29.0406 2588 CTERFXFX (16f448354067914e7deaea709011bd60) C:\WINDOWS\system32\drivers\CTERFXFX.SYS
14:59:29.0421 2588 CTERFXFX - ok
14:59:29.0437 2588 CTERFXFX.SYS (16f448354067914e7deaea709011bd60) C:\WINDOWS\System32\drivers\CTERFXFX.SYS
14:59:29.0437 2588 CTERFXFX.SYS - ok
14:59:29.0453 2588 ctprxy2k (4d71541283aea28fb839007be90b5fc7) C:\WINDOWS\system32\drivers\ctprxy2k.sys
14:59:29.0453 2588 ctprxy2k - ok
14:59:29.0484 2588 CTSBLFX (64c83684661be137023f5186a612cf34) C:\WINDOWS\system32\drivers\CTSBLFX.SYS
14:59:29.0484 2588 CTSBLFX - ok
14:59:29.0500 2588 CTSBLFX.SYS (64c83684661be137023f5186a612cf34) C:\WINDOWS\System32\drivers\CTSBLFX.SYS
14:59:29.0515 2588 CTSBLFX.SYS - ok
14:59:29.0546 2588 ctsfm2k (632194572ebde8d461728cf382a7e964) C:\WINDOWS\system32\drivers\ctsfm2k.sys
14:59:29.0546 2588 ctsfm2k - ok
14:59:29.0546 2588 dac2w2k - ok
14:59:29.0562 2588 dac960nt - ok
14:59:29.0593 2588 DcomLaunch (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\system32\rpcss.dll
14:59:29.0609 2588 DcomLaunch - ok
14:59:29.0640 2588 Dhcp (5e38d7684a49cacfb752b046357e0589) C:\WINDOWS\System32\dhcpcsvc.dll
14:59:29.0640 2588 Dhcp - ok
14:59:29.0671 2588 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
14:59:29.0671 2588 Disk - ok
14:59:29.0687 2588 dmadmin - ok
14:59:29.0765 2588 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
14:59:29.0812 2588 dmboot - ok
14:59:29.0828 2588 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\DRIVERS\dmio.sys
14:59:29.0828 2588 dmio - ok
14:59:29.0859 2588 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
14:59:29.0859 2588 dmload - ok
14:59:29.0875 2588 dmserver (57edec2e5f59f0335e92f35184bc8631) C:\WINDOWS\System32\dmserver.dll
14:59:29.0875 2588 dmserver - ok
14:59:29.0906 2588 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
14:59:29.0906 2588 DMusic - ok
14:59:29.0937 2588 Dnscache (5f7e24fa9eab896051ffb87f840730d2) C:\WINDOWS\System32\dnsrslvr.dll
14:59:29.0937 2588 Dnscache - ok
14:59:29.0968 2588 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:\WINDOWS\System32\dot3svc.dll
14:59:29.0968 2588 Dot3svc - ok
14:59:29.0984 2588 dpti2o - ok
14:59:30.0000 2588 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
14:59:30.0000 2588 drmkaud - ok
14:59:30.0046 2588 EapHost (2187855a7703adef0cef9ee4285182cc) C:\WINDOWS\System32\eapsvc.dll
14:59:30.0046 2588 EapHost - ok
14:59:30.0078 2588 emupia (bacd9cc06d7a787e529e7ebf56b671aa) C:\WINDOWS\system32\drivers\emupia2k.sys
14:59:30.0078 2588 emupia - ok
14:59:30.0109 2588 enodpl (b4556f3d468c8dcb0b259d9d866cd4c4) C:\WINDOWS\system32\drivers\enodpl.sys
14:59:30.0109 2588 enodpl - ok
14:59:30.0125 2588 ERSvc (bc93b4a066477954555966d77fec9ecb) C:\WINDOWS\System32\ersvc.dll
14:59:30.0125 2588 ERSvc - ok
14:59:30.0156 2588 Eventlog (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
14:59:30.0156 2588 Eventlog - ok
14:59:30.0187 2588 EventSystem (d4991d98f2db73c60d042f1aef79efae) C:\WINDOWS\system32\es.dll
14:59:30.0187 2588 EventSystem - ok
14:59:30.0218 2588 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
14:59:30.0234 2588 Fastfat - ok
14:59:30.0265 2588 FastUserSwitchingCompatibility (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
14:59:30.0265 2588 FastUserSwitchingCompatibility - ok
14:59:30.0296 2588 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
14:59:30.0296 2588 Fdc - ok
14:59:30.0312 2588 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
14:59:30.0312 2588 Fips - ok
14:59:30.0328 2588 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
14:59:30.0328 2588 Flpydisk - ok
14:59:30.0359 2588 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
14:59:30.0359 2588 FltMgr - ok
14:59:30.0484 2588 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
14:59:30.0484 2588 FontCache3.0.0.0 - ok
14:59:30.0500 2588 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:59:30.0500 2588 Fs_Rec - ok
14:59:30.0546 2588 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
14:59:30.0546 2588 Ftdisk - ok
14:59:30.0578 2588 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
14:59:30.0578 2588 gameenum - ok
14:59:30.0593 2588 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
14:59:30.0593 2588 Gpc - ok
14:59:30.0656 2588 ha10kx2k (70606233f3ed0e53cb3ea17f846d6a4f) C:\WINDOWS\system32\drivers\ha10kx2k.sys
14:59:30.0671 2588 ha10kx2k - ok
14:59:30.0687 2588 hap16v2k (a0c69ad2a61e576b0207acdd9626e167) C:\WINDOWS\system32\drivers\hap16v2k.sys
14:59:30.0703 2588 hap16v2k - ok
14:59:30.0718 2588 hap17v2k (2ee89452c574d259ada4fc9fc1c07243) C:\WINDOWS\system32\drivers\hap17v2k.sys
14:59:30.0734 2588 hap17v2k - ok
14:59:30.0781 2588 helpsvc (4fcca060dfe0c51a09dd5c3843888bcd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
14:59:30.0781 2588 helpsvc - ok
14:59:30.0812 2588 hidgame (923ee4eef2582909a056904ca8026015) C:\WINDOWS\system32\DRIVERS\hidgame.sys
14:59:30.0812 2588 hidgame - ok
14:59:30.0843 2588 HidServ (deb04da35cc871b6d309b77e1443c796) C:\WINDOWS\System32\hidserv.dll
14:59:30.0843 2588 HidServ - ok
14:59:30.0859 2588 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
14:59:30.0875 2588 HidUsb - ok
14:59:30.0890 2588 hkmsvc (8878bd685e490239777bfe51320b88e9) C:\WINDOWS\System32\kmsvc.dll
14:59:30.0906 2588 hkmsvc - ok
14:59:30.0906 2588 hpn - ok
14:59:30.0953 2588 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
14:59:30.0953 2588 HTTP - ok
14:59:30.0984 2588 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:\WINDOWS\System32\w3ssl.dll
14:59:30.0984 2588 HTTPFilter - ok
14:59:31.0000 2588 i2omgmt - ok
14:59:31.0015 2588 i2omp - ok
14:59:31.0046 2588 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
14:59:31.0046 2588 i8042prt - ok
14:59:31.0125 2588 IDriverT (daf66902f08796f9c694901660e5a64a) C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
14:59:31.0125 2588 IDriverT - ok
14:59:31.0265 2588 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:59:31.0296 2588 idsvc - ok
14:59:31.0312 2588 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
14:59:31.0312 2588 Imapi - ok
14:59:31.0359 2588 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:\WINDOWS\system32\imapi.exe
14:59:31.0359 2588 ImapiService - ok
14:59:31.0375 2588 ini910u - ok
14:59:31.0390 2588 IntelIde - ok
14:59:31.0421 2588 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
14:59:31.0421 2588 Ip6Fw - ok
14:59:31.0453 2588 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:59:31.0453 2588 IpFilterDriver - ok
14:59:31.0468 2588 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
14:59:31.0484 2588 IpInIp - ok
14:59:31.0500 2588 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
14:59:31.0500 2588 IpNat - ok
14:59:31.0531 2588 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
14:59:31.0531 2588 IPSec - ok
14:59:31.0562 2588 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
14:59:31.0562 2588 IRENUM - ok
14:59:31.0593 2588 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
14:59:31.0593 2588 isapnp - ok
14:59:31.0656 2588 JavaQuickStarterService (0a5709543986843d37a92290b7838340) C:\Program Files\Java\jre6\bin\jqs.exe
14:59:31.0671 2588 JavaQuickStarterService - ok
14:59:31.0765 2588 jfdcd - ok
14:59:31.0796 2588 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
14:59:31.0796 2588 Kbdclass - ok
14:59:31.0828 2588 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
14:59:31.0828 2588 kbdhid - ok
14:59:31.0859 2588 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
14:59:31.0859 2588 kmixer - ok
14:59:31.0906 2588 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
14:59:31.0906 2588 KSecDD - ok
14:59:31.0953 2588 lanmanserver (3a7c3cbe5d96b8ae96ce81f0b22fb527) C:\WINDOWS\System32\srvsvc.dll
14:59:31.0953 2588 lanmanserver - ok
14:59:32.0000 2588 lanmanworkstation (a8888a5327621856c0cec4e385f69309) C:\WINDOWS\System32\wkssvc.dll
14:59:32.0015 2588 lanmanworkstation - ok
14:59:32.0031 2588 lbrtfdc - ok
14:59:32.0062 2588 LicCtrlService (29fab5363138f6e322f4cd780ed9d337) C:\WINDOWS\runservice.exe
14:59:32.0062 2588 LicCtrlService - ok
14:59:32.0093 2588 lirsgt (8ccf9ed46d52af1375875f74a91ffacf) C:\WINDOWS\system32\DRIVERS\lirsgt.sys
14:59:32.0093 2588 lirsgt - ok
14:59:32.0125 2588 LmHosts (a7db739ae99a796d91580147e919cc59) C:\WINDOWS\System32\lmhsvc.dll
14:59:32.0125 2588 LmHosts - ok
14:59:32.0125 2588 LVcKap - ok
14:59:32.0140 2588 LVMVDrv - ok
14:59:32.0156 2588 LVPr2Mon - ok
14:59:32.0187 2588 LVPrcSrv - ok
14:59:32.0203 2588 LVUSBSta - ok
14:59:32.0218 2588 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:\WINDOWS\System32\msgsvc.dll
14:59:32.0218 2588 Messenger - ok
14:59:32.0250 2588 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
14:59:32.0250 2588 mnmdd - ok
14:59:32.0296 2588 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:\WINDOWS\system32\mnmsrvc.exe
14:59:32.0296 2588 mnmsrvc - ok
14:59:32.0312 2588 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
14:59:32.0312 2588 Modem - ok
14:59:32.0328 2588 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
14:59:32.0343 2588 Mouclass - ok
14:59:32.0359 2588 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
14:59:32.0359 2588 mouhid - ok
14:59:32.0390 2588 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
14:59:32.0390 2588 MountMgr - ok
14:59:32.0406 2588 mraid35x - ok
14:59:32.0437 2588 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
14:59:32.0453 2588 MRxDAV - ok
14:59:32.0515 2588 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:59:32.0531 2588 MRxSmb - ok
14:59:32.0562 2588 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:\WINDOWS\system32\msdtc.exe
14:59:32.0562 2588 MSDTC - ok
14:59:32.0578 2588 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
14:59:32.0578 2588 Msfs - ok
14:59:32.0593 2588 MSIServer - ok
14:59:32.0640 2588 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:59:32.0640 2588 MSKSSRV - ok
14:59:32.0656 2588 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:59:32.0656 2588 MSPCLOCK - ok
14:59:32.0671 2588 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
14:59:32.0687 2588 MSPQM - ok
14:59:32.0718 2588 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
14:59:32.0718 2588 mssmbios - ok
14:59:32.0734 2588 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
14:59:32.0750 2588 MSTEE - ok
14:59:32.0750 2588 MTsensor - ok
14:59:32.0796 2588 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
14:59:32.0796 2588 Mup - ok
14:59:32.0828 2588 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
14:59:32.0828 2588 NABTSFEC - ok
14:59:32.0859 2588 napagent (0102140028fad045756796e1c685d695) C:\WINDOWS\System32\qagentrt.dll
14:59:32.0875 2588 napagent - ok
14:59:32.0906 2588 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
14:59:32.0906 2588 NDIS - ok
14:59:32.0921 2588 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
14:59:32.0921 2588 NdisIP - ok
14:59:32.0953 2588 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:59:32.0953 2588 NdisTapi - ok
14:59:32.0984 2588 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:59:32.0984 2588 Ndisuio - ok
14:59:33.0000 2588 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:59:33.0000 2588 NdisWan - ok
14:59:33.0031 2588 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
14:59:33.0031 2588 NDProxy - ok
14:59:33.0078 2588 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
14:59:33.0078 2588 NetBIOS - ok
14:59:33.0093 2588 NetBT (40e65c560013869f14eceb904f15390d) C:\WINDOWS\system32\DRIVERS\netbt.sys
14:59:33.0109 2588 NetBT ( Virus.Win32.ZAccess.c ) - infected
14:59:33.0109 2588 NetBT - detected Virus.Win32.ZAccess.c (0)
14:59:33.0140 2588 NetDDE (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
14:59:33.0156 2588 NetDDE - ok
14:59:33.0156 2588 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
14:59:33.0156 2588 NetDDEdsdm - ok
14:59:33.0187 2588 Netlogon (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
14:59:33.0187 2588 Netlogon - ok
14:59:33.0218 2588 Netman (13e67b55b3abd7bf3fe7aae5a0f9a9de) C:\WINDOWS\System32\netman.dll
14:59:33.0218 2588 Netman - ok
14:59:33.0312 2588 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:59:33.0312 2588 NetTcpPortSharing - ok
14:59:33.0375 2588 nHancer (4eecd2dc44e844b3a912b2650cc6e41f) C:\Program Files\nHancer\nHancerService.exe
14:59:33.0375 2588 nHancer - ok
14:59:33.0406 2588 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
14:59:33.0406 2588 NIC1394 - ok
14:59:33.0453 2588 Nla (943337d786a56729263071623bbb9de5) C:\WINDOWS\System32\mswsock.dll
14:59:33.0453 2588 Nla - ok
14:59:33.0468 2588 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
14:59:33.0468 2588 Npfs - ok
14:59:33.0500 2588 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
14:59:33.0500 2588 Ntfs - ok
14:59:33.0531 2588 NtLmSsp (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
14:59:33.0531 2588 NtLmSsp - ok
14:59:33.0609 2588 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:\WINDOWS\system32\ntmssvc.dll
14:59:33.0609 2588 NtmsSvc - ok
14:59:33.0640 2588 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
14:59:33.0640 2588 Null - ok
14:59:34.0921 2588 nv (4b54dcd6adee535df80f07c59ddd8f14) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
14:59:35.0000 2588 nv - ok
14:59:35.0078 2588 nvata (dce353985c988bfb7e84fd942068151f) C:\WINDOWS\system32\DRIVERS\nvata.sys
14:59:35.0093 2588 nvata - ok
14:59:35.0109 2588 NVENETFD (7d275ecda4628318912f6c945d5cf963) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
14:59:35.0125 2588 NVENETFD - ok
14:59:35.0156 2588 nvgts (ea98bfe4931bd13d747d647c1859796e) C:\WINDOWS\system32\DRIVERS\nvgts.sys
14:59:35.0156 2588 nvgts - ok
14:59:35.0187 2588 nvnetbus (b64aacefad2be5bff5353fe681253c67) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
14:59:35.0187 2588 nvnetbus - ok
14:59:35.0218 2588 NVSvc (0573c75a2895d973ea6ef2495620ba49) C:\WINDOWS\system32\nvsvc32.exe
14:59:35.0234 2588 NVSvc - ok
14:59:35.0390 2588 nvUpdatusService (9c84945feee40ea42d3bca5c22250d47) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
14:59:35.0437 2588 nvUpdatusService - ok
14:59:35.0515 2588 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
14:59:35.0515 2588 NwlnkFlt - ok
14:59:35.0531 2588 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
14:59:35.0531 2588 NwlnkFwd - ok
14:59:35.0625 2588 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:59:35.0640 2588 odserv - ok
14:59:35.0671 2588 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
14:59:35.0671 2588 ohci1394 - ok
14:59:35.0703 2588 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:59:35.0718 2588 ose - ok
14:59:35.0750 2588 ossrv (ae896073e1bbf98fefc2ec52f62c0fba) C:\WINDOWS\system32\drivers\ctoss2k.sys
14:59:35.0750 2588 ossrv - ok
14:59:35.0796 2588 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys
14:59:35.0796 2588 Parport - ok
14:59:35.0828 2588 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
14:59:35.0828 2588 PartMgr - ok
14:59:35.0859 2588 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
14:59:35.0859 2588 ParVdm - ok
14:59:35.0890 2588 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
14:59:35.0890 2588 PCI - ok
14:59:35.0906 2588 PCIDump - ok
14:59:35.0921 2588 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys
14:59:35.0921 2588 PCIIde - ok
14:59:35.0953 2588 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
14:59:35.0953 2588 Pcmcia - ok
14:59:36.0015 2588 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys
14:59:36.0015 2588 pcouffin - ok
14:59:36.0031 2588 PDCOMP - ok
14:59:36.0031 2588 PDFRAME - ok
14:59:36.0046 2588 PDRELI - ok
14:59:36.0062 2588 PDRFRAME - ok
14:59:36.0078 2588 perc2 - ok
14:59:36.0078 2588 perc2hib - ok
14:59:36.0109 2588 PID_0928 - ok
14:59:36.0140 2588 PlugPlay (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
14:59:36.0140 2588 PlugPlay - ok
14:59:36.0171 2588 PnkBstrA (1713d9de407313138118d501b0e3c05b) C:\WINDOWS\system32\PnkBstrA.exe
14:59:36.0171 2588 PnkBstrA - ok
14:59:36.0203 2588 PolicyAgent (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
14:59:36.0218 2588 PolicyAgent - ok
14:59:36.0234 2588 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:59:36.0234 2588 PptpMiniport - ok
14:59:36.0250 2588 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
14:59:36.0250 2588 Processor - ok
14:59:36.0265 2588 ProtectedStorage (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
14:59:36.0265 2588 ProtectedStorage - ok
14:59:36.0296 2588 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
14:59:36.0296 2588 PSched - ok
14:59:36.0328 2588 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
14:59:36.0328 2588 Ptilink - ok
14:59:36.0328 2588 ql1080 - ok
14:59:36.0343 2588 Ql10wnt - ok
14:59:36.0359 2588 ql12160 - ok
14:59:36.0375 2588 ql1240 - ok
14:59:36.0375 2588 ql1280 - ok
14:59:36.0390 2588 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:59:36.0390 2588 RasAcd - ok
14:59:36.0421 2588 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:\WINDOWS\System32\rasauto.dll
14:59:36.0437 2588 RasAuto - ok
14:59:36.0453 2588 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:59:36.0453 2588 Rasl2tp - ok
14:59:36.0484 2588 RasMan (76a9a3cbeadd68cc57cda5e1d7448235) C:\WINDOWS\System32\rasmans.dll
14:59:36.0500 2588 RasMan - ok
14:59:36.0531 2588 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:59:36.0531 2588 RasPppoe - ok
14:59:36.0546 2588 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
14:59:36.0546 2588 Raspti - ok
14:59:36.0578 2588 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:59:36.0578 2588 Rdbss - ok
14:59:36.0609 2588 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
14:59:36.0609 2588 RDPCDD - ok
14:59:36.0640 2588 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
14:59:36.0656 2588 rdpdr - ok
14:59:36.0687 2588 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
14:59:36.0703 2588 RDPWD - ok
14:59:36.0734 2588 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:\WINDOWS\system32\sessmgr.exe
14:59:36.0734 2588 RDSessMgr - ok
14:59:36.0781 2588 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
14:59:36.0781 2588 redbook - ok
14:59:36.0812 2588 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:\WINDOWS\System32\mprdim.dll
14:59:36.0828 2588 RemoteAccess - ok
14:59:36.0843 2588 RemoteRegistry (5b19b557b0c188210a56a6b699d90b8f) C:\WINDOWS\system32\regsvc.dll
14:59:36.0859 2588 RemoteRegistry - ok
14:59:36.0890 2588 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:\WINDOWS\system32\locator.exe
14:59:36.0890 2588 RpcLocator - ok
14:59:36.0921 2588 RpcSs (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\System32\rpcss.dll
14:59:36.0921 2588 RpcSs - ok
14:59:36.0968 2588 RSVP (471b3f9741d762abe75e9deea4787e47) C:\WINDOWS\system32\rsvp.exe
14:59:36.0968 2588 RSVP - ok
14:59:37.0015 2588 SamSs (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
14:59:37.0015 2588 SamSs - ok
14:59:37.0062 2588 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
14:59:37.0062 2588 SASDIFSV - ok
14:59:37.0093 2588 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
14:59:37.0093 2588 SASKUTIL - ok
14:59:37.0125 2588 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:\WINDOWS\System32\SCardSvr.exe
14:59:37.0125 2588 SCardSvr - ok
14:59:37.0156 2588 Schedule (0a9a7365a1ca4319aa7c1d6cd8e4eafa) C:\WINDOWS\system32\schedsvc.dll
14:59:37.0156 2588 Schedule - ok
14:59:37.0203 2588 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
14:59:37.0203 2588 Secdrv - ok
14:59:37.0234 2588 seclogon (cbe612e2bb6a10e3563336191eda1250) C:\WINDOWS\System32\seclogon.dll
14:59:37.0234 2588 seclogon - ok
14:59:37.0265 2588 SENS (7fdd5d0684eca8c1f68b4d99d124dcd0) C:\WINDOWS\system32\sens.dll
14:59:37.0265 2588 SENS - ok
14:59:37.0296 2588 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys
14:59:37.0296 2588 Serial - ok
14:59:37.0343 2588 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
14:59:37.0343 2588 Sfloppy - ok
14:59:37.0375 2588 SharedAccess (83f41d0d89645d7235c051ab1d9523ac) C:\WINDOWS\System32\ipnathlp.dll
14:59:37.0390 2588 SharedAccess - ok
14:59:37.0421 2588 ShellHWDetection (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
14:59:37.0421 2588 ShellHWDetection - ok
14:59:37.0437 2588 Simbad - ok
14:59:37.0468 2588 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
14:59:37.0468 2588 SLIP - ok
14:59:37.0500 2588 snapman380 (5ce1cf27620b144e212d407cdb14d339) C:\WINDOWS\system32\DRIVERS\snman380.sys
14:59:37.0515 2588 snapman380 - ok
14:59:37.0531 2588 Sparrow - ok
14:59:37.0562 2588 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
14:59:37.0562 2588 splitter - ok
14:59:37.0625 2588 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
14:59:37.0625 2588 Spooler - ok
14:59:37.0671 2588 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys
14:59:37.0671 2588 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
14:59:37.0671 2588 sptd ( LockedFile.Multi.Generic ) - warning
14:59:37.0671 2588 sptd - detected LockedFile.Multi.Generic (1)
14:59:37.0703 2588 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
14:59:37.0703 2588 sr - ok
14:59:37.0734 2588 srservice (3805df0ac4296a34ba4bf93b346cc378) C:\WINDOWS\system32\srsvc.dll
14:59:37.0734 2588 srservice - ok
14:59:37.0765 2588 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
14:59:37.0781 2588 Srv - ok
14:59:37.0812 2588 SSDPSRV (0a5679b3714edab99e357057ee88fca6) C:\WINDOWS\System32\ssdpsrv.dll
14:59:37.0812 2588 SSDPSRV - ok
14:59:37.0843 2588 Steam Client Service - ok
14:59:37.0890 2588 stisvc (8bad69cbac032d4bbacfce0306174c30) C:\WINDOWS\system32\wiaservc.dll
14:59:37.0906 2588 stisvc - ok
14:59:37.0921 2588 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
14:59:37.0921 2588 streamip - ok
14:59:37.0968 2588 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
14:59:37.0968 2588 swenum - ok
14:59:38.0000 2588 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
14:59:38.0000 2588 swmidi - ok
14:59:38.0015 2588 SwPrv - ok
14:59:38.0031 2588 symc810 - ok
14:59:38.0031 2588 symc8xx - ok
14:59:38.0046 2588 sym_hi - ok
14:59:38.0062 2588 sym_u3 - ok
14:59:38.0078 2588 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
14:59:38.0078 2588 sysaudio - ok
14:59:38.0109 2588 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:\WINDOWS\system32\smlogsvc.exe
14:59:38.0109 2588 SysmonLog - ok
14:59:38.0140 2588 tandpl (126d7b3b4c7b724491c604060e1f4e14) C:\WINDOWS\system32\drivers\tandpl.sys
14:59:38.0140 2588 tandpl - ok
14:59:38.0171 2588 TapiSrv (3cb78c17bb664637787c9a1c98f79c38) C:\WINDOWS\System32\tapisrv.dll
14:59:38.0171 2588 TapiSrv - ok
14:59:38.0203 2588 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:59:38.0203 2588 Tcpip - ok
14:59:38.0234 2588 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
14:59:38.0234 2588 TDPIPE - ok
14:59:38.0281 2588 tdrpman140 (9855c40de1de32aaa4e290a361cda0f3) C:\WINDOWS\system32\DRIVERS\tdrpm140.sys
14:59:38.0312 2588 tdrpman140 - ok
14:59:38.0328 2588 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
14:59:38.0328 2588 TDTCP - ok
14:59:38.0359 2588 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
14:59:38.0359 2588 TermDD - ok
14:59:38.0406 2588 TermService (ff3477c03be7201c294c35f684b3479f) C:\WINDOWS\System32\termsrv.dll
14:59:38.0406 2588 TermService - ok
14:59:38.0437 2588 Themes (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
14:59:38.0437 2588 Themes - ok
14:59:38.0468 2588 tifsfilter (6dcb8ddb481cd3c40fa68593723b4d89) C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
14:59:38.0468 2588 tifsfilter - ok
14:59:38.0500 2588 timounter (394fc70b88b7958fa85798bbc76d140a) C:\WINDOWS\system32\DRIVERS\timntr.sys
14:59:38.0515 2588 timounter - ok
14:59:38.0546 2588 TlntSvr (db7205804759ff62c34e3efd8a4cc76a) C:\WINDOWS\system32\tlntsvr.exe
14:59:38.0546 2588 TlntSvr - ok
14:59:38.0562 2588 TosIde - ok
14:59:38.0593 2588 TrkWks (55bca12f7f523d35ca3cb833c725f54e) C:\WINDOWS\system32\trkwks.dll
14:59:38.0609 2588 TrkWks - ok
14:59:38.0640 2588 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
14:59:38.0640 2588 Udfs - ok
14:59:38.0656 2588 ultra - ok
14:59:38.0687 2588 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
14:59:38.0703 2588 Update - ok
14:59:38.0734 2588 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:\WINDOWS\System32\upnphost.dll
14:59:38.0734 2588 upnphost - ok
14:59:38.0750 2588 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:\WINDOWS\System32\ups.exe
14:59:38.0750 2588 UPS - ok
14:59:38.0796 2588 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
14:59:38.0796 2588 usbaudio - ok
14:59:38.0828 2588 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
14:59:38.0828 2588 usbccgp - ok
14:59:38.0875 2588 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
14:59:38.0875 2588 usbehci - ok
14:59:38.0890 2588 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
14:59:38.0890 2588 usbhub - ok
14:59:38.0921 2588 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
14:59:38.0921 2588 usbohci - ok
14:59:38.0937 2588 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
14:59:38.0937 2588 usbprint - ok
14:59:38.0984 2588 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
14:59:38.0984 2588 usbscan - ok
14:59:39.0015 2588 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
14:59:39.0015 2588 USBSTOR - ok
14:59:39.0046 2588 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
14:59:39.0046 2588 VgaSave - ok
14:59:39.0046 2588 ViaIde - ok
14:59:39.0093 2588 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
14:59:39.0093 2588 VolSnap - ok
14:59:39.0125 2588 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:\WINDOWS\System32\vssvc.exe
14:59:39.0140 2588 VSS - ok
14:59:39.0171 2588 W32Time (54af4b1d5459500ef0937f6d33b1914f) C:\WINDOWS\system32\w32time.dll
14:59:39.0187 2588 W32Time - ok
14:59:39.0203 2588 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:59:39.0203 2588 Wanarp - ok
14:59:39.0218 2588 WDICA - ok
14:59:39.0250 2588 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
14:59:39.0250 2588 wdmaud - ok
14:59:39.0281 2588 WebClient (77a354e28153ad2d5e120a5a8687bc06) C:\WINDOWS\System32\webclnt.dll
14:59:39.0296 2588 WebClient - ok
14:59:39.0359 2588 winmgmt (2d0e4ed081963804ccc196a0929275b5) C:\WINDOWS\system32\wbem\WMIsvc.dll
14:59:39.0359 2588 winmgmt - ok
14:59:39.0421 2588 WinRM (18f347402da544a780949b8fdf83351b) C:\WINDOWS\system32\WsmSvc.dll
14:59:39.0453 2588 WinRM - ok
14:59:39.0500 2588 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
14:59:39.0515 2588 WmdmPmSN - ok
14:59:39.0531 2588 Wmi (e76f8807070ed04e7408a86d6d3a6137) C:\WINDOWS\System32\advapi32.dll
14:59:39.0562 2588 Wmi - ok
14:59:39.0593 2588 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:\WINDOWS\system32\wbem\wmiapsrv.exe
14:59:39.0593 2588 WmiApSrv - ok
14:59:39.0687 2588 WMPNetworkSvc (f74e3d9a7fa9556c3bbb14d4e5e63d3b) C:\Program Files\Windows Media Player\WMPNetwk.exe
14:59:39.0703 2588 WMPNetworkSvc - ok
14:59:39.0890 2588 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
14:59:39.0921 2588 WPFFontCache_v0400 - ok
14:59:40.0046 2588 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
14:59:40.0046 2588 WS2IFSL - ok
14:59:40.0078 2588 wscsvc (7c278e6408d1dce642230c0585a854d5) C:\WINDOWS\system32\wscsvc.dll
14:59:40.0078 2588 wscsvc - ok
14:59:40.0109 2588 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
14:59:40.0109 2588 WSTCODEC - ok
14:59:40.0171 2588 wuauserv (35321fb577cdc98ce3eb3a3eb9e4610a) C:\WINDOWS\system32\wuauserv.dll
14:59:40.0171 2588 wuauserv - ok
14:59:40.0203 2588 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
14:59:40.0203 2588 WudfPf - ok
14:59:40.0234 2588 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
14:59:40.0234 2588 WudfRd - ok
14:59:40.0265 2588 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
14:59:40.0265 2588 WudfSvc - ok
14:59:40.0296 2588 WZCSVC (81dc3f549f44b1c1fff022dec9ecf30b) C:\WINDOWS\System32\wzcsvc.dll
14:59:40.0312 2588 WZCSVC - ok
14:59:40.0359 2588 X4HSX32 - ok
14:59:40.0390 2588 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:\WINDOWS\System32\xmlprov.dll
14:59:40.0390 2588 xmlprov - ok
14:59:40.0406 2588 ZSMC301b - ok
14:59:40.0406 2588 {09BB444F-B2E2-4009-BAF2-7B727681223E} - ok
14:59:40.0453 2588 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
14:59:40.0515 2588 \Device\Harddisk0\DR0 - ok
14:59:40.0531 2588 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
14:59:40.0640 2588 \Device\Harddisk1\DR1 - ok
14:59:40.0656 2588 Boot (0x1200) (9a18d4cb540c1ce7a9405de4ceca6495) \Device\Harddisk0\DR0\Partition0
14:59:40.0656 2588 \Device\Harddisk0\DR0\Partition0 - ok
14:59:40.0656 2588 Boot (0x1200) (ff9daf4b2ac6d2eabcb82d2aa2efa6a6) \Device\Harddisk1\DR1\Partition0
14:59:40.0656 2588 \Device\Harddisk1\DR1\Partition0 - ok
14:59:40.0671 2588 ============================================================
14:59:40.0671 2588 Scan finished
14:59:40.0671 2588 ============================================================
14:59:40.0687 0940 Detected object count: 2
14:59:40.0687 0940 Actual detected object count: 2
14:59:55.0640 0940 C:\WINDOWS\system32\DRIVERS\netbt.sys - copied to quarantine
14:59:55.0640 0940 C:\WINDOWS\$NtUninstallKB57309$\2414104633\cfg.ini - copied to quarantine
14:59:55.0656 0940 VerifyFileNameVersionInfo: GetFileVersionInfoSizeW(C:\WINDOWS\system32\drivers\netbt.sys) error 1813
14:59:58.0546 0940 Backup copy found, using it..
14:59:58.0546 0940 C:\WINDOWS\system32\DRIVERS\netbt.sys - will be cured on reboot
14:59:59.0906 0940 C:\WINDOWS\$NtUninstallKB57309$\2414104633\cfg.ini - will be deleted on reboot
14:59:59.0906 0940 C:\WINDOWS\$NtUninstallKB57309$\3075367963 - will be deleted on reboot
14:59:59.0906 0940 NetBT ( Virus.Win32.ZAccess.c ) - User select action: Cure
14:59:59.0906 0940 sptd ( LockedFile.Multi.Generic ) - skipped by user
14:59:59.0906 0940 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
15:00:08.0000 3200 Deinitialize success

ran Combofix with that script and it found Zero access rootkit again and rebooted twice....now browseing with Firefox gets to the links with out redirecting.

Sorry about Vuze, had forgutten i had it on there, rarely use it and only for actual peer exchanges for reasearch, removed now.

Combofix log:

ComboFix 12-05-05.06 - Chris 05/05/2012 15:10:31.18.1 - x86
Running from: c:\documents and settings\Chris\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Chris\Desktop\CFScript.txt
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\$NtUninstallKB57309$
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_BASIC2
-------\Legacy_ZSMC301B
-------\Service_basic2
-------\Service_ZSMC301b
.
.
((((((((((((((((((((((((( Files Created from 2012-04-05 to 2012-05-05 )))))))))))))))))))))))))))))))
.
.
2012-05-05 19:08 . 2008-04-13 18:40 57600 ----a-w- c:\windows\system32\drivers\redbook.sys
2012-05-05 17:44 . 2012-05-05 17:44 -------- d-----w- c:\program files\Google
2012-04-18 23:10 . 2012-04-18 23:10 388096 ----a-r- c:\documents and settings\Chris\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-04-18 22:52 . 2012-04-18 22:52 -------- d-----w- c:\program files\CCleaner
2012-04-18 22:46 . 2012-04-18 22:46 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-04-18 22:45 . 2012-04-18 22:45 -------- d-----w- c:\program files\Java
2012-04-18 22:24 . 2012-04-18 22:24 -------- d-----w- c:\program files\VS Revo Group
2012-04-15 22:18 . 2012-04-15 22:18 -------- d-----w- c:\program files\TinkleBell
2012-04-13 16:17 . 2012-04-13 16:17 -------- d-----w- C:\TDSSKiller_Quarantine
2012-04-10 00:41 . 2012-04-10 00:40 70656 ----a-w- c:\windows\system32\zlib1.dll
2012-04-10 00:36 . 2004-01-05 00:12 785920 ----a-w- c:\windows\system32\imgdll.dll
2012-04-10 00:34 . 2004-01-27 21:58 137728 ----a-w- c:\windows\system32\ijl10.dll
2012-04-08 21:48 . 2012-03-13 04:39 44472 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
2012-04-08 21:48 . 2012-03-13 04:39 592824 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-04-08 21:48 . 2012-03-13 04:38 626688 ----a-w- c:\program files\Mozilla Firefox\msvcr80.dll
2012-04-08 21:48 . 2012-03-13 04:38 548864 ----a-w- c:\program files\Mozilla Firefox\msvcp80.dll
2012-04-08 21:48 . 2012-03-13 04:38 479232 ----a-w- c:\program files\Mozilla Firefox\msvcm80.dll
2012-04-08 21:48 . 2012-03-13 04:38 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2012-04-08 21:48 . 2012-03-13 04:38 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2012-04-08 21:13 . 2012-04-08 21:13 -------- d-----w- c:\windows\system32\wbem\Repository
2012-04-08 20:55 . 2012-04-08 20:55 -------- d-----w- c:\documents and settings\NetworkService\IETldCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-05 21:01 . 2008-04-14 06:51 162816 ----a-w- c:\windows\system32\drivers\netbt.sys
2012-04-18 22:46 . 2010-05-03 06:28 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-09 22:05 . 2010-05-01 22:58 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2012-04-04 21:56 . 2010-05-01 02:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-22 01:14 . 2012-01-06 20:57 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-15 21:21 . 2012-03-15 21:21 126976 ----a-w- c:\windows\lcmmfu.cpl
2012-03-15 21:21 . 2012-03-15 21:21 48640 ----a-w- c:\windows\mmfs.dll
2012-03-15 21:21 . 2012-03-15 21:21 2560 ----a-w- c:\windows\Runservice.exe
2012-02-29 14:10 . 2008-04-14 11:42 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10 . 2008-04-14 11:41 148480 ----a-w- c:\windows\system32\imagehlp.dll
2011-09-04 01:39 . 2010-05-02 06:55 379256 ----a-w- c:\program files\UnGEXUSACAN.exe
2012-03-13 04:39 . 2011-04-17 17:00 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2006-05-03 19:06 163328 --sha-r- c:\windows\system32\flvDX.dll
2007-02-21 20:47 31232 --sha-r- c:\windows\system32\msfDX.dll
2008-03-16 22:30 216064 --sha-r- c:\windows\system32\nbDX.dll
2010-01-07 07:00 107520 --sha-r- c:\windows\system32\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-05-05_19.30.31 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-05-05 21:27 . 2012-05-05 21:27 16384 c:\windows\temp\Perflib_Perfdata_c50.dat
+ 2012-05-05 21:27 . 2012-05-05 21:27 16384 c:\windows\temp\Perflib_Perfdata_6b8.dat
- 2012-05-05 19:30 . 2012-05-05 19:30 16384 c:\windows\temp\Perflib_Perfdata_6b8.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-02-01 21898024]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2006-10-27 434528]
"NvMediaCenter"="NvMCTray.dll" [2011-10-08 203072]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-10-08 16744256]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-11-13 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"d:\\backup\\Program Files\\Curious Labs\\Poser 6\\Poser.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\EA GAMES\\Medal of Honor Pacific Assault™\\mohpa.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\mafia ii\\pc\\mafia2.exe"=
"c:\\Ubisoft\\Silent Hunter 5\\sh5.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Electronic Arts\\BioWare\\Star Wars - The Old Republic\\swtor\\retailclient\\swtor.exe"=
"c:\\Program Files\\Electronic Arts\\BioWare\\Star Wars - The Old Republic\\launcher.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
"5353:UDP"= 5353:UDP:Bonjour Port 5353
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [10/3/2010 04:11 PM 691696]
R0 tdrpman140;Acronis Try&Decide and Restore Points filter (build 140);c:\windows\system32\drivers\tdrpm140.sys [4/17/2011 12:41 PM 971168]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2/17/2010 12:25 PM 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 12:41 PM 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [6/29/2010 11:48 AM 116608]
R2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2/24/2010 04:22 AM 185472]
R2 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [3/15/2012 03:21 PM 2560]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [12/18/2011 01:21 PM 2253120]
R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.sys [3/18/2010 08:39 PM 99416]
R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.sys [3/18/2010 08:39 PM 555096]
R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.sys [3/18/2010 08:39 PM 566360]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [10/25/2010 10:50 AM 47360]
S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;\??\c:\program files\VMLaunch\BuddyVM.sys --> c:\program files\VMLaunch\BuddyVM.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 02:16 PM 130384]
S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.sys [3/18/2010 08:39 PM 99416]
S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.sys [3/18/2010 08:39 PM 555096]
S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.sys [3/18/2010 08:39 PM 100952]
S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.sys [3/18/2010 08:39 PM 100952]
S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.sys [3/18/2010 08:39 PM 566360]
S3 jfdcd;jfdcd;\??\c:\docume~1\Chris\LOCALS~1\Temp\jfdcd.sys --> c:\docume~1\Chris\LOCALS~1\Temp\jfdcd.sys [?]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [4/14/2008 05:42 AM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 02:16 PM 753504]
S4 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [4/30/2010 04:44 PM 79360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
FF - ProfilePath - c:\documents and settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - user.js: signed.applets.codebase_principal_support - true
/* To avoid the user interaction, add the following lines: */
FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_YAEL.id - hxxp://yael.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_LHOST.id - hxxp://localhost/
/* GLDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GLDE.id - hxxp://gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WGLDE.id - hxxp://www.gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GLDEINT.id - hxxp://glde-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGLDE.id - hxxps://gamesflatrate.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSGLDE.id - hxxps://www.gamesflatrate.de/
/* BGFR */
FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BGFR.id - hxxp://linternaute.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBGFR.id - hxxps://linternaute.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BGFRINT.id - hxxp://bgfr-int.metaboli.fr/
/* BILD */
FF - user.js: capability.principal.codebase.YummyPlayer_BILD.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BILD.id - hxxp://bild.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBILD.id - hxxps://bild.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BILDINT.id - hxxp://bild-int.metaboli.fr/
/* BTUK */
FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BTUK.id - hxxp://btvision.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SBTUK.id - hxxps://btvision.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_BTUKINT.id - hxxp://bt-int.metaboli.fr/
/* CLIC */
FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CLIC.id - hxxp://clubic.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCLIC.id - hxxps://clubic.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CLICINT.id - hxxp://clic-int.metaboli.fr/
/* COUK */
FF - user.js: capability.principal.codebase.YummyPlayer_COUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_COUK.id - hxxp://metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WCOUK.id - hxxp://www.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSCOUK.id - hxxps://www.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCOUK.id - hxxps://metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_COUKINT.id - hxxp://uk-int.metaboli.fr/
/* MEDE */
FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDE.id - hxxp://metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WMEDE.id - hxxp://www.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDE.id - hxxps://metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDEINT.id - hxxp://de-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSMEDE.id - hxxps://www.metaboli.de/
/* CUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.id - hxxp://custompc.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.id - hxxps://custompc.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.id - hxxp://cuuk-int.metaboli.fr/
/* EUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_EUUK.id - hxxp://eurogamer.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SEUUK.id - hxxps://eurogamer.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_EUUKINT.id - hxxp://euuk-int.metaboli.fr/
/* FUNR */
FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FUNR.id - hxxp://fun.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFUNR.id - hxxps://fun.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FUNRINT.id - hxxp://fun-int.metaboli.fr/
/* GONE */
FF - user.js: capability.principal.codebase.YummyPlayer_GONE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GONE.id - hxxp://gameone.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGONE.id - hxxps://gameone.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GONEINT.id - hxxp://gone-int.metaboli.fr/
/* GUDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GUDE.id - hxxp://gamerunlimited.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGUDE.id - hxxps://gamerunlimited.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GUDEINT.id - hxxp://gude-int.metaboli.fr/
/* META */
FF - user.js: capability.principal.codebase.YummyPlayer_META.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_META.id - hxxp://metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WMETA.id - hxxp://www.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMETA.id - hxxps://metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WSMETA.id - hxxps://www.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT.id - hxxp://fr-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_METAINT2.id - hxxp://www.preprod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMETAINT2.id - hxxp://www.preprod.metaboli.fr/
/* MNDE */
FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNDE.id - hxxp://livegames.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNDE.id - hxxps://livegames.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNDEINT.id - hxxp://msde-int.metaboli.fr/
/* MNFR */
FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNFR.id - hxxp://livegames.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNFR.id - hxxps://livegames.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNFRINT.id - hxxp://msfr-int.metaboli.fr/
/* MNUK */
FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNUK.id - hxxp://livegames.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNUK.id - hxxps://livegames.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNUKINT.id - hxxp://msuk-int.metaboli.fr/
/* NCNU */
FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NCNU.id - hxxp://numericable.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNCNU.id - hxxps://numericable.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NCNUINT.id - hxxp://ncnu-int.metaboli.fr/
/* QPUK */
FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_QPUK.id - hxxp://quintplay.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SQPUK.id - hxxps://quintplay.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_QPUKINT.id - hxxp://qpuk-int.metaboli.fr/
/* SFFR */
FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFR.id - hxxp://jeux-pc.sfr.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFR.id - hxxps://jeux-pc.sfr.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRM.id - hxxp://sfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSFFRM.id - hxxps://sfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFFRINT.id - hxxp://sfr-int.metaboli.fr/
/* SPDE */
FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPDE.id - hxxp://spieletipps.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSPDE.id - hxxps://spieletipps.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPDEINT.id - hxxp://spde-int.metaboli.fr/
/* WOJ_ */
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_.id - hxxp://woj-prod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_.id - hxxps://woj-prod.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_INT.id - hxxp://woj-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_INT.id - hxxps://woj-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PP.id - hxxp://woj-pp.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PP.id - hxxps://woj-pp.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_PPINT.id - hxxp://woj-int.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_PPINT.id - hxxps://woj-int.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_2.id - hxxp://preprod-god.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_2.id - hxxps://preprod-god.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WOJ_3.id - hxxp://prod.jeu.orange.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWOJ_3.id - hxxps://prod.jeu.orange.fr/
user_pref(capability.principal.codebase.YummyPlayer_XX0001.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0001.id,hxxp://www.neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0002.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0002.id,hxxps://www.neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0003.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0003.id,hxxp://neufgame.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0004.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0004.id,hxxp://ad.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0005.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0005.id,hxxps://ad.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0006.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0006.id,hxxp://ads.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0007.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0007.id,hxxps://ads.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0008.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0008.id,hxxp://ads.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0009.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0009.id,hxxps://ads.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0010.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0010.id,hxxp://ads.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0011.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0011.id,hxxps://ads.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0012.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0012.id,hxxp://ag.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0013.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0013.id,hxxps://ag.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0014.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0014.id,hxxp://alice.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0015.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0015.id,hxxps://alice.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0016.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0016.id,hxxp://allocine.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0017.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0017.id,hxxps://allocine.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0018.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0018.id,hxxp://am.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0019.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0019.id,hxxps://am.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0020.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0020.id,hxxp://aol.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0021.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0021.id,hxxps://aol.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0022.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0022.id,hxxp://bc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0023.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0023.id,hxxps://bc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0024.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0024.id,hxxp://linternaute.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0025.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0025.id,hxxps://linternaute.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0026.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0026.id,hxxp://bild.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0027.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0027.id,hxxps://bild.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0028.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0028.id,hxxp://btvision.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0029.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0029.id,hxxps://btvision.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0030.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0030.id,hxxp://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0031.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0031.id,hxxp://cg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0032.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0032.id,hxxps://cg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0033.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0033.id,hxxp://cibleclick.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0034.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0034.id,hxxps://cibleclick.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0035.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0035.id,hxxp://cegetel.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0036.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0036.id,hxxps://cegetel.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0037.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0037.id,hxxp://choc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0038.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0038.id,hxxps://choc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0039.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0039.id,hxxp://cj.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0040.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0040.id,hxxps://cj.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0041.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0041.id,hxxp://cj.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0042.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0042.id,hxxps://cj.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0043.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0043.id,hxxp://cj.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0044.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0044.id,hxxps://cj.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0045.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0045.id,hxxp://cj.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0046.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0046.id,hxxps://cj.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0047.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0047.id,hxxp://metaboli.clubic.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0048.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0048.id,hxxps://metaboli.clubic.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0049.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0049.id,hxxp://metaboli.club-internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0050.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0050.id,hxxps://metaboli.club-internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0051.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0051.id,hxxp://coeur.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0052.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0052.id,hxxps://coeur.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0053.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0053.id,hxxp://come.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0054.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0054.id,hxxps://come.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0055.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0055.id,hxxp://lesaccros2.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0056.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0056.id,hxxps://lesaccros2.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0057.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0057.id,hxxp://surcouf.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0058.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0058.id,hxxps://surcouf.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0059.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0059.id,hxxp://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0060.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0060.id,hxxps://www.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0061.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0061.id,hxxp://cs.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0062.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0062.id,hxxps://cs.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0063.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0063.id,hxxp://custompc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0064.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0064.id,hxxps://custompc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0065.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0065.id,hxxp://cvg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0066.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0066.id,hxxps://cvg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0067.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0067.id,hxxp://daooda.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0068.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0068.id,hxxps://daooda.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0069.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0069.id,hxxp://daooda.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0070.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0070.id,hxxps://daooda.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0071.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0071.id,hxxp://daooda.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0072.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0072.id,hxxps://daooda.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0073.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0073.id,hxxp://digitaldownload.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0074.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0074.id,hxxps://digitaldownload.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0075.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0075.id,hxxp://eurogamer.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0076.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0076.id,hxxps://eurogamer.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0077.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0077.id,hxxp://eurogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0078.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0078.id,hxxps://eurogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0079.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0079.id,hxxp://exagame.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0080.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0080.id,hxxps://exagame.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0081.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0081.id,hxxp://fb.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0082.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0082.id,hxxps://fb.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0083.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0083.id,hxxp://fb.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0084.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0084.id,hxxps://fb.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0085.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0085.id,hxxp://fb.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0086.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0086.id,hxxps://fb.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0087.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0087.id,hxxp://firstcoffee.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0088.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0088.id,hxxps://firstcoffee.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0089.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0089.id,hxxp://fnac.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0090.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0090.id,hxxps://fnac.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0091.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0091.id,hxxp://fox.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0092.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0092.id,hxxps://fox.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0093.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0093.id,hxxp://fox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0094.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0094.id,hxxps://fox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0095.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0095.id,hxxp://fox.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0096.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0096.id,hxxps://fox.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0097.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0097.id,hxxp://free.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0098.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0098.id,hxxps://free.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0099.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0099.id,hxxp://funsta.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0100.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0100.id,hxxps://funsta.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0101.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0101.id,hxxp://funsta.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0102.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0102.id,hxxps://funsta.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0103.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0103.id,hxxp://metaboli.funradio.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0104.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0104.id,hxxps://metaboli.funradio.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0105.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0105.id,hxxp://fastweb.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0106.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0106.id,hxxps://fastweb.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0107.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0107.id,hxxp://god1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0108.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0108.id,hxxps://god1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0109.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0109.id,hxxp://god2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0110.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0110.id,hxxps://god2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0111.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0111.id,hxxp://god3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0112.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0112.id,hxxps://god3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0113.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0113.id,hxxp://gamona.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0114.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0114.id,hxxps://gamona.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0115.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0115.id,hxxp://giga.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0116.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0116.id,hxxps://giga.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0117.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0117.id,hxxp://gameseek.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0118.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0118.id,hxxps://gameseek.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0119.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0119.id,hxxp://www.gamesflatrate.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0120.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0120.id,hxxps://www.gamesflatrate.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0121.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0121.id,hxxp://games24.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0122.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0122.id,hxxps://games24.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0123.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0123.id,hxxp://ondemand.game.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0124.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0124.id,hxxps://ondemand.game.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0125.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0125.id,hxxp://google.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0126.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0126.id,hxxps://google.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0127.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0127.id,hxxp://google.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0128.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0128.id,hxxps://google.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0129.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0129.id,hxxp://gameone.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0130.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0130.id,hxxps://gameone.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0131.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0131.id,hxxp://google.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0132.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0132.id,hxxps://google.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0133.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0133.id,hxxp://goog.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0134.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0134.id,hxxps://goog.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0135.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0135.id,hxxp://google.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0136.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0136.id,hxxps://google.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0137.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0137.id,hxxp://gameplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0138.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0138.id,hxxps://gameplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0139.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0139.id,hxxp://gamesonradar.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0140.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0140.id,hxxps://gamesonradar.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0141.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0141.id,hxxp://gameshadow.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0142.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0142.id,hxxps://gameshadow.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0143.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0143.id,hxxp://gametap.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0144.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0144.id,hxxps://gametap.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0145.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0145.id,hxxp://gametap2.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0146.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0146.id,hxxps://gametap2.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0147.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0147.id,hxxp://gamespot.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0148.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0148.id,hxxps://gamespot.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0149.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0149.id,hxxp://gamerunlimited.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0150.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0150.id,hxxps://gamerunlimited.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0151.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0151.id,hxxp://guts.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0152.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0152.id,hxxps://guts.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0153.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0153.id,hxxp://gameswelt.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0154.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0154.id,hxxps://gameswelt.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0155.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0155.id,hxxp://gmx.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0156.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0156.id,hxxps://gmx.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0157.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0157.id,hxxp://hoaxbuster.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0158.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0158.id,hxxps://hoaxbuster.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0159.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0159.id,hxxp://incgamers.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0160.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0160.id,hxxps://incgamers.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0161.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0161.id,hxxp://imbogames.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0162.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0162.id,hxxps://imbogames.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0163.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0163.id,hxxp://ja.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0164.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0164.id,hxxps://ja.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0165.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0165.id,hxxp://janews.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0166.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0166.id,hxxps://janews.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0167.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0167.id,hxxp://jvfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0168.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0168.id,hxxps://jvfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0169.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0169.id,hxxp://jeux-pc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0170.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0170.id,hxxps://jeux-pc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0171.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0171.id,hxxp://kelkoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0172.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0172.id,hxxps://kelkoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0173.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0173.id,hxxp://gamekult.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0174.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0174.id,hxxps://gamekult.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0175.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0175.id,hxxp://ld.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0176.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0176.id,hxxps://ld.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0177.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0177.id,hxxp://leguide.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0178.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0178.id,hxxps://leguide.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0179.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0179.id,hxxp://leguide.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0180.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0180.id,hxxps://leguide.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0181.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0181.id,hxxp://leguide.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0182.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0182.id,hxxps://leguide.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0183.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0183.id,hxxp://leguide.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0184.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0184.id,hxxps://leguide.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0185.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0185.id,hxxp://jeuvideo.m6jeux.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0186.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0186.id,hxxps://jeuvideo.m6jeux.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0187.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0187.id,hxxp://magcity.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0188.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0188.id,hxxps://magcity.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0189.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0189.id,hxxp://medion.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0190.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0190.id,hxxps://medion.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0191.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0191.id,hxxp://medion.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0192.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0192.id,hxxps://medion.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0193.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0193.id,hxxp://www.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0194.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0194.id,hxxps://www.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0195.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0195.id,hxxp://medion.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0196.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0196.id,hxxps://medion.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0197.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0197.id,hxxp://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0198.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0198.id,hxxps://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0199.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0199.id,hxxp://www.metaboli.es);
user_pref(capability.principal.codebase.YummyPlayer_XX0200.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0200.id,hxxp://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0201.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0201.id,hxxps://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0202.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0202.id,hxxp://www.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0203.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0203.id,hxxp://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0204.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0204.id,hxxps://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0205.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0205.id,hxxp://www.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0206.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0206.id,hxxp://www.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0207.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0207.id,hxxps://www.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0208.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0208.id,hxxp://mirago.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0209.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0209.id,hxxps://mirago.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0210.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0210.id,hxxp://msn-games.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0211.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0211.id,hxxps://msn-games.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0212.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0212.id,hxxp://msn-jeux.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0213.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0213.id,hxxps://msn-jeux.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0214.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0214.id,hxxp://msn-games.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0215.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0215.id,hxxps://msn-games.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0216.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0216.id,hxxp://multiplayer.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0217.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0217.id,hxxps://multiplayer.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0218.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0218.id,hxxp://msn.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0219.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0219.id,hxxps://msn.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0220.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0220.id,hxxp://msn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0221.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0221.id,hxxps://msn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0222.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0222.id,hxxp://metaboli.msn.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0223.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0223.id,hxxps://metaboli.msn.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0224.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0224.id,hxxp://msn.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0225.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0225.id,hxxps://msn.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0226.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0226.id,hxxp://miva.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0227.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0227.id,hxxps://miva.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0228.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0228.id,hxxp://miva.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0229.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0229.id,hxxps://miva.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0230.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0230.id,hxxp://miva.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0231.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0231.id,hxxps://miva.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0232.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0232.id,hxxp://maxim.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0233.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0233.id,hxxps://maxim.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0234.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0234.id,hxxp://modulonet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0235.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0235.id,hxxps://modulonet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0236.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0236.id,hxxp://ncn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0237.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0237.id,hxxps://ncn.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0238.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0238.id,hxxp://news.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0239.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0239.id,hxxps://news.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0240.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0240.id,hxxp://news.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0241.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0241.id,hxxps://news.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0242.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0242.id,hxxp://news.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0243.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0243.id,hxxps://news.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0244.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0244.id,hxxp://news.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0245.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0245.id,hxxps://news.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0246.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0246.id,hxxp://metaboli.noos.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0247.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0247.id,hxxps://metaboli.noos.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0248.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0248.id,hxxp://newprice.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0249.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0249.id,hxxps://newprice.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0250.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0250.id,hxxp://onlyplanet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0251.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0251.id,hxxps://onlyplanet.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0252.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0252.id,hxxp://orange.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0253.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0253.id,hxxps://orange.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0254.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0254.id,hxxp://onlinewelten.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0255.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0255.id,hxxps://onlinewelten.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0256.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0256.id,hxxp://playart1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0257.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0257.id,hxxps://playart1.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0258.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0258.id,hxxp://playart2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0259.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0259.id,hxxps://playart2.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0260.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0260.id,hxxp://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0261.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0261.id,hxxps://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0262.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0262.id,hxxp://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0263.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0263.id,hxxps://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0264.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0264.id,hxxp://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0265.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0265.id,hxxps://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0266.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0266.id,hxxp://playart3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0267.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0267.id,hxxps://playart3.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0268.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0268.id,hxxp://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0269.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0269.id,hxxps://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0270.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0270.id,hxxp://playart5.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0271.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0271.id,hxxps://playart5.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0272.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0272.id,hxxp://playart6.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0273.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0273.id,hxxps://playart6.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0274.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0274.id,hxxp://sevengamesbe.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0275.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0275.id,hxxps://sevengamesbe.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0276.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0276.id,hxxp://sevengames.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0277.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0277.id,hxxps://sevengames.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0278.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0278.id,hxxp://sevengames.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0279.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0279.id,hxxps://sevengames.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0280.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0280.id,hxxp://sevengamesnl.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0281.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0281.id,hxxps://sevengamesnl.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0282.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0282.id,hxxp://sevengamesno.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0283.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0283.id,hxxps://sevengamesno.metaboli.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0284.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0284.id,hxxp://sevengames.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0285.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0285.id,hxxps://sevengames.metaboli.se);
user_pref(capability.principal.codebase.YummyPlayer_XX0286.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0286.id,hxxp://playart8.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0287.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0287.id,hxxps://playart8.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0288.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0288.id,hxxp://playart9.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0289.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0289.id,hxxps://playart9.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0290.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0290.id,hxxp://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0291.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0291.id,hxxps://packardbell.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0292.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0292.id,hxxp://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0293.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0293.id,hxxps://packardbell.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0294.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0294.id,hxxp://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0295.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0295.id,hxxps://packardbell.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0296.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0296.id,hxxp://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0297.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0297.id,hxxps://packardbell.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0298.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0298.id,hxxp://puntaeclicca.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0299.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0299.id,hxxps://puntaeclicca.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0300.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0300.id,hxxp://pg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0301.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0301.id,hxxps://pg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0302.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0302.id,hxxp://pg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0303.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0303.id,hxxps://pg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0304.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0304.id,hxxp://pg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0305.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0305.id,hxxps://pg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0306.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0306.id,hxxp://pg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0307.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0307.id,hxxps://pg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0308.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0308.id,hxxp://gameplazza.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0309.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0309.id,hxxps://gameplazza.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0310.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0310.id,hxxp://partner.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0311.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0311.id,hxxps://partner.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0312.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0312.id,hxxp://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0313.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0313.id,hxxps://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0314.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0314.id,hxxp://pr.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0315.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0315.id,hxxps://pr.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0316.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0316.id,hxxp://pr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0317.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0317.id,hxxps://pr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0318.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0318.id,hxxp://pro.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0319.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0319.id,hxxps://pro.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0320.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0320.id,hxxp://pr.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0321.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0321.id,hxxps://pr.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0322.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0322.id,hxxp://pixmania.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0323.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0323.id,hxxps://pixmania.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0324.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0324.id,hxxp://quintplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0325.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0325.id,hxxps://quintplay.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0326.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0326.id,hxxp://rap.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0327.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0327.id,hxxps://rap.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0328.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0328.id,hxxp://videogamesondemand.rossoalice.alice.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0329.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0329.id,hxxps://videogamesondemand.rossoalice.alice.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0330.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0330.id,hxxp://metaboli.rtl.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0331.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0331.id,hxxps://metaboli.rtl.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0332.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0332.id,hxxp://rueducommerce.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0333.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0333.id,hxxps://rueducommerce.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0334.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0334.id,hxxp://sat1spiele.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0335.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0335.id,hxxps://sat1spiele.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0336.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0336.id,hxxp://sfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0337.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0337.id,hxxps://sfr.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0338.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0338.id,hxxp://sg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0339.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0339.id,hxxps://sg.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0340.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0340.id,hxxp://sg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0341.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0341.id,hxxps://sg.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0342.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0342.id,hxxp://sg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0343.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0343.id,hxxps://sg.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0344.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0344.id,hxxp://sg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0345.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0345.id,hxxps://sg.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0346.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0346.id,hxxp://shopping.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0347.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0347.id,hxxps://shopping.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0348.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0348.id,hxxp://shopping.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0349.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0349.id,hxxps://shopping.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0350.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0350.id,hxxp://shoot.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0351.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0351.id,hxxps://shoot.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0352.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0352.id,hxxp://shopping.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0353.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0353.id,hxxps://shopping.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0354.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0354.id,hxxp://spieletipps.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0355.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0355.id,hxxps://spieletipps.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0356.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0356.id,hxxp://sqoops.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0357.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0357.id,hxxps://sqoops.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0358.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0358.id,hxxp://tiscali.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0359.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0359.id,hxxps://tiscali.metaboli.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0360.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0360.id,hxxp://tradedoubler.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0361.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0361.id,hxxps://tradedoubler.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0362.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0362.id,hxxp://metaboli.tele2internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0363.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0363.id,hxxps://metaboli.tele2internet.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0364.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0364.id,hxxp://www.metaboli.fr:8889);
user_pref(capability.principal.codebase.YummyPlayer_XX0365.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0365.id,hxxps://www.metaboli.fr:8889);
user_pref(capability.principal.codebase.YummyPlayer_XX0366.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0366.id,hxxp://telecharger.tomsgames.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0367.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0367.id,hxxps://telecharger.tomsgames.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0368.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0368.id,hxxp://to-record.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0369.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0369.id,hxxps://to-record.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0370.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0370.id,hxxp://turbo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0371.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0371.id,hxxps://turbo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0372.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0372.id,hxxp://twenga.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0373.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0373.id,hxxps://twenga.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0374.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0374.id,hxxp://vc.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0375.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0375.id,hxxps://vc.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0376.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0376.id,hxxp://vc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0377.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0377.id,hxxps://vc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0378.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0378.id,hxxp://vc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0379.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0379.id,hxxps://vc.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0380.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0380.id,hxxp://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0381.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0381.id,hxxps://videogamer.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0382.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0382.id,hxxp://jeuxvideopc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0383.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0383.id,hxxps://jeuxvideopc.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0384.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0384.id,hxxp://virginmega.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0385.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0385.id,hxxps://virginmega.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0386.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0386.id,hxxp://virginmedia.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0387.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0387.id,hxxps://virginmedia.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0388.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0388.id,hxxp://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0389.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0389.id,hxxps://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0390.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0390.id,hxxp://webde.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0391.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0391.id,hxxps://webde.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0392.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0392.id,hxxp://metaboli.libero.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0393.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0393.id,hxxps://metaboli.libero.it);
user_pref(capability.principal.codebase.YummyPlayer_XX0394.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0394.id,hxxp://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0395.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0395.id,hxxps://metaboli.goa.com);
user_pref(capability.principal.codebase.YummyPlayer_XX0396.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0396.id,hxxp://jeuxvideo.orange.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0397.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0397.id,hxxps://jeuxvideo.orange.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0398.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0398.id,hxxp://yahoo.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0399.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0399.id,hxxps://yahoo.metaboli.de);
user_pref(capability.principal.codebase.YummyPlayer_XX0400.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0400.id,hxxp://yahoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0401.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0401.id,hxxps://yahoo.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0402.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0402.id,hxxp://yahoo.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0403.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0403.id,hxxps://yahoo.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0404.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0404.id,hxxp://yahooclic.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0405.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0405.id,hxxps://yahooclic.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0406.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0406.id,hxxp://zanox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0407.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0407.id,hxxps://zanox.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0408.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0408.id,hxxp://zavvi.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0409.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0409.id,hxxps://zavvi.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0410.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0410.id,hxxp://go.metaboli.fr);
user_pref(capability.principal.codebase.YummyPlayer_XX0411.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0411.id,hxxps://go.metaboli.fr);
/* added 17-03-09 */
user_pref(capability.principal.codebase.YummyPlayer_XX0412.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0412.id,hxxp://cnet.metaboli.co.uk);
user_pref(capability.principal.codebase.YummyPlayer_XX0413.granted,UniversalXPConnect);
user_pref(capability.principal.codebase.YummyPlayer_XX0413.id,hxxps://cnet.metaboli.co.uk);
/* GWDE */
FF - user.js: capability.principal.codebase.YummyPlayer_GWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GWDE.id - hxxp://gwde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_GWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GWDEINT.id - hxxp://gwde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDE.id - hxxps://gwde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGWDEINT.id - hxxps://gwde.int.metaboli.fr/
/* GMUK */
FF - user.js: capability.principal.codebase.YummyPlayer_GMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMUK.id - hxxp://game.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_GMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMUKINT.id - hxxp://gmuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUK.id - hxxps://game.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMUKINT.id - hxxps://gmuk.int.metaboli.fr/
/* CNET */
FF - user.js: capability.principal.codebase.YummyPlayer_CNET.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CNET.id - hxxp://cnet.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CNETINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CNETINT.id - hxxp://cnet.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCNET.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCNET.id - hxxps://cnet.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCNETINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCNETINT.id - hxxps://cnet.int.metaboli.fr/
/* IGUK */
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK.id - hxxp://iguk.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_IGUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUKINT.id - hxxp://iguk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK.id - hxxps://iguk.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUKINT.id - hxxps://iguk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGUK2.id - hxxp://Incgamers.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SIGUK2.id - hxxps://Incgamers.metaboli.co.uk/
/* SKFR */
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR.id - hxxp://skfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFRINT.id - hxxp://skfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR.id - hxxps://skfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFRINT.id - hxxps://skfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR2.id - hxxp://Skyrock.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR2.id - hxxps://Skyrock.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SKFR3.id - hxxp://ondemand.premium.games.skyrock.net/
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR3.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSKFR3.id - hxxps://ondemand.premium.games.skyrock.net/
FF - user.js: capability.principal.codebase.YummyPlayer_FREEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_FREEINT.id - hxxp://free-int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SFREEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SFREEINT.id - hxxps://free-int.metaboli.fr/
/* GNUK */
FF - user.js: capability.principal.codebase.YummyPlayer_GNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GNUK.id - hxxp://gamestation.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SGNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGNUK.id - hxxps://gamestation.metaboli.co.uk/
/* NEW MSN UK DE */
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNUK.id - hxxp://playnow.tech.uk.msn.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNUK.id - hxxps://playnow.tech.uk.msn.com/
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_NEWMNDE.id - hxxp://pc-spiele-flatrate.msn.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SNEWMNDE.id - hxxps://pc-spiele-flatrate.msn.de/
/* VMUK */
FF - user.js: capability.principal.codebase.YummyPlayer_VMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_VMUK.id - hxxp://virginmedia.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUK.id - hxxps://virginmedia.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_VMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_VMUKINT.id - hxxp://vmuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SVMUKINT.id - hxxps://vmuk.int.metaboli.fr/
/* WDDE (web de) INT */
FF - user.js: capability.principal.codebase.YummyPlayer_WDDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_WDDEINT.id - hxxp://wdde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SWDDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SWDDEINT.id - hxxps://wdde.int.metaboli.fr/
/* ORUK */
FF - user.js: capability.principal.codebase.YummyPlayer_ORUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ORUK.id - hxxp://orange.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SORUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SORUK.id - hxxps://orange.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_ORUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ORUKINT.id - hxxp://oruk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SORUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SORUKINT.id - hxxps://oruk.int.metaboli.fr/
/* MEDI int */
FF - user.js: capability.principal.codebase.YummyPlayer_MEDIINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MEDIINT.id - hxxp://medi.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDIINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMEDIINT.id - hxxps://medi.int.metaboli.fr/
/* SAT1 */
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1.id - hxxp://spieleflatrate.sat1.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1.id - hxxps://spieleflatrate.sat1.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SAT1INT.id - hxxp://sat1.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1INT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSAT1INT.id - hxxps://sat1.int.metaboli.fr/
/* OWDE */
FF - user.js: capability.principal.codebase.YummyPlayer_OWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OWDE.id - hxxp://onlinewelten.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDE.id - hxxps://onlinewelten.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_OWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OWDEINT.id - hxxp://owde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOWDEINT.id - hxxps://owde.int.metaboli.fr/
/* GRAD INT */
FF - user.js: capability.principal.codebase.YummyPlayer_GRADINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GRADINT.id - hxxp://grad.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SGRADINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGRADINT.id - hxxps://grad.int.metaboli.fr/
/* RTLN */
FF - user.js: capability.principal.codebase.YummyPlayer_RTLN.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_RTLN.id - hxxp://rtl.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLN.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLN.id - hxxps://rtl.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_RTLNINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_RTLNINT.id - hxxp://rtln.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLNINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SRTLNINT.id - hxxps://rtln.int.metaboli.fr/
/* MNIT */
FF - user.js: capability.principal.codebase.YummyPlayer_MNIT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNIT.id - hxxp://pcgames.msn.it/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNIT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNIT.id - hxxps://pcgames.msn.it/
FF - user.js: capability.principal.codebase.YummyPlayer_MNITINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNITINT.id - hxxp://mnit.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNITINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNITINT.id - hxxps://mnit.int.metaboli.fr/
/* CUUK */
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUK.id - hxxp://atheneum.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUK.id - hxxps://atheneum.metaboli.co.uk/
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CUUKINT.id - hxxp://cuuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUKINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCUUKINT.id - hxxps://cuuk.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_CCUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_CCUK2.id - hxxp://atheneum.uk.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SCCUK2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCCUK2.id - hxxps://atheneum.uk.com/
/* SCDE */
FF - user.js: capability.principal.codebase.YummyPlayer_SCDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SCDE.id - hxxp://schueler.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SSCDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SSCDE.id - hxxps://schueler.metaboli.de/
/* MNSE */
FF - user.js: capability.principal.codebase.YummyPlayer_MNSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_MNSE.id - hxxp://spela.pcspel.msn.se/
FF - user.js: capability.principal.codebase.YummyPlayer_SMNSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SMNSE.id - hxxps://spela.pcspel.msn.se/
/* GMSE */
FF - user.js: capability.principal.codebase.YummyPlayer_GMSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GMSE.id - hxxp://game.metaboli.se/
FF - user.js: capability.principal.codebase.YummyPlayer_SGMSE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGMSE.id - hxxps://game.metaboli.se/
/* OHFR */
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR.id - hxxp://jeuxpc.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR.id - hxxps://jeuxpc.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_OHFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFRINT.id - hxxp://ohfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFRINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFRINT.id - hxxps://ohfr.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHFR2.id - hxxp://ohfr.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHFR2.id - hxxps://ohfr.metaboli.fr/
/* OHDE */
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE.id - hxxp://pcspiele.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE.id - hxxps://pcspiele.orange.ch/
FF - user.js: capability.principal.codebase.YummyPlayer_OHDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDEINT.id - hxxp://ohde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDEINT.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDEINT.id - hxxps://ohde.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_OHDE2.id - hxxp://ohde.metaboli.de/
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE2.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SOHDE2.id - hxxps://ohde.metaboli.de/
/* GAMETAP */
FF - user.js: capability.principal.codebase.YummyPlayer_GTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_GTUS.id - hxxp://www.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SGTUS.id - hxxps://www.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_IGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IGTUS.id - hxxp://integ.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_ISGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_ISGTUS.id - hxxps://integ.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_IIGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IIGTUS.id - hxxp://gtus.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_IISGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_IISGTUS.id - hxxps://gtus.int.metaboli.fr/
FF - user.js: capability.principal.codebase.YummyPlayer_PPGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPGTUS.id - hxxp://preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPSGTUS.id - hxxps://preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.id - hxxp://unlimited-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.id - hxxps://unlimited-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_PPPSGTUS.id - hxxp://retro-preprod.gametap.com/
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.granted - UniversalXPConnect
FF - user.js: capability.principal.codebase.YummyPlayer_SPPPSGTUS.id - hxxps://retro-preprod.gametap.com/
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-06627643.sys
AddRemove-DB BR 38 with "Wannentender" - c:\documents and settings\CHRIS\DESKTOP\GERMAN STOCK STEAM\DB38_Uninstal.exe
AddRemove-Fs Etr480 - c:\windows\Fs Etr480 \uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-05-05 15:27
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \E07E2E0BA8832060]
"1"=hex:59,ee,b1,0b,e7,cb,ba,22,10,c4,11,95,b8,27,ac,e2,d0,7f,55,22,bd,75,c1,
b4,b7,49,b9,16,b4,4c,81,20,bd,94,24,2d,a4,c1,d4,54
"2"=hex:55,1f,8a,dc,f0,b0,19,f4,38,b9,76,f2,65,2c,c7,f5,3b,6e,27,e9,a0,e7,a8,
2c
"3"=hex:59,ee,b1,0b,e7,cb,ba,22,10,c4,11,95,b8,27,ac,e2,d0,7f,55,22,bd,75,c1,
b4,4c,21,70,f3,81,0b,5f,da,13,46,a0,ca,b9,83,ed,3e,85,53,a4,d2,bc,7a,d9,b2,\
.
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \E07E2E0BA8832060\812AB6DF785DC81371F7CEBBF3486B36]
"1"=hex:7c,26,85,e2,b6,72,1a,ee,ac,b2,e6,d4,35,ae,84,6d,ca,a1,18,51,07,3c,35,
f8
"2"=hex:14,ce,87,8d,79,74,ee,b2
"3"=hex:de,be,e5,52,19,e9,de,9b,e6,8e,67,6a,8f,ad,dc,62,6c,5d,70,35,47,ed,f7,
41,02,12,02,ca,a5,a3,e9,9b,f3,53,e3,26,59,7d,d2,b7,6e,17,57,ab,bc,b5,1c,f8,\
"4"=hex:2f,ad,a2,e7,8a,bf,05,5e
"5"=hex:bf,e5,23,7b,b0,66,d6,fc,b8,e8,6b,a0,96,52,f7,32,80,09,8f,24,b7,b3,55,
1a,98,d1,47,16,02,43,61,1c,b9,d5,8f,2a,7b,81,b1,fb,95,22,f8,b3,2c,53,9d,ae,\
"6"=hex:7c,26,85,e2,b6,72,1a,ee,dc,2c,b3,1f,4a,c5,61,cf,75,ba,92,5e,19,17,22,
1e,ed,d0,78,61,a8,b2,e2,df,90,a1,d7,0b,8d,de,a6,56,01,a3,35,01,e3,17,41,55,\
"7"=hex:71,0b,18,e0,11,38,27,ce,ea,13,d4,c2,2b,5e,30,76,6d,8f,2e,5f,89,e6,1e,
b9,5f,7a,b6,b2,22,cd,de,66,df,14,e1,4e,6f,fb,20,d4,72,05,68,95,c4,22,f5,e6,\
"8"=hex:f8,6e,66,d3,34,5e,51,d1,cf,e5,46,ce,ef,61,d0,d3,82,33,e8,cc,a2,0f,1c,
cf,5e,98,2a,19,c3,4b,a0,04,b5,35,d2,55,2c,e9,cf,2e,4c,40,1c,84,8e,58,12,1a,\
"9"=hex:81,20,8f,ab,28,6a,52,9c
"18"=hex:70,56,26,33,e3,20,f8,ab
"10"=hex:81,20,8f,ab,28,6a,52,9c
"11"=hex:81,20,8f,ab,28,6a,52,9c
"12"=hex:15,27,21,9e,50,8c,c2,69,c0,33,34,37,24,57,1a,ef,bf,20,92,96,25,e8,a5,
51,ed,4f,87,b7,5b,dd,36,c4,1e,67,07,32,3e,f1,43,48,cb,73,93,eb,5f,c9,d8,b0,\
"13"=hex:e0,10,cd,4f,0b,b2,8e,c7,2c,6e,4a,f6,fd,c1,30,ae,bc,05,2b,57,12,58,29,
85
"14"=hex:c7,cf,c0,2f,91,9f,c5,f8
"24"=hex:81,20,8f,ab,28,6a,52,9c
"26"=hex:81,20,8f,ab,28,6a,52,9c
"27"=hex:81,20,8f,ab,28,6a,52,9c
"19"=hex:95,df,d3,8f,75,8d,db,71,d9,98,49,3b,b2,70,db,f4
"22"=hex:81,20,8f,ab,28,6a,52,9c
"15"=hex:39,5e,65,68,05,ce,0b,3b,08,0e,42,0e,a0,d4,7f,9d,a8,1c,58,f1,df,ec,a0,
99,de,b4,c7,7e,07,7a,38,0b,0d,86,89,ca,f9,92,9b,75,d7,4e,f8,5a,50,f7,1e,00,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(628)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
.
- - - - - - - > 'explorer.exe'(2524)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\savedump.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\windows\system32\RunDLL32.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\nHancer\nHancerService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2012-05-05 15:31:18 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-05 21:31
ComboFix2.txt 2012-05-05 19:35
ComboFix3.txt 2012-04-17 07:52
.
Pre-Run: 42,785,288,192 bytes free
Post-Run: 42,781,396,992 bytes free
.
- - End Of File - - 78F1BC85A7968F22AAD83C3BBFB589F4
Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

#7 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:03:41 AM

Posted 05 May 2012 - 05:32 PM

Great work.
Combofix got rid of some baddies.



Please carefully follow my next set of steps:



Please download Malwarebytes Anti-Malware 1.61.0.1400 Final and save it to your desktop.
MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you.
Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
    For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.




  • Please download OTL from the link below:
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • OTL should now start. Change the following settings:
    - Click on Scan All Users checkbox given at the top.Posted Image
    - Under File Scans, change File age to 90
    - Check the boxes beside LOP Check and Purity Check
  • Copy and Paste the following code into the Posted Image textbox.
    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    "%WinDir%\$NtUninstallKB*$." /30
    C:\Program Files\Common Files\ComObjects\*.* /s
    %SYSTEMDRIVE%\*.*
    %USERPROFILE%\*.*
    %USERPROFILE%\Application Data\*.*
    %USERPROFILE%\Local Settings\Application Data\*.*
    %AllUsersProfile%\*.*
    %AllUsersProfile%\Application Data\*.*
    %USERPROFILE%\My Documents\*.*
    %CommonProgramFiles%\*.*
    %PROGRAMFILES%\*.*
    %systemroot%\system32\config\systemprofile\*.*
    %windir%\ServiceProfiles\LocalService\AppData\Local\Temp\*.*
    %windir%\ServiceProfiles\NetworkService\AppData\Local\Temp\*.*
    %windir%\temp*.*
    %windir%\system32\*. 
    %Temp%\smtmp\1\*.*
    %Temp%\smtmp\2\*.*
    %Temp%\smtmp\3\*.*
    %Temp%\smtmp\4\*.*
    %systemroot%\system32\DBBK\*.* /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /90
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\system32\Spool\prtprocs\w32x86\*.dll
    %systemroot%\*. /rp /s
    %systemroot%\assembly\tmp\*.* /S /MD5
    %systemroot%\assembly\temp\*.* /S /MD5
    %systemroot%\assembly\GAC_32\*.* /S /MD5
    %systemroot%\assembly\GAC_MSIL\*.* /S /MD5
    >C:\commands.txt echo list vol /raw /hide /c
    /wait
    >C:\DiskReport.txt diskpart /s C:\commands.txt /raw /hide /c
    /wait
    type c:\diskreport.txt /c
    /wait
    erase c:\commands.txt /hide /c
    /wait
    erase c:\diskreport.txt /hide /c
    /md5start
    smss.exe
    winlogon.exe
    services.exe
    lsass.exe
    svchost.exe
    explorer.exe
    userinit.exe
    atapi.sys
    iaStor.sys
    serial.sys
    disk.sys
    volsnap.sys
    redbook.sys
    i8042prt.sys
    afd.sys
    netbt.sys
    tcpip.sys
    ipsec.sys
    hlp.dat
    /md5stop
    
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extra.txt <-- Will be minimized


Regards,
Georgi

cXfZ4wS.png


#8 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 06:33 PM

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.05.08

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Chris :: ATHLON [administrator]

5/5/2012 04:59:14 PM
mbam-log-2012-05-05 (16-59-14).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 251505
Time elapsed: 4 minute(s), 9 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Edited by CrisGer, 05 May 2012 - 06:35 PM.

Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

#9 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 06:37 PM

OTL logfile created on: 5/5/2012 05:05:01 PM - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Documents and Settings\Chris\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.50 Gb Total Physical Memory | 1.94 Gb Available Physical Memory | 77.49% Memory free
4.34 Gb Paging File | 4.00 Gb Available in Paging File | 92.14% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298.08 Gb Total Space | 42.94 Gb Free Space | 14.41% Space Free | Partition Type: NTFS
Drive D: | 279.47 Gb Total Space | 1.18 Gb Free Space | 0.42% Space Free | Partition Type: NTFS

Computer Name: ATHLON | User Name: Chris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/05/05 16:57:01 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Chris\Desktop\OTL.exe
PRC - [2012/03/12 22:39:04 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/11/13 12:53:09 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
PRC - [2008/10/03 22:39:54 | 000,554,264 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2012/03/12 22:39:07 | 001,969,080 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011/08/28 15:19:12 | 000,093,696 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2010/07/04 15:32:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll
MOD - [2010/03/15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2012/03/15 15:21:08 | 000,002,560 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\Runservice.exe -- (LicCtrlService)
SRV - [2011/11/13 12:53:09 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2011/10/07 22:50:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/03/16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010/05/02 17:29:34 | 000,039,936 | ---- | M] (KSE - Korndφrfer Software Engineering) [Auto | Stopped] -- C:\Program Files\nHancer\nHancerService.exe -- (nHancer)
SRV - [2010/04/30 16:44:12 | 000,079,360 | ---- | M] (Creative Labs) [Disabled | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2010/02/12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Stopped] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2008/10/03 22:39:54 | 000,554,264 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2008/04/17 14:14:00 | 000,102,712 | ---- | M] (ArcSoft Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Disabled | Stopped] -- C:\Program Files\GameTap Web Player\bin\Release\X4HSX32.Sys -- (X4HSX32)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\LV561AV.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ASACPI.sys -- (MTsensor)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\LVUSBSta.sys -- (LVUSBSta)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\LVMVDrv.sys -- (LVMVDrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\LVcKap.sys -- (LVcKap)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Chris\LOCALS~1\Temp\jfdcd.sys -- (jfdcd)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a4ioo259)
DRV - File not found [Kernel | Auto | Stopped] -- C:\Program Files\VMLaunch\BuddyVM.sys -- ({09BB444F-B2E2-4009-BAF2-7B727681223E})
DRV - [2011/11/13 12:53:00 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2011/11/13 12:53:00 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2011/04/22 23:18:10 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2011/04/17 12:41:21 | 000,971,168 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\tdrpm140.sys -- (tdrpman140) Acronis Try&Decide and Restore Points filter (build 140)
DRV - [2011/04/17 12:41:19 | 000,540,000 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\timntr.sys -- (timounter)
DRV - [2011/04/17 12:41:19 | 000,044,704 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2011/04/17 12:41:15 | 000,134,272 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\snman380.sys -- (snapman380) Acronis Snapshots Manager (Build 380)
DRV - [2011/02/06 14:37:10 | 000,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011/02/06 14:37:10 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010/04/29 18:00:28 | 002,297,664 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2010/03/18 20:50:12 | 000,189,528 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\haP17v2k.sys -- (hap17v2k)
DRV - [2010/03/18 20:50:04 | 000,162,904 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\haP16v2k.sys -- (hap16v2k)
DRV - [2010/03/18 20:49:56 | 000,798,808 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2010/03/18 20:45:42 | 000,092,760 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2010/03/18 20:45:28 | 000,157,272 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2010/03/18 20:45:20 | 000,014,424 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2010/03/18 20:45:12 | 000,127,576 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2010/03/18 20:40:48 | 000,347,144 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2010/03/18 20:40:40 | 000,528,472 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2010/03/18 20:40:32 | 000,511,064 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2010/03/18 20:39:36 | 000,100,952 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTERFXFX.sys -- (CTERFXFX.SYS)
DRV - [2010/03/18 20:39:36 | 000,100,952 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTERFXFX.sys -- (CTERFXFX)
DRV - [2010/03/18 20:39:28 | 000,566,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CTSBLFX.sys -- (CTSBLFX.SYS)
DRV - [2010/03/18 20:39:28 | 000,566,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTSBLFX.sys -- (CTSBLFX)
DRV - [2010/03/18 20:39:18 | 000,555,096 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CTAUDFX.sys -- (CTAUDFX.SYS)
DRV - [2010/03/18 20:39:18 | 000,555,096 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTAUDFX.sys -- (CTAUDFX)
DRV - [2010/03/18 20:39:10 | 000,099,416 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\COMMONFX.sys -- (COMMONFX.SYS)
DRV - [2010/03/18 20:39:10 | 000,099,416 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COMMONFX.sys -- (COMMONFX)
DRV - [2010/02/24 04:22:10 | 000,185,472 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2008/08/18 18:54:00 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvgts.sys -- (nvgts)
DRV - [2008/08/01 11:36:00 | 000,054,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2008/08/01 11:36:00 | 000,022,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2008/04/14 05:51:44 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007/04/16 21:46:00 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2006/11/10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2005/05/17 17:45:08 | 000,092,800 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2003/04/19 01:32:04 | 000,004,736 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tandpl.sys -- (tandpl)
DRV - [2003/03/02 18:44:26 | 000,007,552 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\enodpl.sys -- (enodpl)
DRV - [2001/08/17 14:02:32 | 000,008,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hidgame.sys -- (hidgame)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577



IE - HKU\S-1-5-21-220523388-162531612-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-220523388-162531612-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-220523388-162531612-725345543-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-220523388-162531612-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-220523388-162531612-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "http://www.google.com"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: GameTapPlayer@gametap.com:4.3.0.5908
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: googlesharing@extension.thoughtcrime.org:0.5


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/04/08 15:48:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/04/19 20:06:49 | 000,000,000 | ---D | M]

[2010/07/11 00:54:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Extensions
[2012/04/08 15:48:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\extensions
[2010/08/17 22:24:26 | 000,000,000 | ---D | M] (GameTap) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\extensions\GameTapPlayer@gametap(2).com
[2010/10/01 02:06:37 | 000,000,000 | ---D | M] (GameTap) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\extensions\GameTapPlayer@gametap.com
[2012/04/08 15:48:54 | 000,000,000 | ---D | M] (GoogleSharing) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\extensions\googlesharing@extension.thoughtcrime.org
[2012/04/08 15:48:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\extensions\googlesharing@extension.thoughtcrime.org\chrome
[2012/04/08 15:48:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\extensions\googlesharing@extension.thoughtcrime.org\components
[2012/04/08 15:48:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\z4bp4e8o.default\extensions\googlesharing@extension.thoughtcrime.org\defaults
[2012/04/18 16:46:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/04/18 16:46:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2012/03/12 22:39:39 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/04/18 16:46:00 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2006/08/09 04:16:08 | 000,030,408 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npWebLaunch.dll
[2012/03/12 22:38:32 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/03/12 22:38:32 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2012/05/05 15:26:41 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-220523388-162531612-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-220523388-162531612-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-220523388-162531612-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-220523388-162531612-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Do Not Track Plus © Abine - {6E45F3E8-2683-4824-A6BE-08108022FB36} - C:\Program Files\DoNotTrackPlus\ScriptHost.dll (Abine)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab (SysInfo Class)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} http://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll (PCPitstop Exam)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2C0B2D02-DF33-4C85-BBA5-9640083FBAB3}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\WINDOWS\Prairie Wind.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Prairie Wind.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/06/10 12:11:08 | 000,000,000 | ---D | M] - D:\Autoruns -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 0

SafeBootMin: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} -
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

========== Files/Folders - Created Within 30 Days ==========

[2012/05/05 16:57:09 | 010,063,000 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Chris\Desktop\mbam-setup-1.61.0.1400.exe
[2012/05/05 16:56:57 | 000,595,456 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Chris\Desktop\OTL.exe
[2012/05/05 15:50:02 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012/05/05 14:21:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\Hiro Castle Textures
[2012/05/05 13:05:00 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012/05/05 13:05:00 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012/05/05 13:05:00 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012/05/05 13:05:00 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012/05/05 13:04:52 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/05/05 13:01:53 | 004,484,911 | R--- | C] (Swearware) -- C:\Documents and Settings\Chris\Desktop\ComboFix.exe
[2012/05/05 11:47:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Google
[2012/05/05 11:47:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Application Data\Google
[2012/05/05 11:45:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Google SketchUp 8
[2012/05/05 11:44:52 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2012/05/05 11:41:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\UKTS_14825_SU2TS12
[2012/05/05 11:23:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\FIX 2
[2012/05/04 22:14:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\SH4
[2012/05/04 02:27:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\WOW
[2012/05/03 11:40:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\Shining Tears and Wind
[2012/05/02 10:05:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\EMMA 2
[2012/04/21 11:44:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\New Folder
[2012/04/18 16:59:40 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Chris\Recent
[2012/04/18 16:52:11 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012/04/18 16:46:13 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012/04/18 16:46:13 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012/04/18 16:46:13 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012/04/18 16:46:13 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012/04/18 16:45:56 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012/04/18 16:24:49 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2012/04/18 16:24:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Start Menu\Programs\Revo Uninstaller
[2012/04/17 01:52:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012/04/15 16:22:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Start Menu\Programs\ƒeƒBƒ“ƒNƒ‹ƒxƒ‹
[2012/04/15 16:18:50 | 000,000,000 | ---D | C] -- C:\Program Files\TinkleBell
[2012/04/13 10:17:51 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2012/04/13 06:28:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Start Menu\Programs\Rame 1928 AUTEUR JEAN PIERRE DUVAL
[2012/04/12 13:09:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Start Menu\Programs\CF_Provence
[2012/04/09 18:41:02 | 000,070,656 | ---- | C] (Zlib) -- C:\WINDOWS\System32\zlib1.dll
[2012/04/09 18:36:09 | 000,785,920 | ---- | C] (Smaller Animals Software) -- C:\WINDOWS\System32\imgdll.dll
[2012/04/09 18:34:45 | 000,137,728 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\ijl10.dll
[2012/04/09 16:50:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Start Menu\Programs\Train Store
[2012/04/08 17:25:20 | 002,322,184 | ---- | C] (ESET) -- C:\Documents and Settings\Chris\Desktop\esetsmartinstaller_enu.exe
[2012/04/05 22:00:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\CGTax 2012
[2011/07/30 23:04:39 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Chris\Application Data\pcouffin.sys
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/05/05 16:58:17 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/05/05 16:57:34 | 010,063,000 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Chris\Desktop\mbam-setup-1.61.0.1400.exe
[2012/05/05 16:57:01 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Chris\Desktop\OTL.exe
[2012/05/05 16:53:46 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012/05/05 16:02:56 | 000,000,648 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Shortcut to SView.exe.lnk
[2012/05/05 15:57:25 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/05/05 15:57:14 | 000,001,497 | -HS- | M] () -- C:\WINDOWS\System32\mmf.sys
[2012/05/05 15:56:43 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/05/05 15:55:20 | 000,031,056 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000005-00000000-00000007-00001102-00000004-20021102}.rfx
[2012/05/05 15:55:20 | 000,031,056 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000005-00000000-00000007-00001102-00000004-20021102}.rfx
[2012/05/05 15:55:20 | 000,030,528 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000005-00000000-00000007-00001102-00000004-20021102}.rfx
[2012/05/05 15:55:20 | 000,030,528 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000005-00000000-00000007-00001102-00000004-20021102}.rfx
[2012/05/05 15:55:20 | 000,011,564 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000005-00000000-00000007-00001102-00000004-20021102}.rfx
[2012/05/05 15:26:41 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012/05/05 13:02:08 | 004,484,911 | R--- | M] (Swearware) -- C:\Documents and Settings\Chris\Desktop\ComboFix.exe
[2012/05/05 12:25:27 | 000,000,302 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2012/05/05 11:45:15 | 000,001,762 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google SketchUp 8.lnk
[2012/05/05 05:05:55 | 000,022,016 | ---- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/05/04 21:26:56 | 000,001,861 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Run Silent Hunter Wolves of the Pacific.lnk
[2012/05/04 01:06:17 | 000,285,176 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012/05/04 01:06:17 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012/05/04 01:05:10 | 000,285,176 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012/05/03 02:18:00 | 000,000,000 | ---- | M] () -- C:\FileOut.Cns
[2012/05/03 02:18:00 | 000,000,000 | ---- | M] () -- C:\FileIn.Cns
[2012/05/02 18:59:08 | 000,276,560 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/05/02 10:01:42 | 000,533,280 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/05/02 10:01:42 | 000,101,314 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/05/02 09:58:09 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/04/29 08:22:18 | 2145,386,496 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2012/04/19 01:40:38 | 000,000,275 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Shortcut to Local Disk (D).lnk
[2012/04/18 16:46:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012/04/18 16:46:00 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012/04/18 16:46:00 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012/04/18 16:46:00 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012/04/18 16:46:00 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012/04/09 18:40:38 | 000,070,656 | ---- | M] (Zlib) -- C:\WINDOWS\System32\zlib1.dll
[2012/04/09 16:05:22 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2012/04/08 17:25:31 | 002,322,184 | ---- | M] (ESET) -- C:\Documents and Settings\Chris\Desktop\esetsmartinstaller_enu.exe
[2012/04/08 15:48:10 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/04/08 15:48:10 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/05/05 16:58:17 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/05/05 16:02:56 | 000,000,648 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Shortcut to SView.exe.lnk
[2012/05/05 13:05:00 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012/05/05 13:05:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012/05/05 13:05:00 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012/05/05 13:05:00 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012/05/05 13:05:00 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012/05/05 11:45:15 | 000,001,762 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google SketchUp 8.lnk
[2012/05/04 21:26:56 | 000,001,861 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Run Silent Hunter Wolves of the Pacific.lnk
[2012/05/02 09:43:52 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2012/04/19 01:40:38 | 000,000,275 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Shortcut to Local Disk (D).lnk
[2012/04/08 15:45:36 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2012/04/08 15:26:49 | 000,179,103 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\La Jolla Beach and Tennis Club 2011.jpg
[2012/04/08 15:26:01 | 001,800,103 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Gerlach LJ BeachClub.jpg
[2012/04/08 15:26:01 | 000,211,138 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\LaJolla beach club.jpg
[2012/03/15 15:21:08 | 000,048,640 | ---- | C] () -- C:\WINDOWS\mmfs.dll
[2012/03/15 15:21:08 | 000,002,560 | ---- | C] () -- C:\WINDOWS\Runservice.exe
[2012/03/15 15:21:08 | 000,001,497 | -HS- | C] () -- C:\WINDOWS\System32\mmf.sys
[2012/03/07 16:04:38 | 000,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2012/03/01 17:06:51 | 000,000,073 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2012/01/10 17:53:19 | 000,107,520 | RHS- | C] () -- C:\WINDOWS\System32\TAKDSDecoder.dll
[2012/01/06 15:34:01 | 000,189,248 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012/01/06 15:34:01 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2011/12/21 12:26:36 | 000,114,509 | ---- | C] () -- C:\WINDOWS\unstall.exe
[2011/12/18 13:20:06 | 002,130,002 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011/12/07 22:17:00 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2011/12/02 20:34:56 | 000,000,302 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2011/11/28 09:56:00 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\eighuh.sys
[2011/11/28 09:40:13 | 000,003,558 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\intgph5w5hxi1mbo5lqn1a618l3q
[2011/11/28 09:40:13 | 000,003,558 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\intgph5w5hxi1mbo5lqn1a618l3q
[2011/11/13 04:38:01 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\kqqkoeqo.sys
[2011/10/11 14:14:21 | 000,065,793 | ---- | C] () -- C:\WINDOWS\System32\esfw8b.bin
[2011/09/29 09:45:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\EEventManager.INI
[2011/09/21 11:31:43 | 000,073,220 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
[2011/09/21 11:31:43 | 000,031,053 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern131.dat
[2011/09/21 11:31:43 | 000,029,114 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
[2011/09/21 11:31:43 | 000,027,417 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern121.dat
[2011/09/21 11:31:43 | 000,021,021 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
[2011/09/21 11:31:43 | 000,015,670 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
[2011/09/21 11:31:43 | 000,013,280 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
[2011/09/21 11:31:43 | 000,010,673 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
[2011/09/21 11:31:43 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
[2011/09/21 11:31:43 | 000,001,140 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2011/09/21 11:31:43 | 000,001,140 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2011/09/21 11:31:43 | 000,001,137 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2011/09/21 11:31:43 | 000,001,130 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2011/09/21 11:31:43 | 000,001,130 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2011/09/21 11:31:43 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2011/09/21 11:31:43 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2011/09/21 11:27:54 | 000,000,044 | ---- | C] () -- C:\WINDOWS\PERFV30V300.ini
[2011/09/15 16:33:27 | 000,354,304 | ---- | C] () -- C:\WINDOWS\System32\pythoncom27.dll
[2011/09/15 16:33:27 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\pywintypes27.dll
[2011/09/15 16:33:27 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\pythoncomloader27.dll
[2011/09/06 17:13:36 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011/09/01 23:22:24 | 000,003,247 | ---- | C] () -- C:\Documents and Settings\Chris\Application Data\glide_wrapper.zbag.ini
[2011/09/01 22:58:21 | 000,000,238 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2011/07/04 18:35:33 | 000,000,040 | ---- | C] () -- C:\WINDOWS\NAVIGMA.INI
[2011/06/28 01:31:29 | 000,004,582 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n
[2011/06/28 01:31:29 | 000,004,582 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n
[2011/05/21 04:06:41 | 000,002,862 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\747073s32x2s4it14g
[2011/05/21 04:06:41 | 000,002,862 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\747073s32x2s4it14g
[2011/04/30 18:48:46 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2011/04/30 18:48:46 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2011/04/22 02:06:49 | 000,000,233 | ---- | C] () -- C:\WINDOWS\ACTIVEJP.INI
[2011/04/19 19:59:35 | 000,006,682 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3
[2011/04/19 19:59:35 | 000,006,682 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3
[2011/04/13 09:22:12 | 000,285,176 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011/04/13 09:22:08 | 000,285,176 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011/04/13 09:22:08 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011/04/13 09:21:55 | 002,292,678 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2011/04/13 09:16:19 | 000,004,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2011/04/04 15:33:26 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\wlyfyl.sys
[2011/04/02 09:41:42 | 000,000,530 | ---- | C] () -- C:\WINDOWS\System32\tx14_ic.ini
[2011/03/22 15:47:13 | 000,007,990 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l
[2011/03/22 15:47:13 | 000,007,990 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l
[2011/02/09 13:49:53 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\mf.dll
[2011/02/05 15:59:42 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/02/01 10:40:35 | 000,178,688 | ---- | C] () -- C:\WINDOWS\UninstallLegend.exe
[2011/02/01 10:40:34 | 000,002,950 | ---- | C] () -- C:\WINDOWS\ARX_LegendEng100D.ini
[2011/01/27 16:09:06 | 000,000,040 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2011/01/13 03:24:53 | 000,035,328 | ---- | C] () -- C:\WINDOWS\UninstallPompei.exe
[2011/01/04 18:24:44 | 000,001,534 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\ss.ini
[2010/12/23 14:30:15 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/11/30 08:47:18 | 000,007,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\enodpl.sys
[2010/11/30 08:47:18 | 000,004,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\tandpl.sys
[2010/11/28 13:51:07 | 000,000,035 | ---- | C] () -- C:\WINDOWS\Caesar2.ini
[2010/10/25 10:50:47 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Chris\Application Data\pcouffin.cat
[2010/10/25 10:50:47 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Chris\Application Data\pcouffin.inf
[2010/10/15 23:34:06 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\UnACE.dll
[2010/10/11 15:45:49 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2010/10/01 11:07:09 | 000,000,652 | ---- | C] () -- C:\WINDOWS\SinMP.INI
[2010/09/17 12:41:56 | 000,032,256 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010/09/12 11:17:57 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/07/28 17:25:31 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\binkw32.dll
[2010/07/12 23:08:43 | 000,106,538 | ---- | C] () -- C:\WINDOWS\System32\system86.dll
[2010/07/12 23:05:32 | 000,192,553 | ---- | C] () -- C:\WINDOWS\System32\gamex86.dll
[2010/06/28 12:06:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/06/27 17:14:06 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\IYVU9_32.DLL
[2010/06/26 12:33:40 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/06/15 15:56:24 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/06/08 14:53:59 | 000,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2010/06/08 14:53:59 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2010/05/31 17:43:23 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2010/05/26 20:13:57 | 000,000,187 | ---- | C] () -- C:\WINDOWS\RELATION.INI
[2010/05/20 01:17:21 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\fusioncache.dat
[2010/05/18 23:14:11 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Chris\Application Data\PnkBstrK.sys

========== LOP Check ==========

[2011/04/17 12:45:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Acronis
[2010/06/08 17:13:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Caphyon
[2010/10/03 16:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011/01/04 18:24:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreeRIP
[2011/01/03 19:09:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GameTap Web Player
[2011/10/13 20:03:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\JJH
[2011/04/13 08:25:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\nHancer
[2011/01/15 10:14:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PCPitstop
[2011/02/06 14:38:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tages
[2012/01/09 00:16:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ubisoft
[2011/10/27 15:54:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip
[2011/10/13 18:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{A0559A84-0A11-425F-BFFC-532378694B25}
[2011/06/20 13:10:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{A2A58654-12AA-408A-B411-58A76959BE7F}
[2012/03/23 15:00:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{FD7CAB3E-E895-4E98-9D68-A307CC601204}
[2011/11/28 18:18:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\281AF
[2011/04/17 12:46:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Acronis
[2012/04/19 21:19:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Aegisub
[2011/01/19 03:37:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\avidemux
[2010/07/04 17:18:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Azos
[2012/05/05 13:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Azureus
[2012/04/18 16:57:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\DAEMON Tools Lite
[2011/06/11 14:14:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Downloaded Installations
[2010/09/17 12:29:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\dream-mkv-to-avi-converter
[2011/08/10 21:47:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Dropbox
[2010/10/17 10:17:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\e frontier
[2011/11/13 04:26:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\E8gRZ9hYwkVOB
[2011/07/31 08:40:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\ElevatedDiagnostics
[2011/10/11 14:13:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Epson
[2010/07/12 15:34:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\ESET
[2012/04/18 16:57:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\FileZilla
[2010/10/03 16:09:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\FLVPlayer4Free
[2011/11/26 19:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\GetRightToGo
[2011/10/11 19:47:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\gtk-2.0
[2012/02/29 15:28:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\HandBrake
[2011/12/03 13:00:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\ImgBurn
[2011/10/13 20:03:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\JJH
[2011/07/20 21:49:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\JKHub
[2011/09/21 11:35:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Leadertech
[2012/02/29 16:37:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\mkvtoolnix
[2010/05/02 00:41:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\MyTraffic
[2010/10/02 21:52:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\nHancer
[2010/05/27 11:44:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Open Rails
[2010/05/28 23:41:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\ORTS
[2012/01/06 15:34:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\PunkBuster
[2010/06/18 21:19:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\ScummVM
[2010/10/18 21:56:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\SecondLife
[2011/05/05 13:17:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\SystemRequirementsLab
[2011/12/16 22:37:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\The Creative Assembly
[2012/01/09 00:16:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Ubisoft
[2011/11/13 04:26:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\UkkUVVrlOBtx0uS
[2011/01/30 14:29:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\uTorrent
[2011/11/01 13:22:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\vmntemplate
[2012/05/05 10:55:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Vso
[2011/11/13 04:26:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\WbbbD3ppnGaQ
[2012/02/29 16:09:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\XMedia Recode
[2011/11/13 04:26:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Y9ggTZZqjYCkIrz

========== Purity Check ==========



========== Custom Scans ==========

< "%WinDir%\$NtUninstallKB*$." /30 >

< C:\Program Files\Common Files\ComObjects\*.* /s >

< %SYSTEMDRIVE%\*.* >
[2010/07/09 06:54:39 | 000,000,241 | -HS- | M] () -- C:\Boot.bak
[2011/10/12 09:28:03 | 000,000,282 | -HS- | M] () -- C:\boot.ini
[2010/09/25 01:30:29 | 000,000,018 | ---- | M] () -- C:\CD2
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2010/04/29 15:57:56 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2012/05/03 02:18:00 | 000,000,000 | ---- | M] () -- C:\FileIn.Cns
[2012/05/03 02:18:00 | 000,000,000 | ---- | M] () -- C:\FileOut.Cns
[2010/04/29 15:57:56 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/12/25 12:00:45 | 000,001,621 | ---- | M] () -- C:\lvcoinst.log
[2010/04/29 15:57:56 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008/04/13 22:13:04 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/04/14 00:01:44 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2012/05/05 15:56:39 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
[2011/12/14 20:17:03 | 000,000,010 | ---- | M] () -- C:\pitch.bin
[2011/06/29 11:21:17 | 000,000,359 | ---- | M] () -- C:\rkill.log
[2011/11/28 12:10:29 | 000,005,512 | ---- | M] () -- C:\snc.txt
[2012/05/05 14:57:28 | 000,000,348 | ---- | M] () -- C:\TDSSKiller.2.7.28.0_05.05.2012_14.57.16_log.txt
[1996/09/09 14:18:38 | 000,088,064 | ---- | M] () -- C:\uninstal.exe

< %USERPROFILE%\*.* >
[2012/03/31 00:45:14 | 000,000,945 | ---- | M] () -- C:\Documents and Settings\Chris\.recently-used.xbel
[2010/06/22 01:48:14 | 000,000,087 | ---- | M] () -- C:\Documents and Settings\Chris\default.pls
[2012/05/05 15:55:16 | 017,039,360 | ---- | M] () -- C:\Documents and Settings\Chris\ntuser.dat
[2012/05/05 17:07:05 | 000,001,024 | -H-- | M] () -- C:\Documents and Settings\Chris\ntuser.dat.LOG
[2012/05/05 15:55:16 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Chris\ntuser.ini
[2010/09/10 19:49:22 | 000,000,044 | ---- | M] () -- C:\Documents and Settings\Chris\tachyon.log

< %USERPROFILE%\Application Data\*.* >
[2010/04/09 09:26:06 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Chris\Application Data\desktop.ini
[2011/09/01 23:22:24 | 000,003,247 | ---- | M] () -- C:\Documents and Settings\Chris\Application Data\glide_wrapper.zbag.ini
[2011/07/30 23:05:35 | 000,007,887 | ---- | M] () -- C:\Documents and Settings\Chris\Application Data\pcouffin.cat
[2011/07/30 23:05:35 | 000,001,144 | ---- | M] () -- C:\Documents and Settings\Chris\Application Data\pcouffin.inf
[2011/07/30 23:05:41 | 000,000,034 | ---- | M] () -- C:\Documents and Settings\Chris\Application Data\pcouffin.log
[2011/07/30 23:05:35 | 000,047,360 | ---- | M] (VSO Software) -- C:\Documents and Settings\Chris\Application Data\pcouffin.sys
[2011/08/02 15:30:34 | 000,022,328 | ---- | M] () -- C:\Documents and Settings\Chris\Application Data\PnkBstrK.sys

< %USERPROFILE%\Local Settings\Application Data\*.* >
[2011/05/21 04:11:32 | 000,002,862 | -HS- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\747073s32x2s4it14g
[2011/03/22 15:48:45 | 000,007,990 | -HS- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l
[2012/05/05 05:05:55 | 000,022,016 | ---- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/06/28 01:33:23 | 000,004,582 | -HS- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n
[2010/05/20 01:17:21 | 000,000,128 | ---- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\fusioncache.dat
[2011/09/29 12:43:05 | 000,078,648 | ---- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2012/04/16 00:15:06 | 005,928,684 | -H-- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\IconCache.db
[2011/11/28 09:41:25 | 000,003,558 | -HS- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\intgph5w5hxi1mbo5lqn1a618l3q
[2011/04/19 20:21:04 | 000,006,682 | -HS- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3

< %AllUsersProfile%\*.* >

< %AllUsersProfile%\Application Data\*.* >
[2011/05/21 04:11:32 | 000,002,862 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\747073s32x2s4it14g
[2011/03/22 15:48:45 | 000,007,990 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l
[2011/04/13 12:01:04 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini
[2011/06/28 01:33:23 | 000,004,582 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n
[2010/04/30 18:16:06 | 000,000,032 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\ezsid.dat
[2011/11/28 09:41:25 | 000,003,558 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\intgph5w5hxi1mbo5lqn1a618l3q
[2011/04/19 20:21:04 | 000,006,682 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3
[2012/03/01 17:06:41 | 000,001,534 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\ss.ini

< %USERPROFILE%\My Documents\*.* >
[2011/12/06 15:14:49 | 000,021,170 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1.log
[2011/11/05 12:05:47 | 000,211,027 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\11.jpg
[2010/06/21 14:55:58 | 000,113,620 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1252150450-00.jpg
[2011/11/05 12:06:25 | 000,208,696 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\22.jpg
[2011/11/05 12:10:05 | 000,215,243 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\44.jpg
[2010/12/23 20:00:53 | 000,021,767 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\51UCbi7auVL._SL500_AA280_.jpg
[2010/05/15 01:01:21 | 000,000,524 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\adm sheer add on.txt
[2008/02/29 15:59:40 | 000,000,264 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Adult Disability Starter Kit.url
[2010/06/28 16:06:21 | 000,111,693 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Anachronox Walkthrough 2.txt
[2010/10/12 14:28:45 | 000,129,335 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Anachronox Walkthrough Pack 2.0.rar
[2010/06/10 22:10:10 | 000,190,442 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Anachronox Walkthrough.txt
[2012/03/09 12:13:54 | 000,025,161 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\ANGEL LABEL PACK.zip
[2006/11/29 09:56:24 | 000,168,448 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\ascrypt.dll
[2011/10/13 13:27:57 | 000,000,384 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\BB Return final.txt
[2011/05/13 02:00:06 | 000,001,205 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Bedford Hitchin.txt
[2003/09/20 22:14:42 | 000,068,096 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Biotechnique in practice for the first time.doc
[2011/08/25 20:39:36 | 000,000,025 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\bunny.txt
[2008/06/25 12:44:13 | 000,337,920 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\C Gerlach Integrative Ecology Research 1992-2007.doc
[2010/06/04 17:15:38 | 000,028,325 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\captainvongerlach.jpg
[2002/11/30 23:07:06 | 000,066,048 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Copy of WATER2.doc
[2011/04/19 06:25:07 | 000,038,092 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\dads mistake.txt
[2010/08/08 08:45:11 | 000,000,294 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\David Brown.txt
[2012/03/31 21:26:28 | 000,000,096 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\dddd.txt
[2005/11/11 00:35:15 | 000,002,802 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\decals_bmw.bmp
[2011/04/12 16:05:13 | 000,000,076 | -HS- | M] () -- C:\Documents and Settings\Chris\My Documents\desktop.ini
[2003/10/03 22:06:06 | 000,024,064 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\DISCUSSION OF THE VORTEX TUBE EFFECT.doc
[2010/08/20 13:08:01 | 000,895,256 | ---- | M] (DivX, Inc. ) -- C:\Documents and Settings\Chris\My Documents\DivXInstaller.exe
[2011/08/02 22:53:51 | 000,001,156 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\DOOM Controls.txt
[2004/08/15 14:00:54 | 000,005,476 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\dooms codes.txt
[2010/06/21 19:17:06 | 000,004,020 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\DOSBOSX how to.txt
[2009/01/12 14:58:12 | 000,058,880 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Dynamic Equlibrium Potential.doc
[2010/08/03 12:52:26 | 000,012,555 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Early Game Design.txt
[2008/01/25 22:55:01 | 000,103,734 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\fff.jpg
[2003/10/20 14:39:26 | 000,008,670 | R--- | M] () -- C:\Documents and Settings\Chris\My Documents\finalhindenburg.air
[2010/06/18 20:25:23 | 000,000,095 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\FIX.txt
[2010/07/25 23:21:31 | 000,001,014 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\FNM EA750 + EB850x3.con
[2011/12/20 10:17:34 | 000,001,586 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\fpshooter.rar
[2004/07/14 09:22:32 | 002,653,696 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Future Plan.doc
[2012/03/03 14:58:18 | 000,100,352 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\GeneralTheoryDraft.DOC
[2011/12/17 14:27:40 | 000,000,037 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\ha ha.txt
[2010/12/09 02:40:52 | 000,911,780 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\HMS_Ruler45.mdl
[2010/09/27 02:18:02 | 000,495,237 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\image105 copy.jpg
[2012/03/10 12:55:18 | 000,068,169 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Install Mass Effect 2.log
[2012/04/27 09:30:16 | 000,002,855 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Install STAR WARS The Old Republic.log
[2012/03/03 14:58:05 | 000,561,152 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Isentropic Potential Vorticity.doc
[2004/04/28 22:36:14 | 000,044,544 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Isentropic Vorticity.doc
[2004/07/08 22:05:42 | 000,071,680 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Jacobs- Economy of Regions.doc
[2011/03/28 17:24:14 | 000,691,707 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\JRtr4_patched.zip
[2011/07/16 21:45:49 | 000,001,702 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\JSGME.lnk
[2011/12/22 13:38:34 | 010,218,950 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\J_Lanterns_1.zip
[2011/12/22 13:39:26 | 009,083,599 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\J_Lanterns_2.zip
[2011/12/22 15:10:13 | 026,989,324 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\J_Lanterns_4.zip
[2010/08/03 13:42:57 | 000,388,760 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Little_hourglass_by_Zirrrus.jpg
[2011/09/21 14:27:36 | 000,000,764 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\LL Bean shirt cover letter.txt
[2010/09/24 05:22:51 | 000,000,582 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Look List A.txt
[2010/11/19 13:47:58 | 000,346,940 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\lwehpalw.zip
[2012/03/12 21:55:34 | 000,001,613 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Mass Effect 2 1.01.log
[2012/03/12 21:55:49 | 000,003,225 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Mass Effect 2 1.02.log
[2010/06/25 15:07:37 | 000,000,119 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\MAW list.txt
[2008/04/02 21:04:29 | 000,030,303 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\mb_Watermat.zip
[2010/08/03 13:37:24 | 000,000,671 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Men's Victorian and Edwardian Outfits.url
[2010/10/29 18:11:20 | 000,017,517 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\merchantman09.jpg
[2011/07/24 13:59:25 | 000,005,933 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\MGE XE.txt
[2011/01/29 17:57:48 | 000,002,862 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Mr Double.txt
[2012/04/04 17:03:57 | 549,626,176 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\MSTS MT Evesham Branch inc Patch - Genuine [On The Railz].rar
[2011/03/16 11:50:30 | 000,000,088 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Murney contact info SD.txt
[2011/02/19 14:04:11 | 000,000,142 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Murney Contact info.txt
[2003/09/23 22:27:58 | 001,994,240 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Natural Hydrological Transvergence.doc
[2007/03/21 07:35:37 | 000,218,624 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\NEW HORIZONS.doc
[2011/11/05 11:52:24 | 000,383,505 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\NGQY0.png
[2010/07/12 02:17:26 | 004,039,579 | ---- | M] (KSE) -- C:\Documents and Settings\Chris\My Documents\nHancer32_2.5.9_Setup.exe
[2010/10/12 14:31:50 | 000,026,213 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Omikoron Nomad Soul Walkthrough.rar
[2004/01/24 11:01:34 | 000,024,064 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Original General Field theory.DOC
[2006/12/10 23:43:44 | 001,830,689 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Painting in Ilyrium.pz3
[2010/07/22 18:18:14 | 000,015,834 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Paypal 1.mht
[2010/08/18 22:16:15 | 000,024,613 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\princess-mononoke-film-comic-v-1.jpeg
[2011/01/04 19:17:39 | 013,845,073 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\ps_pe023_MilGirls.exe
[2011/02/13 12:26:02 | 000,206,122 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Research Bibliography Integrative Ecology.doc
[2010/07/10 22:01:53 | 004,961,518 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\SAVE.zip
[2010/08/27 01:00:12 | 000,004,866 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\scptrackir.zip
[2010/05/21 12:59:01 | 000,135,749 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Search options.JPG
[2010/06/27 20:56:12 | 000,150,181 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\sfcdrvrem.zip
[2010/11/01 16:33:46 | 000,000,389 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Shortcut to merchanDPs.lnk
[2010/03/22 11:56:23 | 000,000,764 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Shortcut to train.exe.lnk
[2010/09/10 23:26:10 | 000,002,280 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\SHV Camera.txt
[2011/12/20 23:24:00 | 000,939,416 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Sin_Episodes_Elexis_Skin.zip
[2011/05/14 21:51:28 | 000,007,699 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\SL Stock List.txt
[2011/01/29 18:47:27 | 000,006,989 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\smail_register_script.asp.htm
[2012/01/09 14:56:05 | 000,820,627 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\SMS PRINZ EUGEN-4-1941-1946-45MW.jpg
[2011/05/10 22:07:17 | 000,000,847 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\south.CFG
[2011/10/15 13:04:27 | 000,079,633 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Statement_24962.pdf
[2004/12/02 11:19:24 | 000,003,232 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\t.txt
[2010/07/12 11:10:03 | 000,003,967 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\The Art of Art in Adventure Games.txt
[2011/12/13 21:54:04 | 000,079,360 | -HS- | M] () -- C:\Documents and Settings\Chris\My Documents\Thumbs.db
[2010/07/26 22:52:27 | 004,568,507 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Tomb Raider 2 (PC) Beta.7z
[2011/03/16 13:42:04 | 000,001,464 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\TR FLight Tool.txt
[2010/04/30 19:29:20 | 000,001,819 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Train Simulator.lnk
[2010/07/18 09:28:15 | 000,000,244 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\TweakGuides.com - Mass Effect Tweak Guide.url
[2010/07/28 17:48:16 | 001,815,137 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Ultimate_Tomb_Raider_Icon_Pack_by_ssx.zip
[2012/04/03 22:07:21 | 000,011,621 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Uninstall Mass Effect 2.log
[2010/08/03 14:10:46 | 001,881,846 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\untitled.bmp
[2003/09/20 02:23:28 | 000,522,240 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\VIKTOR SCHAUBERGER.doc
[2004/01/24 10:41:22 | 000,035,840 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\VORTEX DYNAMICS.doc
[2003/09/20 02:16:26 | 000,185,344 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\WaterpowerSchauberger.doc
[2012/03/09 12:08:42 | 000,045,568 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\WHITE LABEL ANGLE.doc
[2010/12/05 07:09:05 | 000,000,290 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\XHAK.rar
[2010/09/28 00:19:02 | 002,807,573 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\xmaspak2.zip
[2010/08/03 13:42:42 | 000,310,287 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Yellow_Tomato_by_Zirrrus.jpg
[2009/08/30 10:52:32 | 000,004,020 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\zzxz.txt
[2010/07/22 18:30:17 | 000,000,009 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\zzzzz.txt

< %CommonProgramFiles%\*.* >

< %PROGRAMFILES%\*.* >
[2011/09/03 19:39:39 | 000,000,046 | ---- | M] () -- C:\Program Files\settings.cfg
[2011/09/03 19:39:39 | 000,379,256 | ---- | M] () -- C:\Program Files\UnGEXUSACAN.exe

< %systemroot%\system32\config\systemprofile\*.* >
[2010/05/20 14:38:53 | 000,266,240 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\ntuser.dat
[2012/05/05 13:06:05 | 000,001,024 | -H-- | M] () -- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG

< %windir%\ServiceProfiles\LocalService\AppData\Local\Temp\*.* >

< %windir%\ServiceProfiles\NetworkService\AppData\Local\Temp\*.* >

< %windir%\temp*.* >
[2010/09/27 20:17:22 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\temp.000
[2010/09/27 20:17:43 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\temp.001
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

< %windir%\system32\*. >
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1025
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1028
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1031
[2011/04/13 05:52:45 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1033
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1037
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1041
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1042
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1054
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\2052
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\3076
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\3com_dmi
[2010/07/24 18:43:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Adobe
[2010/06/04 17:56:17 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\appmgmt
[2010/04/30 08:39:24 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\bits
[2012/04/03 21:11:45 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\CatRoot
[2012/05/05 16:03:07 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\CatRoot2
[2011/04/13 12:56:48 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Com
[2012/05/05 15:24:29 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config
[2010/04/30 16:43:51 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Data
[2010/04/30 16:44:55 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Defaults
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\dhcp
[2012/03/31 02:57:06 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\DirectX
[2012/05/02 10:03:46 | 000,000,000 | RHSD | M] -- C:\WINDOWS\system32\dllcache
[2012/05/05 17:03:49 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\drivers
[2010/06/24 23:48:07 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\DRVSTORE
[2011/04/13 05:56:43 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\en
[2012/03/07 18:22:58 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\en-us
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\export
[2010/07/12 16:08:18 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\GroupPolicy
[2011/04/13 05:52:50 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ias
[2011/04/13 05:53:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\icsxml
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\IME
[2010/07/11 02:14:01 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\inetsrv
[2010/07/12 16:03:24 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\LogFiles
[2011/02/25 23:25:41 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Macromed
[2010/04/29 16:02:05 | 000,000,000 | --SD | M] -- C:\WINDOWS\system32\Microsoft
[2010/04/29 15:55:17 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\MsDtc
[2010/05/02 13:43:47 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\mui
[2011/04/13 05:56:54 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\npp
[2011/12/11 01:35:01 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\NtmsData
[2011/04/13 12:57:36 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\oobe
[2010/04/29 19:36:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\PreInstall
[2010/04/09 09:21:19 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ras
[2011/12/18 13:20:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ReinstallBackups
[2012/04/23 23:29:27 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Restore
[2011/04/13 05:57:17 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\scripting
[2011/04/13 05:57:50 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Setup
[2010/04/09 09:19:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ShellExt
[2010/04/29 17:06:56 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\SoftwareDistribution
[2010/05/02 13:44:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\spool
[2010/05/18 23:17:35 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\URTTEMP
[2011/04/13 05:57:41 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\usmt
[2012/04/08 15:13:18 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\wbem
[2010/07/12 16:08:20 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\WindowsPowerShell
[2010/07/12 16:08:19 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\winrm
[2010/06/30 05:54:46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\system32\wins
[2010/04/29 15:58:18 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\xircom
[2011/02/09 14:28:49 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\xlive
[2010/10/01 14:20:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\XPSViewer

< %Temp%\smtmp\1\*.* >

< %Temp%\smtmp\2\*.* >

< %Temp%\smtmp\3\*.* >

< %Temp%\smtmp\4\*.* >

< %systemroot%\system32\DBBK\*.* /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /90 >
[2012/04/04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbam.sys
[2012/05/05 15:01:09 | 000,162,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\netbt.sys

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2011/04/22 23:18:10 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >
[2008/07/06 06:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll

< %systemroot%\*. /rp /s >

< %systemroot%\assembly\tmp\*.* /S /MD5 >
[2010/09/24 19:52:27 | 000,066,728 | ---- | M] () MD5=C01B81BB10AD14DBC5C4ECD350638096 -- C:\WINDOWS\assembly\tmp\QY4BIOV1\big5.nlp
[2010/09/24 19:52:27 | 000,082,172 | ---- | M] () MD5=EE1F60F8774D74BED8B13498F3FE737A -- C:\WINDOWS\assembly\tmp\QY4BIOV1\bopomofo.nlp
[2010/09/24 19:52:27 | 000,116,756 | ---- | M] () MD5=F6DFDA5A31162D848634504565F6D321 -- C:\WINDOWS\assembly\tmp\QY4BIOV1\ksc.nlp
[2010/09/24 19:52:27 | 000,059,342 | ---- | M] () MD5=DA5748A89E22A3932387E65694B25BBB -- C:\WINDOWS\assembly\tmp\QY4BIOV1\normidna.nlp
[2010/09/24 19:52:27 | 000,045,794 | ---- | M] () MD5=3831A5E217D6FA828CCE1011DA26E677 -- C:\WINDOWS\assembly\tmp\QY4BIOV1\normnfc.nlp
[2010/09/24 19:52:27 | 000,039,284 | ---- | M] () MD5=DBDE664E0BA4BACD0A6A04AE2232B205 -- C:\WINDOWS\assembly\tmp\QY4BIOV1\normnfd.nlp
[2010/09/24 19:52:27 | 000,066,384 | ---- | M] () MD5=C9B88B759FE81D59CE8EBF5A0A8EB75A -- C:\WINDOWS\assembly\tmp\QY4BIOV1\normnfkc.nlp
[2010/09/24 19:52:27 | 000,060,294 | ---- | M] () MD5=3CAB6AB66759FCDF73B61EE262C9ACF4 -- C:\WINDOWS\assembly\tmp\QY4BIOV1\normnfkd.nlp
[2010/09/24 19:52:27 | 000,083,748 | ---- | M] () MD5=54144F43EDF5AA8F504A30E7C1D1A7B5 -- C:\WINDOWS\assembly\tmp\QY4BIOV1\prc.nlp
[2010/09/24 19:52:27 | 000,083,748 | ---- | M] () MD5=901863C68E6523336CAC602FE9320ABC -- C:\WINDOWS\assembly\tmp\QY4BIOV1\prcp.nlp
[2010/09/24 19:52:27 | 000,262,148 | ---- | M] () MD5=FB59D247F7143C3B9683A547E808A88B -- C:\WINDOWS\assembly\tmp\QY4BIOV1\sortkey.nlp
[2010/09/24 19:52:27 | 000,020,320 | ---- | M] () MD5=FF13BA175F0013D2311827E0D438C60B -- C:\WINDOWS\assembly\tmp\QY4BIOV1\sorttbls.nlp
[2010/09/24 19:52:27 | 000,028,288 | ---- | M] () MD5=09E420F90A329BDA68477FA4AF43CB28 -- C:\WINDOWS\assembly\tmp\QY4BIOV1\xjis.nlp

< %systemroot%\assembly\temp\*.* /S /MD5 >

< %systemroot%\assembly\GAC_32\*.* /S /MD5 >
[2012/05/02 10:01:03 | 000,069,120 | ---- | M] () MD5=DC426A365577F27187F99EB506ECD5D1 -- C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
[2012/05/02 10:01:07 | 000,072,192 | ---- | M] () MD5=29B35A999E341A37BE67771BE01CC275 -- C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
[2010/05/01 22:53:20 | 000,092,496 | ---- | M] () MD5=6B064618824AF9E056C6A9AE8A82CE9E -- C:\WINDOWS\assembly\GAC_32\Microsoft.FlightSimulator.SimConnect\10.0.60905.0__31bf3856ad364e35\Microsoft.FlightSimulator.SimConnect.dll
[2010/05/01 23:24:33 | 000,103,832 | ---- | M] () MD5=52E6AFE00573A789495A6D239D8D663F -- C:\WINDOWS\assembly\GAC_32\Microsoft.FlightSimulator.SimConnect\10.0.61242.0__31bf3856ad364e35\Microsoft.FlightSimulator.SimConnect.dll
[2010/05/01 23:24:33 | 000,108,608 | ---- | M] () MD5=B9E0A00C2067CDF6B6E10A8F8225B3D0 -- C:\WINDOWS\assembly\GAC_32\Microsoft.FlightSimulator.SimConnect\10.0.61259.0__31bf3856ad364e35\Microsoft.FlightSimulator.SimConnect.dll
[2010/10/01 14:20:19 | 000,163,840 | ---- | M] () MD5=36BDD82A92AA704034475C2DEF7FBD29 -- C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
[2010/05/27 11:43:28 | 000,098,304 | ---- | M] () MD5=2BC25BA0985C4E432ABC6B2D6D0AC7FB -- C:\WINDOWS\assembly\GAC_32\Microsoft.Xna.Framework.Game\3.1.0.0__6d5c3888ef60e27d\Microsoft.Xna.Framework.Game.dll
[2010/05/27 11:43:27 | 001,034,752 | ---- | M] () MD5=6CDC5524D71705426B48138E1648C749 -- C:\WINDOWS\assembly\GAC_32\Microsoft.Xna.Framework\3.1.0.0__6d5c3888ef60e27d\Microsoft.Xna.Framework.dll
[2012/05/02 10:01:20 | 000,066,728 | ---- | M] () MD5=C01B81BB10AD14DBC5C4ECD350638096 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\big5.nlp
[2012/05/02 10:01:20 | 000,082,172 | ---- | M] () MD5=EE1F60F8774D74BED8B13498F3FE737A -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bopomofo.nlp
[2012/05/02 10:01:20 | 000,116,756 | ---- | M] () MD5=F6DFDA5A31162D848634504565F6D321 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\ksc.nlp
[2012/05/02 10:01:20 | 004,550,656 | ---- | M] () MD5=0C57CB0497F75E3B60F913F1C4859257 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
[2012/05/02 10:01:20 | 000,059,342 | ---- | M] () MD5=DA5748A89E22A3932387E65694B25BBB -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normidna.nlp
[2012/05/02 10:01:20 | 000,045,794 | ---- | M] () MD5=3831A5E217D6FA828CCE1011DA26E677 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfc.nlp
[2012/05/02 10:01:20 | 000,039,284 | ---- | M] () MD5=DBDE664E0BA4BACD0A6A04AE2232B205 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfd.nlp
[2012/05/02 10:01:20 | 000,066,384 | ---- | M] () MD5=C9B88B759FE81D59CE8EBF5A0A8EB75A -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkc.nlp
[2012/05/02 10:01:20 | 000,060,294 | ---- | M] () MD5=3CAB6AB66759FCDF73B61EE262C9ACF4 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkd.nlp
[2012/05/02 10:01:20 | 000,083,748 | ---- | M] () MD5=54144F43EDF5AA8F504A30E7C1D1A7B5 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prc.nlp
[2012/05/02 10:01:20 | 000,083,748 | ---- | M] () MD5=901863C68E6523336CAC602FE9320ABC -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prcp.nlp
[2012/05/02 10:01:20 | 000,262,148 | ---- | M] () MD5=FB59D247F7143C3B9683A547E808A88B -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
[2012/05/02 10:01:20 | 000,020,320 | ---- | M] () MD5=FF13BA175F0013D2311827E0D438C60B -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
[2012/05/02 10:01:20 | 000,028,288 | ---- | M] () MD5=09E420F90A329BDA68477FA4AF43CB28 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp
[2011/01/19 07:12:27 | 004,210,688 | ---- | M] () MD5=E968859D798FBF5822DCD1D269215823 -- C:\WINDOWS\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
[2010/12/24 17:40:36 | 003,335,680 | ---- | M] () MD5=1129265C56CB12904532F31F713EA0FC -- C:\WINDOWS\assembly\GAC_32\SlimDX\2.0.10.43__b1b0c32fd1ffe4f9\SlimDX.dll
[2012/05/02 10:01:23 | 000,486,400 | ---- | M] () MD5=759FD3779911F89C450CCAE06B92AE3A -- C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
[2012/05/02 10:01:24 | 002,933,248 | ---- | M] () MD5=16F96C1496CBD0965285AB19A9271D02 -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
[2012/05/02 10:01:12 | 000,258,048 | ---- | M] () MD5=9631B15DB7C43C267636FF43C3075E07 -- C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
[2012/05/02 10:01:12 | 000,113,664 | ---- | M] () MD5=E786C33D35D39C5CCB523AECC18D7BD7 -- C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
[2010/10/01 14:20:23 | 000,368,640 | ---- | M] () MD5=34FA631FAA4B2DF8C0A92B7B5AD9D6E1 -- C:\WINDOWS\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
[2012/05/02 10:01:11 | 000,261,632 | ---- | M] () MD5=F054572A92573CA32D5F3AA8C15D2BAC -- C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
[2012/05/02 10:00:47 | 005,246,976 | ---- | M] () MD5=661268A6BEEF1C1B0D1B9137F530A9FD -- C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

< %systemroot%\assembly\GAC_MSIL\*.* /S /MD5 >
[2012/05/02 10:01:02 | 000,010,752 | ---- | M] () MD5=A5A56B4957BD59D324821522FE14F751 -- C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
[2012/05/02 10:00:54 | 000,507,904 | ---- | M] () MD5=B8FE2350B2236EE3D1CECA34E0C0FF17 -- C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
[2012/05/02 10:01:02 | 000,013,312 | ---- | M] () MD5=107F49F1BF0FB27A6CD758EB8C4D95A0 -- C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
[2012/05/02 10:01:03 | 000,008,192 | ---- | M] () MD5=6CD7461E06CB8BAEE3B16C3D7F637CD0 -- C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
[2012/05/02 10:01:04 | 000,077,824 | ---- | M] () MD5=24F0385D06BD86A97412B8905483313E -- C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
[2012/05/02 10:01:04 | 000,006,656 | ---- | M] () MD5=11F3AC2D47E566615819F5BF0DD18379 -- C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
[2010/07/12 16:08:44 | 000,007,168 | ---- | M] () MD5=75C183E262BD4400EB0F20349F6EF383 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
[2010/07/12 16:08:42 | 000,057,344 | ---- | M] () MD5=2F7FE3A781BA8C0A67C775F20E3E9F70 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management\1.0.0.0__31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.dll
[2010/10/01 14:21:01 | 000,106,496 | ---- | M] () MD5=29CED3B606BA7E2B49E52931C5CB53B7 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
[2012/05/02 10:01:13 | 000,348,160 | ---- | M] () MD5=996AAEEC01C734347DE8A72542FD1C12 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
[2010/10/01 14:21:02 | 000,733,184 | ---- | M] () MD5=31C6E94759BF4D2FBE3239FFA717967D -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
[2012/05/02 10:01:16 | 000,036,864 | ---- | M] () MD5=D2A1C3150E43738BAB3D0AD9921B3E50 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
[2010/10/01 14:21:02 | 000,036,864 | ---- | M] () MD5=17C6F3F73858732DE59D6D957958E9AF -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
[2010/10/01 14:21:02 | 000,802,816 | ---- | M] () MD5=37F17D4698086C90127BBD90E73D7FE2 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
[2012/05/02 10:01:17 | 000,655,360 | ---- | M] () MD5=8A3F5B72C3F402C8D33027A4C77F55AC -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
[2010/10/01 14:21:03 | 000,094,208 | ---- | M] () MD5=E32A06F647517D0DEA80F29B459E8FA2 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
[2012/05/02 10:01:18 | 000,077,824 | ---- | M] () MD5=640BF6BB259B53BEFF59135645C63B18 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
[2012/05/02 10:01:08 | 000,749,568 | ---- | M] () MD5=EB535D00C508119EEE4042B737165A3B -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
[2010/07/12 16:08:43 | 000,010,752 | ---- | M] () MD5=4E2482E69BAAF3A5B13DB8101C063EBF -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.resources.dll
[2010/07/12 16:08:41 | 000,102,400 | ---- | M] () MD5=08E87E8ABF7B41B28663DCE817CE0AB6 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.dll
[2010/07/12 16:08:43 | 000,036,864 | ---- | M] () MD5=B87E087FC013225E2AA1CB60C080647D -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.resources.dll
[2010/07/12 16:08:40 | 000,262,144 | ---- | M] () MD5=F3AC3F844F90380AAB2B4C0836C4288F -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll
[2010/07/12 16:08:43 | 000,049,152 | ---- | M] () MD5=1CE73FB3F88C716CFC3FD550547D2B35 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.resources.dll
[2010/07/12 16:08:40 | 000,618,496 | ---- | M] () MD5=DFEB401CC051E5DA721C584FF6A90F88 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll
[2010/07/12 16:08:42 | 000,040,960 | ---- | M] () MD5=36FF641F37918F2CCA98E7F407AC4D75 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.resources.dll
[2010/07/12 16:08:39 | 000,200,704 | ---- | M] () MD5=3991B7FA452A9C9C291C06365A236792 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll
[2010/07/12 16:08:53 | 000,069,632 | ---- | M] () MD5=37BED865557084DD9988350AB1675E0B -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Editor.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Editor.resources.dll
[2010/07/12 16:08:52 | 000,991,232 | ---- | M] () MD5=208FA9D0EBE2CEB9616042772E96598E -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Editor\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Editor.dll
[2010/07/12 16:08:53 | 000,040,960 | ---- | M] () MD5=108500A98B9A2F66823E7615398FC87B -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.GPowerShell.resources.dll
[2010/07/12 16:08:52 | 000,651,264 | ---- | M] () MD5=D4EEFCCDC3DE6CED901535FA4153C491 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GPowerShell.dll
[2010/07/12 16:08:52 | 000,016,896 | ---- | M] () MD5=5A69FB5D686F863E0E13268D671EF16D -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.resources.dll
[2010/07/12 16:08:51 | 000,278,528 | ---- | M] () MD5=3EAB4DBDC290EDC4D53FE77F1FDB9E59 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.dll
[2010/07/12 16:08:43 | 000,009,216 | ---- | M] () MD5=C7A0D1321A67A2AFD330C5FBE79BEFD1 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Security.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Security.resources.dll
[2010/07/12 16:08:41 | 000,069,632 | ---- | M] () MD5=53A9D748EF09920A0D06DA2583C298AD -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.PowerShell.Security\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll
[2010/10/01 14:20:18 | 000,397,312 | ---- | M] () MD5=66F6B3248D6C39CEFA49174133A694FE -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
[2012/05/02 10:01:07 | 000,110,592 | ---- | M] () MD5=D676BC7C829F86A215676281A1032C6B -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
[2012/05/02 10:01:06 | 000,372,736 | ---- | M] () MD5=226956F70AEBBBF5ACBC9ADA6522B6F6 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
[2012/05/02 10:01:10 | 000,028,672 | ---- | M] () MD5=3D61BFCBE13C2DC8F5AE20BF02145322 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
[2012/05/02 10:01:06 | 000,659,456 | ---- | M] () MD5=EFC806A1C4C6CE9F69AECE0AB72C1E34 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
[2010/10/01 14:21:02 | 000,041,984 | ---- | M] () MD5=9F065BF574C956B85DB355C32E7E995E -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
[2012/05/02 10:01:21 | 000,005,632 | ---- | M] () MD5=7E50D25F9A5BC75F22CA7AEB52176CA2 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
[2012/05/02 10:01:10 | 000,012,800 | ---- | M] () MD5=B27AA2EA41728FAF5E9642CFD2958FB9 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
[2012/05/02 10:01:05 | 000,032,768 | ---- | M] () MD5=D251A67B7D6DE2194F6E264055E020FB -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
[2010/07/12 16:08:44 | 000,013,824 | ---- | M] () MD5=6372EA7D2ACED7185183CF3FCDD3577B -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.WSMan.Management.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.WSMan.Management.resources.dll
[2010/07/12 16:08:42 | 000,274,432 | ---- | M] () MD5=1A4E900C2FE3CD31D10107670D184FE6 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.WSMan.Management\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Management.dll
[2010/07/12 16:08:41 | 000,007,168 | ---- | M] () MD5=F7DA27672D2E4C21A1F996EE31DE0DBF -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.WSMan.Runtime\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Runtime.dll
[2012/05/02 10:01:04 | 000,007,168 | ---- | M] () MD5=9659028AFA77387D6D2BF4280C10AB94 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
[2010/10/01 14:20:25 | 000,598,016 | ---- | M] () MD5=28595FA306E58AACD7DAFF001F430703 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
[2010/10/01 14:20:22 | 000,032,768 | ---- | M] () MD5=93F9CC2360815D8EF955407CF92B38AA -- C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
[2010/10/01 14:20:25 | 000,046,104 | ---- | M] () MD5=8BA7C024070F2B7FDD98ED8A4BA41789 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
[2010/10/01 14:20:27 | 000,196,608 | ---- | M] () MD5=0C488A21B5A63055CB7736E3E0C75B1F -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
[2010/10/01 14:20:27 | 000,139,264 | ---- | M] () MD5=DA8417F8973EC51F0F1859CA0B334FC5 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
[2010/10/01 14:20:27 | 000,397,312 | ---- | M] () MD5=7E61032F4F2BAB036B859D3B22D26DD0 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
[2010/10/01 14:20:27 | 000,163,840 | ---- | M] () MD5=D1E117EDDEFEB220351BE0C7B27A4646 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
[2011/01/19 07:12:27 | 005,279,744 | ---- | M] () MD5=D5A6ADE7FBEE0344D86394CE9F91B67F -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
[2010/10/01 14:20:28 | 000,864,256 | ---- | M] () MD5=428D3714C85BACE55476C91E0D90E495 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
[2010/10/01 14:20:23 | 000,528,384 | ---- | M] () MD5=A37D01E48B3908330E780466312D54A6 -- C:\WINDOWS\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
[2010/10/01 14:21:03 | 000,005,632 | ---- | M] () MD5=807B70A78ACE7D01F769FE502A769E67 -- C:\WINDOWS\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
[2011/01/19 07:10:09 | 000,110,592 | ---- | M] () MD5=BD6B60E0F4FA84FF4E3089EDF9B81C9A -- C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
[2012/05/02 10:01:22 | 000,110,592 | ---- | M] () MD5=0AD1C94AB2D36B79B9F2B54EADEB300A -- C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
[2010/10/01 14:21:03 | 000,045,056 | ---- | M] () MD5=B34B75256D536385B927193FB1DCBB81 -- C:\WINDOWS\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
[2010/10/01 14:21:03 | 000,163,840 | ---- | M] () MD5=212E7E4F44432B5EDA508D454FC01A61 -- C:\WINDOWS\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
[2010/10/01 14:21:06 | 000,057,344 | ---- | M] () MD5=34AAEA0DCF908A7D3C1D8C2132B0E4D4 -- C:\WINDOWS\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
[2012/05/02 10:01:22 | 000,081,920 | ---- | M] () MD5=41BC941761FB3D1E21826C3C0E3CEEEE -- C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
[2012/05/02 10:01:23 | 000,425,984 | ---- | M] () MD5=C1C4025B5F5311AC8BCC318B0C244D58 -- C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
[2010/10/01 14:21:04 | 000,667,648 | ---- | M] () MD5=6617F24759BB1F3873C88AD9E0DF0435 -- C:\WINDOWS\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
[2010/10/01 14:21:04 | 000,053,248 | ---- | M] () MD5=1FDC244EEDD9B7804C7829DA11F1522E -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
[2010/10/01 14:21:04 | 000,229,376 | ---- | M] () MD5=3FE6C3CDB01F039110152B1B0AE4980F -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
[2010/10/01 14:21:05 | 002,879,488 | ---- | M] () MD5=CB45DFC6F9E1F954A718769D02D9C312 -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
[2010/10/01 14:21:01 | 000,684,032 | ---- | M] () MD5=DDFB10C4A14ADD5D0A6C96E6DC3D29DF -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
[2010/10/01 14:23:18 | 000,294,912 | ---- | M] () MD5=2F69FF4ED483D3FF399534F99BD4694A -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
[2010/10/01 14:21:00 | 000,114,688 | ---- | M] () MD5=0A7F3B1C1A9CC722F48A7A16394F61C4 -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
[2010/10/01 14:23:18 | 000,442,368 | ---- | M] () MD5=AE975C122A442146D7D5A6A996C42F91 -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
[2012/05/02 10:01:25 | 000,745,472 | ---- | M] () MD5=6388F9A7AA6E22DDA2E0D84E5BCE537C -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
[2012/05/02 10:01:26 | 000,970,752 | ---- | M] () MD5=97DDAFB2A7B33DC3F746EF35C9EDF892 -- C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
[2012/05/02 10:00:56 | 005,062,656 | ---- | M] () MD5=5C368BEBD58562133856B35BDCEFEADA -- C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
[2010/10/01 14:21:00 | 000,286,720 | ---- | M] () MD5=4C6FBCBB7E7D4E3B0CAAA42043B6A01F -- C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
[2012/05/02 10:01:01 | 000,188,416 | ---- | M] () MD5=F0D4CE77F1F9D9A7468335B1CE4C061B -- C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
[2012/05/02 10:01:08 | 000,401,408 | ---- | M] () MD5=F485CF34C45F850B25A7E38B08A7C435 -- C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
[2012/05/02 10:00:55 | 000,081,920 | ---- | M] () MD5=36ABC218228871A981027174216A2DA8 -- C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
[2012/05/02 10:01:14 | 000,630,784 | ---- | M] () MD5=DD110208ACE51F9AAC2FFC949CB6D937 -- C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
[2010/10/01 14:20:28 | 000,126,976 | ---- | M] () MD5=311A345681A73C66D3EE49C5157A473B -- C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
[2011/01/19 07:10:10 | 000,438,272 | ---- | M] () MD5=DB076F159D89B90924C465222BA128FE -- C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
[2010/10/01 14:20:20 | 000,131,072 | ---- | M] () MD5=80E67BFFD101CC6312B489BEE255430D -- C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
[2010/07/12 16:08:42 | 000,253,952 | ---- | M] () MD5=2286B57ECC2D32D24049C51989084268 -- C:\WINDOWS\assembly\GAC_MSIL\System.Management.Automation.resources\1.0.0.0_en_31bf3856ad364e35\System.Management.Automation.resources.dll
[2010/07/12 16:08:39 | 002,682,880 | ---- | M] () MD5=4D8AB4FAD244F7985D8C59D456E026D7 -- C:\WINDOWS\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
[2010/10/01 14:21:05 | 000,143,360 | ---- | M] () MD5=217A1E1DED132261C825313A7FB2616C -- C:\WINDOWS\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
[2012/05/02 10:01:17 | 000,372,736 | ---- | M] () MD5=EBAADBBFB6C455E54EB6A0E47267D33C -- C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
[2012/05/02 10:01:16 | 000,258,048 | ---- | M] () MD5=7F9F1F17D368EE1EEA7E246FD934B9EC -- C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
[2010/10/01 14:21:07 | 000,233,472 | ---- | M] () MD5=2E66DE31546A6AB3A8160CE337E1C6BC -- C:\WINDOWS\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
[2012/05/02 10:01:14 | 000,303,104 | ---- | M] () MD5=2849F13593D2712CCB97FFBDD3C1232E -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
[2012/05/02 10:01:13 | 000,131,072 | ---- | M] () MD5=C415D86079D431E7E1E32D0835A3FE81 -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011/01/19 07:10:10 | 000,970,752 | ---- | M] () MD5=2CF02DF42A90A054D546BF3A85409DC4 -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012/05/02 10:01:11 | 000,258,048 | ---- | M] () MD5=0DFCD96DED6DB52064203C07B927357E -- C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
[2010/10/01 14:20:22 | 000,073,728 | ---- | M] () MD5=A80F41C8B2168E8B3ADD0AA4FCBDDC93 -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
[2011/01/19 07:10:12 | 000,032,768 | ---- | M] () MD5=764E1A3E53C5885976F2EE6E206208EF -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
[2010/10/01 14:20:59 | 000,569,344 | ---- | M] () MD5=1565B7FAFDFA6EEE16101388E57E749F -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
[2011/01/19 07:10:10 | 005,967,872 | ---- | M] () MD5=4120A37565491CA998E226BCBE8EF6E8 -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
[2012/05/02 10:01:06 | 000,114,688 | ---- | M] () MD5=50D2943D426BA91771AD87FDEC802AC3 -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
[2010/10/01 14:20:26 | 000,688,128 | ---- | M] () MD5=31588B867657A7DF046AC1908550D73C -- C:\WINDOWS\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
[2010/10/01 14:21:07 | 000,077,824 | ---- | M] () MD5=2C3559C513F7CD6F95DC382F31A6A22D -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
[2010/10/01 14:21:08 | 000,032,768 | ---- | M] () MD5=9E0D101B086297D5E166E03A8ACBF260 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
[2010/10/01 14:23:18 | 000,229,376 | ---- | M] () MD5=CC8D03C33986926A68696DAAAB5FF2F8 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
[2010/10/01 14:21:05 | 000,131,072 | ---- | M] () MD5=A6A5297AAD0A9BA8829D20B1CBD68D32 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
[2010/10/01 14:23:18 | 000,139,264 | ---- | M] () MD5=E42797003722BD930D83AB26998394D8 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
[2010/10/01 14:21:09 | 000,335,872 | ---- | M] () MD5=7E83B8040233DDCDE03CF7F0A5F2837B -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
[2012/02/20 15:15:44 | 001,277,952 | ---- | M] () MD5=821B0AAB24CB11417381F8AE881309A2 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
[2012/05/02 10:01:00 | 000,835,584 | ---- | M] () MD5=C22D59F4EAC00510D1A86061A428C633 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
[2012/05/02 10:01:01 | 000,077,824 | ---- | M] () MD5=F27A80887F125661CAC1A6039107428F -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
[2010/10/01 14:21:10 | 000,061,440 | ---- | M] () MD5=5B7868DF14D71D328EE8C1213F852393 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
[2012/05/02 10:00:57 | 000,839,680 | ---- | M] () MD5=A89DFA6DB0C3D00559F770A214962A60 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
[2012/05/02 10:01:00 | 005,025,792 | ---- | M] () MD5=2045A75F511FB99F5B3369E49E0837A2 -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
[2010/10/01 14:21:06 | 000,012,288 | ---- | M] () MD5=044C3400A836E5FB60D4A49EAEC24544 -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
[2010/10/01 14:20:24 | 001,138,688 | ---- | M] () MD5=A96933F3898290AA509080A90E0C7C5F -- C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
[2010/10/01 14:20:24 | 001,630,208 | ---- | M] () MD5=C4503F6EADC2638D6898514290A7A60B -- C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
[2010/10/01 14:20:25 | 000,540,672 | ---- | M] () MD5=6623152B2FB7DC650C6A8FE01AF71F44 -- C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
[2010/10/01 14:20:59 | 000,507,904 | ---- | M] () MD5=E249D1B3114088C0D390A60643BF2BBC -- C:\WINDOWS\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
[2010/10/01 14:21:06 | 000,139,264 | ---- | M] () MD5=64925CC79EA9E8245A4F18703CCABEC4 -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
[2012/05/02 10:01:09 | 002,048,000 | ---- | M] () MD5=EB97291E3C9E0035B47B45DBB1AF710D -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
[2012/05/02 10:01:27 | 003,186,688 | ---- | M] () MD5=47B341F0931D6D11364145FFC6BBB1E7 -- C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
[2010/10/01 14:20:26 | 000,167,936 | ---- | M] () MD5=F303A07A6EF37B8B6DD928D97A016B75 -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
[2010/10/01 14:20:26 | 000,385,024 | ---- | M] () MD5=09658EF5F16F2ABD74FE577D50C0D155 -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
[2010/10/01 14:20:23 | 000,040,960 | ---- | M] () MD5=A93561FB224FA8539357C74065403630 -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
[2010/10/01 14:20:24 | 000,098,304 | ---- | M] () MD5=5BE33FC308914C1AE6577A908D97A4FF -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
[2011/01/19 07:12:28 | 001,249,280 | ---- | M] () MD5=2B54E384677C419230E016020DA076ED -- C:\WINDOWS\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
[2010/10/01 14:20:26 | 000,094,208 | ---- | M] () MD5=E205A79EA6C06F91EA08BBE59FE83503 -- C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll

< type c:\diskreport.txt /c >
Microsoft DiskPart version 5.1.3565
Copyright © 1999-2003 Microsoft Corporation.
On computer: ATHLON
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 0 E DVD-ROM 0 B
Volume 1 I DVD-ROM 0 B
Volume 2 F DVD-ROM 0 B
Volume 3 D NTFS Partition 279 GB Healthy
Volume 4 C NTFS Partition 298 GB Healthy System

< MD5 for: AFD.SYS >
[2011/08/17 07:49:54 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=1E44BC1E83D8FD2305F8D452DB109CF9 -- C:\WINDOWS\system32\dllcache\afd.sys
[2011/08/17 07:49:54 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=1E44BC1E83D8FD2305F8D452DB109CF9 -- C:\WINDOWS\system32\drivers\afd.sys
[2008/04/14 00:49:24 | 000,138,112 | ---- | M] (Microsoft Corporation) MD5=322D0E36693D6E24A2398BEE62A268CD -- C:\WINDOWS\$NtUninstallKB2509553$\afd.sys
[2008/04/13 13:19:23 | 000,138,112 | ---- | M] (Microsoft Corporation) MD5=322D0E36693D6E24A2398BEE62A268CD -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\afd.sys
[2011/02/16 07:22:48 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=355556D9E580915118CD7EF736653A89 -- C:\WINDOWS\$NtUninstallKB2592799$\afd.sys
[2008/10/16 09:07:58 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=38D7B715504DA4741DF35E3594FE2099 -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys
[2008/08/14 04:34:26 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=4D43E74F2A1239D53929B82600F1971C -- C:\WINDOWS\$hf_mig$\KB956803\SP3QFE\afd.sys
[2007/07/27 06:00:00 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=5AC495F4CB807B2B98AD2AD591E6D92E -- C:\WINDOWS\$NtUninstallKB951748_0$\afd.sys
[2008/08/14 03:48:52 | 000,138,368 | ---- | M] (Microsoft Corporation) MD5=6A0397376853E604DE8E1E7A87FC08AC -- C:\WINDOWS\$hf_mig$\KB956803\SP2QFE\afd.sys
[2008/10/16 08:43:01 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=7618D5218F2A614672EC61A80D854A37 -- C:\WINDOWS\$NtUninstallKB2503665$\afd.sys
[2008/08/14 04:04:36 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=7E775010EF291DA96AD17CA4B17137D7 -- C:\WINDOWS\$hf_mig$\KB956803\SP3GDR\afd.sys
[2011/02/16 07:25:05 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=8D499B1276012EB907E7A9E0F4D8FDA4 -- C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE\afd.sys
[2008/06/20 04:44:38 | 000,138,368 | ---- | M] (Microsoft Corporation) MD5=944CA435BFCFC82CC1ED9E3A7D731AA9 -- C:\WINDOWS\$NtUninstallKB956803_0$\afd.sys
[2008/06/20 05:48:03 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=D6EE6014241D034E63C49A50CB2B442A -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
[2008/06/20 04:44:08 | 000,138,368 | ---- | M] (Microsoft Corporation) MD5=D99DDFFB33DEACDCF20717CB520379F6 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
[2008/06/20 05:40:08 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=E3049B90FE06F3F740B7CFDA44995E2C -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
[2011/08/17 07:41:46 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=F6B7B1ECD7B41736BDB6FF4B092BCB79 -- C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys

< MD5 for: ATAPI.SYS >
[2008/04/14 05:51:44 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/04/14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008/04/13 12:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\atapi.sys
[2008/04/14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: DISK.SYS >
[2008/04/14 05:51:44 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2008/04/13 12:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\disk.sys
[2008/04/14 00:10:48 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys

< MD5 for: EXPLORER.EXE >
[2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\explorer.exe
[2008/04/13 18:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\explorer.exe
[2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\system32\dllcache\explorer.exe

< MD5 for: I8042PRT.SYS >
[2008/04/14 05:51:44 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:i8042prt.sys
[2008/04/13 13:18:00 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\i8042prt.sys
[2008/04/14 01:48:02 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\system32\dllcache\i8042prt.sys
[2008/04/14 01:48:02 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\system32\drivers\i8042prt.sys

< MD5 for: IPSEC.SYS >
[2008/04/14 00:49:44 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\ERDNT\cache\ipsec.sys
[2008/04/13 13:19:42 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ipsec.sys
[2008/04/14 00:49:44 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\system32\dllcache\ipsec.sys
[2008/04/14 00:49:44 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\system32\drivers\ipsec.sys

< MD5 for: LSASS.EXE >
[2008/04/14 05:42:26 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008/04/13 18:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lsass.exe
[2008/04/14 05:42:26 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008/04/14 05:42:26 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NETBT.SYS >
[2008/04/13 13:21:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=74B2B2F5BEA5E9A3DC021D685551BD3D -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\netbt.sys
[2008/04/14 00:51:02 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=74B2B2F5BEA5E9A3DC021D685551BD3D -- C:\WINDOWS\system32\dllcache\netbt.sys
[2012/05/05 15:01:09 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=74B2B2F5BEA5E9A3DC021D685551BD3D -- C:\WINDOWS\system32\drivers\netbt.sys

< MD5 for: REDBOOK.SYS >
[2008/04/14 05:51:44 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:redbook.sys
[2008/04/13 12:40:27 | 000,057,600 | ---- | M] (Microsoft Corporation) MD5=F828DD7E1419B6653894A8F97A0094C5 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\redbook.sys
[2008/04/13 12:40:27 | 000,057,600 | ---- | M] (Microsoft Corporation) MD5=F828DD7E1419B6653894A8F97A0094C5 -- C:\WINDOWS\system32\drivers\redbook.sys

< MD5 for: SERIAL.SYS >
[2008/04/14 05:51:44 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:serial.sys
[2008/04/13 13:15:45 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=CCA207A8896D4C6A0C9CE29A4AE411A7 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\serial.sys
[2008/04/14 00:45:46 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=CCA207A8896D4C6A0C9CE29A4AE411A7 -- C:\WINDOWS\system32\drivers\serial.sys

< MD5 for: SERVICES.EXE >
[2009/02/06 05:06:24 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=020CEAAEDC8EB655B6506B8C70D53BB6 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2008/04/14 05:42:36 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008/04/13 18:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\services.exe
[2009/02/06 04:22:21 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=4712531AB7A01B7EE059853CA17D39BD -- C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\services.exe
[2009/02/06 05:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe
[2009/02/06 05:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\ERDNT\cache\services.exe
[2009/02/06 05:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\dllcache\services.exe
[2009/02/06 05:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\services.exe
[2007/07/27 06:00:00 | 000,108,032 | ---- | M] (Microsoft Corporation) MD5=C6CE6EEC82F187615D1002BB3BB50ED4 -- C:\WINDOWS\$NtUninstallKB956572_0$\services.exe

< MD5 for: SMSS.EXE >
[2008/04/13 18:12:36 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\smss.exe
[2008/04/14 05:42:38 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008/04/14 05:42:38 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\system32\smss.exe
[2004/08/04 00:56:58 | 000,152,576 | ---- | M] (Microsoft Corporation) MD5=DA5CF1C368B33D75602FD6B3A7F5E0C6 -- C:\cmdcons\SYSTEM32\SMSS.EXE

< MD5 for: SVCHOST.EXE >
[2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2008/04/14 05:42:38 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008/04/13 18:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\svchost.exe
[2008/04/14 05:42:38 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008/04/14 05:42:38 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2008/06/20 04:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008/04/14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[2008/04/13 13:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tcpip.sys
[2008/06/20 05:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008/06/20 05:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008/06/20 05:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008/06/20 05:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2007/07/27 06:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008/06/20 05:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008/06/20 05:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008/04/14 05:42:40 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008/04/13 18:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\userinit.exe
[2008/04/14 05:42:40 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008/04/14 05:42:40 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: VOLSNAP.SYS >
[2008/04/13 12:41:01 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\volsnap.sys
[2008/04/14 00:11:02 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\system32\dllcache\volsnap.sys
[2008/04/14 00:11:02 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\system32\drivers\volsnap.sys

< MD5 for: WINLOGON.EXE >
[2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008/04/14 05:42:40 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008/04/13 18:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\winlogon.exe
[2008/04/14 05:42:40 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/14 05:42:40 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\winlogon.exe

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790 -> Junction
[C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e -> Junction
[C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 -> Junction
[C:\WINDOWS\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35] -> C:\WINDOWS\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5 -> Junction

< End of report >

OTL Extras logfile created on: 5/5/2012 05:05:01 PM - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Documents and Settings\Chris\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.50 Gb Total Physical Memory | 1.94 Gb Available Physical Memory | 77.49% Memory free
4.34 Gb Paging File | 4.00 Gb Available in Paging File | 92.14% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298.08 Gb Total Space | 42.94 Gb Free Space | 14.41% Space Free | Partition Type: NTFS
Drive D: | 279.47 Gb Total Space | 1.18 Gb Free Space | 0.42% Space Free | Partition Type: NTFS

Computer Name: ATHLON | User Name: Chris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-220523388-162531612-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring" = 0

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5985:TCP" = 5985:TCP:*:Disabled:Windows Remote Management
"1900:TCP" = 1900:TCP:LocalSubNet:Enabled:UDP 1900
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"5353:UDP" = 5353:UDP:*:Enabled:Bonjour Port 5353

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\games\Star Wars-The Old Republic\launcher.exe" = C:\games\Star Wars-The Old Republic\launcher.exe:*:Enabled:Star Wars - The Old Republic
"C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\retailclient\swtor.exe" = C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\retailclient\swtor.exe:*:Enabled:Star Wars - The Old Republic -- (BioWare, A Division of Electronic Arts)
"C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe" = C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe:*:Enabled:Star Wars - The Old Republic -- (BioWare)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\backup\Program Files\Curious Labs\Poser 6\Poser.exe" = D:\backup\Program Files\Curious Labs\Poser 6\Poser.exe:*:Enabled:Poser executable file -- (Curious Labs, Inc.)
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe" = C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher -- ()
"C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze
"C:\Program Files\EA GAMES\Medal of Honor Pacific Assault™\mohpa.exe" = C:\Program Files\EA GAMES\Medal of Honor Pacific Assault™\mohpa.exe:*:Enabled:Medal of Honor Pacific Assault™ -- (Electronic Arts Inc.)
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe" = C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation)
"C:\Program Files\Steam\steamapps\common\mafia ii\pc\mafia2.exe" = C:\Program Files\Steam\steamapps\common\mafia ii\pc\mafia2.exe:*:Enabled:Mafia II -- (2K Czech)
"C:\Ubisoft\Silent Hunter 5\sh5.exe" = C:\Ubisoft\Silent Hunter 5\sh5.exe:*:Enabled:Silent Hunter 5 -- (Ubisoft)
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\retailclient\swtor.exe" = C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\retailclient\swtor.exe:*:Enabled:Star Wars - The Old Republic -- (BioWare, A Division of Electronic Arts)
"C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe" = C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe:*:Enabled:Star Wars - The Old Republic -- (BioWare)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"ˆΕ–ιƒg―ƒm–»“yŠΩ `‚Υ‚Ι‚γ‚Υ‚θXX`" = ˆΕ–ιƒg―ƒm–»“yŠΩ `‚Υ‚Ι‚γ‚Υ‚θXX`
"{00030409-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Small Business
"{00606438-902C-4280-84DD-E665911DFBE1}" = Aerosoft's - PBY Catalina X
"{01386D1F-ADE7-43B4-A4E9-312FC5BC726F}_is1" = SWF Opener
"{03ABC33C-10B1-400E-B1FA-E817FE98D11C}" = YUME MIRU KUSURI
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{053A7E07-3D44-4CDB-B79C-EE8755BFD7D6}" = Class_50_Content_Update
"{0824EE6D-137F-4B83-9628-8E7B000BEBA6}" = Rail Simulator
"{08F8FD7C-44A5-4423-B87C-EBD3D94C9F87}" = Vampire - The Masquerade Bloodlines
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D005F09-A5F4-473B-A901-5735C6AF5628}" = Silent Hunter Wolves of the Pacific
"{0DBF3265-57F1-4D8A-87EA-332B2A669BDE}" = Indiana Jones and the Emperors Tomb
"{0DC9C45C-966C-488D-B97E-5C68E161CDCC}" = SceneryTech South America Landclass v1.0
"{14C87AA7-08E6-419F-A165-998EBE5023D7}" = Oblivion - Knights of the Nine
"{16B2498C-C6C1-4AE7-95EF-D2A09F50071C}" = KODAK Share Button App
"{16D919E6-F019-4E15-BFBE-4A85EF19DA57}" = Oblivion - Spell Tomes
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1EA3955C-D76A-4A82-9EC8-A12EF229AC8E}" = German Landmarks FS2004
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2205B8AE-490E-43F2-AB43-C13C2BEC86A7}" = DDS Thumbnail Viewer
"{23D683DD-93C6-48E6-B84E-78B57778F126}" = Oblivion - Construction Set
"{23F79416-CAD1-41BF-99A3-040F6C814AAA}" = NVIDIA Photoshop Plug-ins
"{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1" = Aegisub 2.1.9
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{2E295B5B-1AD4-4d36-97C2-A316084722CF}" = Python 2.7.2
"{2F2E3D62-8B8C-448F-8900-451325E50948}" = Oblivion - Wizard's Tower
"{2F4AF40B-433A-494E-BB41-816D113F32BA}" = aerosoft's - Mega Airport London Heathrow X
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{354D00E0-C7C9-4BC1-BC12-08C4977AA827}" = SlimDX Redistributable (June 2010)
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{37C8899D-FD70-481F-94AA-1F1B08765E22}" = Acronis True Image Home
"{394BE3D9-7F57-4638-A8D1-1D88671913B7}" = Microsoft AppLocale
"{3ABEBD00-299D-4DCA-967F-B912163AB5EA}" = Oblivion - Horse Armor Pack
"{3B03E732-6150-4D0A-849F-C6F4141EA78C}" = EPSON Perfection V30/V300 Photo Scanner Driver Update
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E78FBCF-AEC6-46A6-928E-1729772303BD}" = Legend Part 2
"{3FA7A919-87DA-42B1-814B-86DE8DCA17C2}" = gmax
"{40D141F7-08F5-44DD-A201-93EB0153CB18}" = Battlecruiser Millennium Gold
"{42258A5E-3399-43FE-8169-46336BCB79DA}" = Silent 3ditor (v0.9.9)
"{4290EA5A-633E-4C6D-B9E3-5FEAEC615CC9}" = Anachronox
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{47BBA5AA-CA6F-4A41-858D-A7A776F29A8B}" = Google SketchUp 8
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C577751-2A67-450B-B689-B9E5A40E5E55}" = Martin M130 for FSX or FS2004
"{4C7F54EE-DC36-431F-9978-DA678D77C4BA}" = aerosoft's - Tahiti X
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{501451DE-5808-4599-B544-8BD0915B6B24}_is1" = FreeRIP v3.5
"{50795E20-2B69-11D6-B782-00A0CC7B9044}" = TGV Pack
"{51D199F4-5593-4BC9-B2A5-BB1CDE0C894A}" = aerosoft's - Mega Airport Paris CDG
"{51D386C4-0227-46A9-AC45-61F0A50E7AFF}" = Rome - Total War
"{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}" = Oblivion - Vile Lair
"{531F0013-964C-4BE6-B382-4117DC8BCDF9}" = ArcSoft MediaImpression
"{53E5E2ED-1603-4531-B602-42526F2BB973}" = CR-Software's - German Landmarks FSX
"{587A2120-41D3-11DB-3D6C-00E19E4D4AE1}" = MSTS Patch 1.8.0521 EN
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.6
"{5F8AC8E8-3377-42FF-BAF3-6113FFAF1704}" = Aerosoft's - Alcatraz
"{61879398-F35C-4628-AC95-2B84B859FE93}" = nrg2iso
"{65DE496C-67DC-4E4A-8DAE-B695359AF765}" = UKTS Freeware Pack - Clutter #1
"{679F739E-5C76-4A41-B562-F9392156B6DD}" = System Requirements Lab CYRI
"{69BA7792-853B-45A3-A29F-539C0D7A2A62}" = Myst Uru - Complete Chronicles
"{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}" = Apple Application Support
"{6BF81CE7-3D5A-497F-8912-2A65A0253E1B}" = Beyond Good & Evil
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71929EC1-FDB2-4A67-AAAD-936E4539FA84}_is1" = Driver Sweeper 2.1.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74F493A2-1264-4BF2-A135-0184C68BD580}" = aerosoft's - Venice X
"{786CF17A-66A5-4A35-B24A-178D3B39F86A}_is1" = Womble EasyDVD 1.0.1.21 (11/2009)
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79D463F9-89DB-4308-84AA-46BE55361231}" = UKTS Freeware Pack - Blocks and Lofts #1
"{7D66915F-05FF-4F59-B2D3-AA2E58506F72}" = nHancer
"{7EDA0540-377F-11D6-B782-00A0CC7B9044}" = American Classics
"{7EF15AAF-42AC-4CF6-B4B4-C4F0D1D92122}" = Far Cry (Patch 1.4)
"{7F34A21F-2DEB-4598-BB19-611D6BD24271}" = Managed DirectX (0900)
"{8159A712-8DAF-4845-90E6-B3D00A7223F8}" = UKTS Freeware Pack - UK DMUs-EMUs-Trams #1
"{8327FF0C-F09F-446A-9D6C-2DD24AFE3C02}" = UKTS Freeware Pack - UK Steam #1
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83FC981A-5557-4A2D-9C36-ED133DC5BFB9}" = SceneryTech Europe Landclass v1.1
"{85CCDC7D-71DA-4671-9FF6-1ABF86439859}" = Short Empire for FSX or FS2004
"{86317DFA-7310-4035-B3C2-D17EE0894343}" = UKTS Freeware Pack - Housing #1
"{8681B1E6-CD96-46EF-9065-CE0D1085ED99}" = Star Wars JK II Jedi Outcast
"{87B0968C-F15D-4673-8E71-B4DB93200977}" = aerosoft's - London Brighton Express
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{88DA244E-4CEA-49E4-AD6A-301B65131E25}" = Shape Viewer
"{8E691FF1-0098-4185-935E-0499568A1ED0}" = UKTS Freeware Pack - UK Wagons #1
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{92482FB3-C05B-41C6-89E7-75D985602A6E}" = System Requirements Lab
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{9530AE42-DAE1-4619-9594-B23487285D17}" = NVIDIA PhysX
"{9720C029-0C2C-4D1E-9DE0-E89971C4C8C7}" = Silent Hunter III
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C7D31D3-EB8C-4753-8ADE-6BCE564994FC}" = aerosoft's - TsTools 2
"{9E816F70-50E9-4BF0-B3CD-BB140EAC3171}" = Microsoft Combat Flight Simulator 3 Mission Pack
"{A0A20753-92DF-4631-82B4-9CACE2FCED6A}" = Oblivion - The Fighter's Stronghold
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A5D65411-8E73-4C85-AD80-9FE8B7391CF9}" = Rome Total War - patch 1.3
"{A6199025-CBF8-4ACB-BEE9-D14EC1CCD731}" = X2 - The Threat
"{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Microsoft Flight Simulator X: Acceleration
"{AC61C594-5F86-4BE9-ABAF-763C6A8E2302}" = Silent Hunter 5
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.0)
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 285.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 285.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.95
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B56D25A0-1316-4255-AB45-1147C9D01C5E}" = Aerosoft's - MonacoX
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1" = SUPER © v2011.build.49 (July 1st, 2011) version v2011.build.49
"{BE4BA698-8533-4F77-9559-C7F3F78C0B05}" = Assassin's Creed Brotherhood
"{BF7C1B99-A250-45EF-B186-0C33B7308F95}" = SD40-2_Content_Update
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1002665-A1DD-4764-AEDC-0769E09FAA4D}" = aerosoft's - VFR London X
"{C28547BD-CF16-4CD4-B423-6286EEA6BEC3}" = UKTS Freeware Pack - Railway Buildings #1
"{C325F588-D6B1-4A7F-B6A2-914C75DDA348}" = Morrowind
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5}" = WinZip 11.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE7CB214-DB11-4B5D-A6AF-3B4ED47C68B7}" = Microsoft Game Studios Common Redistributables Pack 1
"{D3DC0D60-4709-11D6-B782-00A0CC7B9044}" = Euro Loco Pack
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{D6DE02C7-1F47-11D4-9515-00105AE4B89A}" = Paint Shop Pro 7 Anniversary Edition
"{D751B34C-058F-42EF-BE95-14EBB0D2C585}" = Dreamfall
"{DB3C800B-081B-4146-B4E3-EFB5B77AA913}" = TES Construction Set
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.6.316
"{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb" = Microsoft Windows Application Compatibility Database
"{DEC3F173-702E-4DE9-877F-163DBEAC95AC}" = StormPowered
"{DF91C497-0315-43F9-BB85-24D82FE5B11A}" = aerosoft's - USCitiesX - San Francisco
"{E35372BE-9326-4059-899A-933E70B3008F}" = Skyrim NPC Editor
"{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
"{E7D84414-DA9A-4ECA-A00D-CE9890002B36}_is1" = Culpa_Innata - uncut
"{E91C757A-854C-4057-A67D-7FAE297B2016}" = SceneryTech North America Landclass v1.4
"{EA6465E2-11AA-43EA-9FC3-2298A1B24C5D}" = CR-Software's - German Landmarks FS2004
"{EC425CFC-EE78-4A91-AA25-3BFA65B75364}" = Oblivion - Orrery
"{EF295F5C-7B57-47AA-8889-6B3E8E214E89}" = Oblivion - Mehrunes Razor
"{EFF0D84D-C49A-461E-BC21-D6ED8B2C0D5D}" = SceneryTech Indo-Pacific Landclass v1.0
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F22EE695-4EF1-4188-A209-FD959A494F7B}" = SceneryTech Asia Landclass v1.0
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F6DD0D9E-C9C4-4CB9-91D4-39D665042151}" = German Landmarks FSX
"{F8BFB921-22B9-4370-A599-6E8B31A52E35}" = UKTS Freeware Pack - UK Classic Diesel and Electric #1
"{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1" = StreamTransport version: 1.0.2.2171
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FBEDD989-D0C3-4DF4-A41C-5FC9DD693E18}" = Agatha Christie - Murder on the Orient Express
"{FC123EEA-330A-4685-911C-95B8F5E9DE68}" = Thief - Deadly Shadows
"{FE61D529-2870-43B7-BD64-E89436E19785}" = UKTS Freeware Pack - UK Carriages #1
"{FEFAF112-4DA8-479C-89E2-7DE25091711A}" = Call of Juarez - Bound in Blood
"{FFFFFD17-B460-41EB-93F1-C48ABAD63828}" = Oblivion - Thieves Den
"3DSexVilla2-058.002" = thriXXX 3DSexVilla2-058.002
"6af12c54-643b-4752-87d0-8335503010de_is1" = Nexus Mod Manager
"7-Zip" = 7-Zip 9.20
"AceIt_is1" = AceIt v1.3.1
"Adobe Acrobat 4.0" = Adobe Acrobat 4.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop 7.0" = Adobe Photoshop 7.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advent" = Advent Rising
"Airbus Series Vol.1 (FS X)" = Airbus Series Vol.1 (FS X)
"Atlantis - The Lost Tales_is1" = Atlantis - The Lost Tales
"AudioCS" = Creative Audio Console
"Avidemux 2.5" = Avidemux 2.5
"Bazooka Cafe" = Bazooka Cafe
"BR BDA Bogie Bolsters" = BR BDA Bogie Bolsters
"BR MK1 Tail Lamp" = BR MK1 Tail Lamp
"BTmod" = Oblivion - BTmod 2.20
"Bulleid Q1 0-6-0 v1.0 for Microsoft Train Simulator" = Bulleid Q1 0-6-0 v1.0 for Microsoft Train Simulator
"Bytescout XLS Viewer_is1" = $APPNAME> 2.31
"Cabina per locomotive FS Gr. 740" = Cabina per locomotive FS Gr. 740
"Cabina per locomotive FS Gr. 940" = Cabina per locomotive FS Gr. 940
"CCleaner" = CCleaner
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2011-11-11
"comtypes-py2.7" = Python 2.7 comtypes-0.6.2
"DarkLoader_is1" = DarkLoader 4.3
"DB BR 38 with "Wannentender" " = DB BR 38 with "Wannentender"
"DDS Converter 2.1" = DDS Converter 2.1
"de stoomloc NS 3737" = de stoomloc NS 3737
"Distressed 7 plank wagon" = Distressed 7 plank wagon
"Do Not Track Plus Add-on_is1" = Do Not Track Plus Add-on 1.0.5570.0305
"Dragonsphere_is1" = Dragonsphere
"DRG Kassel V 1.0" = DRG Kassel V 1.0
"DVD Shrink_is1" = DVD Shrink 3.2
"EAD Modernisι X4400" = EAD Modernisι X4400
"EAX Unified" = EAX Unified
"EPSON Scanner" = EPSON Scan
"ESET Online Scanner" = ESET Online Scanner v3
"FileZilla Client" = FileZilla Client 3.5.1
"Flatland Rover ™" = Flatland Rover ™
"FlightSim_{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Microsoft Flight Simulator X: Acceleration
"FLVPlayer4Free Free FLV Player_is1" = FLVPlayer4Free Free FLV Player 3.8.0.0
"Fraps" = Fraps
"Freelancer 1.0" = Freelancer
"FreeSpace2" = FreeSpace 2
"Fs Etr480 " = Fs Etr480
"GlidewrapZbag" = zeckensack's Glide wrapper (remove only)
"GWR 38xx 2-8-0 No. 3850" = GWR 38xx 2-8-0 No. 3850
"GWR Loco Sound Set" = GWR Loco Sound Set
"Handbrake" = Handbrake 4462 Nightly
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"ImgBurn" = ImgBurn
"InstallShield_{0824EE6D-137F-4B83-9628-8E7B000BEBA6}" = Rail Simulator
"InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"InstallShield_{9720C029-0C2C-4D1E-9DE0-E89971C4C8C7}" = Silent Hunter III
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.0.4 (Standard)
"Kosmos 1.0" = Kosmos 1.0
"LucasArts' Grim Fandango" = LucasArts' Grim Fandango
"LucasArts' Jedi Knight" = LucasArts' Jedi Knight
"LucasArts' Mysteries of the Sith" = LucasArts' Mysteries of the Sith
"MAD Alien.UnSafeDiscX" = MAD Alien / UnSafeDiscX (remove only)
"Mafia" = Mafia
"Magic ISO Maker v5.5 (build 0272)" = Magic ISO Maker v5.5 (build 0272)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400
"MegaSceneryX_is1" = Hawaii Oahu
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"MKVToolNix" = MKVToolNix 5.3.0
"MOUL" = Myst Online: Uru Live (remove only)
"Mozart, Le Dernier Secret_is1" = MOZART version 1.0
"Mozilla Firefox 11.0 (x86 en-US)" = Mozilla Firefox 11.0 (x86 en-US)
"MSTS Activity-Analysis 2.18" = MSTS Activity-Analysis 2.18
"Myst Masterpiece Edition" = Myst Masterpiece Edition
"NeroMultiInstaller!UninstallKey" = Nero Suite
"nHancer" = nHancer
"NifSkope" = NifSkope (remove only)
"NS 2134 V 1.2" = NS 2134 V 1.2
"NS 3415 V 1.2" = NS 3415 V 1.2
"NS AB7500 V 1.0" = NS AB7500 V 1.0
"NS CHPW V 1.0" = NS CHPW V 1.0
"NS Dg24xx V 1.0" = NS Dg24xx V 1.0
"NS GLG V 1.0" = NS GLG V 1.0
"NS GTMK V 1.1" = NS GTMK V 1.1
"NS P-Ketelwagens V 1.0" = NS P-Ketelwagens V 1.0
"NS1100 V 2.0" = NS1100 V 2.0
"NS3900 V 1.0" = NS3900 V 1.0
"NS6300 V 1.0" = NS6300 V 1.0
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"OGM to AVI_is1" = OGM to AVI Beta .6
"Omikron The Nomad Soul" = Omikron The Nomad Soul
"Open Codecs" = Xiph.Org Open Codecs 0.84.17359
"OpenAL" = OpenAL
"Outcast_is1" = Outcast
"Product_Name" = Train Sim Interface Quick Fix
"PROR" = Microsoft Office Professional 2007
"PunkBusterSvc" = PunkBuster Services
"pywin32-py2.7" = Python 2.7 pywin32-216
"Rame 1928 AUTEUR JEAN PIERRE DUVAL" = Rame 1928 AUTEUR JEAN PIERRE DUVAL
"RealAlt_is1" = Real Alternative 1.8.2 Lite
"Revo Uninstaller" = Revo Uninstaller 1.93
"Rome, Caesar's will" = Rome, Caesar's will
"RTMshadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Flight Simulator X
"S.P.Q.R." = S.P.Q.R.
"ScaleRail1.77" = ScaleRail
"Scotflight FSX: Highlands & Islands" = Scotflight FSX: Highlands & Islands
"ScummVM_is1" = ScummVM 1.1.1
"Southern Region" = Southern Region
"SP1shadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Flight Simulator X Service Pack 1
"ST6UNST #1" = ConBuilder
"ST6UNST #2" = MSTS Activity Generator
"ST6UNST #3" = PZPick
"ST6UNST #4" = Shape Viewer 1.3
"Steam App 203850" = Microsoft Flight
"Steam App 50130" = Mafia II
"STP DB ICE3 403 V1.0" = STP DB ICE3 403 V1.0
"TGATool2A_is1" = TGATool2A version 4.00.34
"TGVDuplex" = TGVDuplex
"TGVDuplex Patch 2" = TGVDuplex Patch 2
"The Elder Scrolls V Skyrim - High Resolution Texture Pack_is1" = The Elder Scrolls V Skyrim - High Resolution Texture Pack
"The Longest Journey" = The Longest Journey
"Thief2DeinstallKey" = Thief 2
"Tomb Raider - The Last Revelation" = Tomb Raider - The Last Revelation
"Tomb Raider - The Lost Artifact" = Tomb Raider - The Lost Artifact
"Tomb Raider Chronicles" = Tomb Raider Chronicles
"Tomb Raider II" = Tomb Raider II
"Tomb Raider III" = Tomb Raider III
"Tomb Raider Level Editor" = Tomb Raider Level Editor XP
"Train Artisan Empire State Express 2.0 Trainset Add-on for MSTS" = Train Artisan Empire State Express 2.0 Trainset Add-on for MSTS
"Train Simulator 1.0" = Microsoft Train Simulator
"Train Store V3.2" = Train Store V3.2
"TrainSim Jumper" = TrainSim Jumper (remove only)
"ttkVWR_is1" = TatukGIS Viewer 1.13.1.370 (No Help)
"Unlocker" = Unlocker 1.9.1
"VanPlusFSX_is1" = Vancouver+ Part 1 v2.0 (FSX)
"VicPlusFSX_is1" = Victoria+ FSX
"Virtual Train NS Plan D beta 0.5" = Virtual Train NS Plan D beta 0.5
"Virtual Train NS Plan D pack 1" = Virtual Train NS Plan D pack 1
"Virtual Train NS Plan D pack 2" = Virtual Train NS Plan D pack 2
"Virtual Train NS Serie 1000 V1.0" = Virtual Train NS Serie 1000 V1.0
"VLC media player" = VLC media player 1.1.11
"VT NS serie 1200" = VT NS serie 1200
"Wages of Sin" = Wages of Sin
"WG Historische Goederenwagens-1" = WG Historische Goederenwagens-1
"WG_NS_HH_V1_1" = WG_NS_HH_V1_1
"WheelCam_is1" = WheelCam 2.7
"WinAce Archiver" = WinAce Archiver
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Womble EasyDVD" = Womble EasyDVD 1.0.1.21 (11/2009)
"Word Reader 6.03" = Word Reader 6.03
"Wrye Bash" = Wrye Bash
"wxPython2.8-ansi-py25_is1" = wxPython 2.8.11.0 (ansi) for Python 2.5
"wxPython2.8-ansi-py27_is1" = wxPython 2.8.12.0 (ansi) for Python 2.7
"wxPython2.8-unicode-py27_is1" = wxPython 2.8.12.1 (unicode) for Python 2.7
"X Plugin Manager" = X Plugin Manager 2.12
"X3TC Bonus Package_is1" = X3TC Bonus Package 4.1.01
"XMedia Recode" = XMedia Recode 3.0.6.0
"Xvid_is1" = Xvid 1.1.3 final uninstall
"Yosemite/Mono Lake" = Yosemite/Mono Lake

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-220523388-162531612-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Airbus Series Vol.2 (FS X)" = Airbus Series Vol.2 (FS X)
"Ground Environment X USA-Canada" = Ground Environment X USA-Canada
"OCEANIA - ASIA SRTM TERRAIN MESH - FSX ONLY" = OCEANIA - ASIA SRTM TERRAIN MESH - FSX ONLY
"OCEANIA - ASIA SRTM TERRAIN MESH - FSX ONLY " = OCEANIA - ASIA SRTM TERRAIN MESH - FSX ONLY
"Route_Riter v7.1.29" = Route_Riter v7.1.29
"RW_Tools V3" = RW_Tools V3
"Surfliner Mega Pack V1" = Surfliner Mega Pack V1
"Ultimate Terrain X - Canada" = Ultimate Terrain X - Canada
"VSM Mat'24 - Blokkendoosrijtuigen" = VSM Mat'24 - Blokkendoosrijtuigen
"WG_NS_20_V1_0" = WG_NS_20_V1_0
"WG_NS_5201_V0_1" = WG_NS_5201_V0_1
"WG_NS_7200rijtuigen_V1_0" = WG_NS_7200rijtuigen_V1_0
"WG_NS_Ketelwagens_V1_1" = WG_NS_Ketelwagens_V1_1
"X55 Sailing Yacht v1.1" = X55 Sailing Yacht v1.1

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5/5/2012 06:11:46 AM | Computer Name = ATHLON | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 5/5/2012 10:11:58 AM | Computer Name = ATHLON | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 5/5/2012 10:12:00 AM | Computer Name = ATHLON | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: A connection with the server could not be established

Error - 5/5/2012 10:12:01 AM | Computer Name = ATHLON | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 5/5/2012 10:12:01 AM | Computer Name = ATHLON | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 5/5/2012 02:12:51 PM | Computer Name = ATHLON | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 5/5/2012 02:12:51 PM | Computer Name = ATHLON | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 5/5/2012 02:12:52 PM | Computer Name = ATHLON | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: A connection with the server could not be established

Error - 5/5/2012 02:12:52 PM | Computer Name = ATHLON | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 5/5/2012 02:12:52 PM | Computer Name = ATHLON | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

[ System Events ]
Error - 5/5/2012 03:03:04 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 5/5/2012 03:04:45 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 5/5/2012 03:04:45 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 5/5/2012 03:04:46 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 5/5/2012 03:04:58 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7034
Description = The Snapman service terminated unexpectedly. It has done this 1 time(s).

Error - 5/5/2012 03:06:32 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 5/5/2012 03:06:32 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 5/5/2012 03:06:32 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 5/5/2012 03:11:42 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7000
Description = The Logitech Process Monitor service failed to start due to the following
error: %%2

Error - 5/5/2012 03:11:42 PM | Computer Name = ATHLON | Source = Service Control Manager | ID = 7023
Description = The Db2remotecmd service terminated with the following error: %%126


< End of report >
Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

#10 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:03:41 AM

Posted 05 May 2012 - 07:06 PM

Hello,



Did you set this proxy yourself or not?



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577



Do you know what is this?

C:\Documents and Settings\Chris\Start Menu\Programs\ƒeƒBƒ“ƒNƒ‹ƒxƒ‹





Please make sure that you can view all hidden files. Instructions on how to do this can be found here:

How to see hidden files in Windows

Please click this link-->Virustotal

When the Virustotal page has finished loading, click the Browse button and navigate to the following file and click Submit.

C:\WINDOWS\System32\drivers\eighuh.sys

note, if VT says these files have already been analysed, make sure you click re-analyse file now.

Please post back the results of the scan in your next post.

If Virustotal is busy, try the same at Virscan: http://virscan.org/

Repeat the steps for these files:

C:\WINDOWS\System32\drivers\kqqkoeqo.sys
C:\Program Files\UnGEXUSACAN.exe




When I see the results, we will proceed with the cleaning process.



Regards,
Georgi

cXfZ4wS.png


#11 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 08:06 PM

No i dont know how to set proxies...so no i did not set that.

hidden files already shown, that link you gave me actually just goes to the table of contents page for Bleeping btw. not to any info on how to show files.

and i dont know what C:\Documents and Settings\Chris\Start Menu\Programs\ƒeƒBƒ“ƒNƒ‹ƒxƒ‹ is....it maybe a japanese program as i analyize and study some Japanese software but i am not sure. I have Asian Languages enabled so i would not usually see that substitution text.




here are the three scans:

SHA256: 3da4f51682e7d42c5569f1fb1adc6295182962e36f748219e1d0c8f2389ba516
File name: eighuh.sys
Detection ratio: 1 / 42
Analysis date: 2012-05-06 00:58:12 UTC ( 0 minutes ago )
0
0
More details
Antivirus Result Update
AhnLab-V3 - 20120505
AntiVir - 20120504
Antiy-AVL - 20120506
Avast - 20120505
AVG - 20120505
BitDefender - 20120506
ByteHero - 20120505
CAT-QuickHeal - 20120505
ClamAV - 20120506
Commtouch - 20120506
Comodo - 20120505
DrWeb - 20120506
Emsisoft - 20120506
eSafe Win32.TrojanHorse 20120502
eTrust-Vet - 20120504
F-Prot - 20120506
F-Secure - 20120505
Fortinet - 20120505
GData - 20120506
Ikarus - 20120505
Jiangmin - 20120505
K7AntiVirus - 20120505
Kaspersky - 20120506
McAfee - 20120506
McAfee-GW-Edition - 20120505
Microsoft - 20120505
NOD32 - 20120506
Norman - 20120504
nProtect - 20120505
Panda - 20120505
PCTools - 20120506
Rising - 20120504
Sophos - 20120506
SUPERAntiSpyware - 20120411
Symantec - 20120506
TheHacker - 20120505
TrendMicro - 20120505
TrendMicro-HouseCall - 20120506
VBA32 - 20120504
VIPRE - 20120505
ViRobot - 20120505
VirusBuster - 20120504

Comments
Votes
Additional information

Confirmed by MBAM as part of their toolkit here: http://forums.malwarebytes.org/index.php?showtopic=99093&hl=3da4f51682e7d42c5569f1fb1adc6295182962e36f748219e1d0c8f2389ba516&fromsearch=1

----------------------------

SHA256: 2639b35770113a6fab7deeb9d86d172ad77bc63ab7fc6649aee65597b8c857b7
File name: kqqkoeqo.sys
Detection ratio: 1 / 42
Analysis date: 2012-05-06 01:00:40 UTC ( 0 minutes ago )
0
0
More details
Antivirus Result Update
AhnLab-V3 - 20120505
AntiVir - 20120504
Antiy-AVL - 20120506
Avast - 20120505
AVG - 20120505
BitDefender - 20120506
ByteHero - 20120505
CAT-QuickHeal - 20120505
ClamAV - 20120506
Commtouch - 20120506
Comodo - 20120505
DrWeb - 20120506
Emsisoft - 20120506
eSafe - 20120502
eTrust-Vet - 20120504
F-Prot - 20120506
F-Secure - 20120505
Fortinet - 20120505
GData - 20120506
Ikarus - 20120505
Jiangmin - 20120505
K7AntiVirus - 20120505
Kaspersky - 20120506
McAfee - 20120506
McAfee-GW-Edition - 20120505
Microsoft - 20120505
NOD32 - 20120506
Norman - 20120504
nProtect - 20120505
Panda - 20120505
PCTools 4031 20120506
Rising - 20120504
Sophos - 20120506
SUPERAntiSpyware - 20120411
Symantec - 20120506
TheHacker - 20120505
TrendMicro - 20120505
TrendMicro-HouseCall - 20120506
VBA32 - 20120504
VIPRE - 20120505
ViRobot - 20120505
VirusBuster - 20120504

Comments
Votes
Additional information

----------------------------------------------------

SHA256: 955cef4f8408b4ec6036681412e7e6c3d48804e17269b6cd447cfeddd59888d6
File name: UnGEXUSACAN.exe
Detection ratio: 0 / 42
Analysis date: 2012-05-06 01:04:03 UTC ( 0 minutes ago )
0
0
More details
Antivirus Result Update
AhnLab-V3 - 20120505
AntiVir - 20120504
Antiy-AVL - 20120506
Avast - 20120505
AVG - 20120505
BitDefender - 20120506
ByteHero - 20120505
CAT-QuickHeal - 20120505
ClamAV - 20120506
Commtouch - 20120506
Comodo - 20120505
DrWeb - 20120506
Emsisoft - 20120506
eSafe - 20120502
eTrust-Vet - 20120504
F-Prot - 20120506
F-Secure - 20120505
Fortinet - 20120505
GData - 20120506
Ikarus - 20120505
Jiangmin - 20120505
K7AntiVirus - 20120505
Kaspersky - 20120506
McAfee - 20120506
McAfee-GW-Edition - 20120505
Microsoft - 20120505
NOD32 - 20120506
Norman - 20120504
nProtect - 20120505
Panda - 20120505
PCTools - 20120506
Rising - 20120504
Sophos - 20120506
SUPERAntiSpyware - 20120411
Symantec - 20120506
TheHacker - 20120505
TrendMicro - 20120505
TrendMicro-HouseCall - 20120506
VBA32 - 20120504
VIPRE - 20120505
ViRobot - 20120505
VirusBuster - 20120504

Edited by CrisGer, 05 May 2012 - 08:09 PM.

Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

#12 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:03:41 AM

Posted 05 May 2012 - 08:45 PM

Hello,



This is the correct link. Sorry for the inconvenience!
http://www.bleepingcomputer.com/tutorials/how-to-see-hidden-files-in-windows/



We need to run an OTL Fix



  • Please reopen Posted Image on your desktop.
  • Copy and Paste the following code into the Posted Image textbox. Do not include the word "Code"
    :OTL
    DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Chris\LOCALS~1\Temp\jfdcd.sys -- (jfdcd)
    DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
    DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a4ioo259)
    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577
    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577
    IE - HKU\S-1-5-21-220523388-162531612-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
    FF - HKLM\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll File not found
    FF - HKCU\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll File not found
    O4 - HKLM..\Run: [KernelFaultCheck]
    [2011/11/28 09:56:00 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\eighuh.sys
    [2011/11/13 04:38:01 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\kqqkoeqo.sys
    [2011/04/04 15:33:26 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\wlyfyl.sys
    [2011/11/28 09:40:13 | 000,003,558 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\intgph5w5hxi1mbo5lqn1a618l3q
    [2011/11/28 09:40:13 | 000,003,558 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\intgph5w5hxi1mbo5lqn1a618l3q
    [2011/06/28 01:31:29 | 000,004,582 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n
    [2011/06/28 01:31:29 | 000,004,582 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n
    [2011/05/21 04:06:41 | 000,002,862 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\747073s32x2s4it14g
    [2011/05/21 04:06:41 | 000,002,862 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\747073s32x2s4it14g
    [2011/04/19 19:59:35 | 000,006,682 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3
    [2011/04/19 19:59:35 | 000,006,682 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3
    [2011/03/22 15:47:13 | 000,007,990 | -HS- | C] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l
    [2011/03/22 15:47:13 | 000,007,990 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l
    [2012/05/05 13:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Azureus
    [2011/11/13 04:26:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\E8gRZ9hYwkVOB
    [2011/11/13 04:26:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\UkkUVVrlOBtx0uS
    [2011/01/30 14:29:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\uTorrent
    [2011/11/13 04:26:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\WbbbD3ppnGaQ
    [2011/11/13 04:26:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Y9ggTZZqjYCkIrz
    :files
    dir /s /a "C:\Documents and Settings\Chris\Start Menu\Programs\ƒeƒBƒ“ƒNƒ‹ƒxƒ‹" /c
    dir /s /a "C:\Documents and Settings\All Users\Application Data\{A0559A84-0A11-425F-BFFC-532378694B25}" /c
    dir /s /a "C:\Documents and Settings\All Users\Application Data\{A2A58654-12AA-408A-B411-58A76959BE7F}" /c
    dir /s /a "C:\Documents and Settings\All Users\Application Data\{FD7CAB3E-E895-4E98-9D68-A307CC601204}" /c
    dir /s /a "C:\Documents and Settings\Chris\Application Data\281AF" /c
    netsh winsock reset catalog /c
    ipconfig /flushdns /c
    :reg
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "EnableFirewall"=dword:00000001 
    "DoNotAllowExceptions"=dword:00000000
    "DisableNotifications"=dword:00000000
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "EnableFirewall"=dword:00000001
    "DoNotAllowExceptions"=dword:00000000
    "DisableNotifications"=dword:00000000
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "C:\Program Files\Vuze\Azureus.exe"=-
    :commands
    [emptytemp]
    
  • Push Posted Image
  • OTL may ask to reboot the machine. Please do so if asked.
  • Click Posted Image.
  • A report will open. Copy and Paste that report in your next reply.
  • If a report is not shown please navigate to the C:\_OTL\MovedFiles folder, and open the newest .log file present.
  • Copy/paste the content of the log back here in your next post.




Regards,
Georgi

cXfZ4wS.png


#13 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 05 May 2012 - 09:39 PM

All processes killed
========== OTL ==========
Service jfdcd stopped successfully!
Service jfdcd deleted successfully!
File C:\DOCUME~1\Chris\LOCALS~1\Temp\jfdcd.sys not found.
Service catchme stopped successfully!
Service catchme deleted successfully!
File C:\ComboFix\catchme.sys not found.
Error: No service named a4ioo259 was found to stop!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a4ioo259 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\

deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-220523388-162531612-725345543-1003\Software\Microsoft\Internet

Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@thrixxx.com/WebLaunch\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@thrixxx.com/WebLaunch\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
File not found.
C:\WINDOWS\system32\drivers\eighuh.sys moved successfully.
C:\WINDOWS\system32\drivers\kqqkoeqo.sys moved successfully.
C:\WINDOWS\system32\drivers\wlyfyl.sys moved successfully.
C:\Documents and Settings\Chris\Local Settings\Application Data\intgph5w5hxi1mbo5lqn1a618l3q moved successfully.
C:\Documents and Settings\All Users\Application Data\intgph5w5hxi1mbo5lqn1a618l3q moved successfully.
C:\Documents and Settings\Chris\Local Settings\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n moved

successfully.
C:\Documents and Settings\All Users\Application Data\e14788fxo5wg2o55i3i3184weu440iq4655150b3n moved successfully.
C:\Documents and Settings\Chris\Local Settings\Application Data\747073s32x2s4it14g moved successfully.
C:\Documents and Settings\All Users\Application Data\747073s32x2s4it14g moved successfully.
C:\Documents and Settings\Chris\Local Settings\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3 moved successfully.
C:\Documents and Settings\All Users\Application Data\k41y6yf68wdoc3hr36k5imibml361rc3rep5e3 moved successfully.
C:\Documents and Settings\Chris\Local Settings\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l moved successfully.
C:\Documents and Settings\All Users\Application Data\cb5pbb6b8p5u6747fhi54qr7f673l moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\updates folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\torrents folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\tmp folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\subs\temp folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\subs folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\shares folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\rss folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins\mlab folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins\azutp\x64 folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins\azutp\win32 folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins\azutp folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins\azupnpav folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins\azemp folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins\aefeatman_v folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\plugins folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\net folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\logs\save folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\logs folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\dht folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\devices folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\active\78E7161AC10031A597CC72BBF8E8AF54C21BC9BE folder moved

successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\active\2773DF65D35F8D2DA21E4D94833AD741EB727429(2) folder moved

successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\active\0AF651478FE9A9ECE038DC4EA837DD4E0AA43C78 folder moved

successfully.
C:\Documents and Settings\Chris\Application Data\Azureus\active folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Azureus folder moved successfully.
C:\Documents and Settings\Chris\Application Data\E8gRZ9hYwkVOB folder moved successfully.
C:\Documents and Settings\Chris\Application Data\UkkUVVrlOBtx0uS folder moved successfully.
C:\Documents and Settings\Chris\Application Data\uTorrent\dlimagecache folder moved successfully.
C:\Documents and Settings\Chris\Application Data\uTorrent\apps folder moved successfully.
C:\Documents and Settings\Chris\Application Data\uTorrent folder moved successfully.
C:\Documents and Settings\Chris\Application Data\WbbbD3ppnGaQ folder moved successfully.
C:\Documents and Settings\Chris\Application Data\Y9ggTZZqjYCkIrz folder moved successfully.
========== FILES ==========
< dir /s /a "C:\Documents and Settings\Chris\Start Menu\Programs\ƒeƒBƒ“ƒNƒ‹ƒxƒ‹" /c >
Volume in drive C has no label.
Volume Serial Number is 281A-F5FB
Directory of C:\Documents and Settings\Chris\Start Menu\Programs\ƒeƒBƒ“ƒNƒ‹ƒxƒ‹
04/15/2012 04:22 PM <DIR> .
04/15/2012 04:22 PM <DIR> ..
04/15/2012 04:22 PM <DIR> ˆΕ–ιƒg―ƒm–»“yŠΩ`‚Υ‚Ι‚γ‚Υ‚θXX`
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Chris\Start Menu\Programs\ƒeƒBƒ“ƒNƒ‹ƒxƒ‹\ˆΕ–ιƒg―ƒm–»“yŠΩ`‚Υ‚Ι‚γ‚Υ‚θXX`
04/15/2012 04:22 PM <DIR> .
04/15/2012 04:22 PM <DIR> ..
04/15/2012 04:22 PM 1,641 ˆΕ–ιƒg―ƒm–»“yŠΩ`‚Υ‚Ι‚γ‚Υ‚θXX`.lnk
04/15/2012 04:22 PM 1,673 ˆΕ–ιƒg―ƒm–»“yŠΩ‚ΜƒAƒ“ƒCƒ“ƒXƒg[ƒ‹.lnk
04/15/2012 04:22 PM 1,793 ‘€μ•ϋ–@.lnk
3 File(s) 5,107 bytes
Total Files Listed:
3 File(s) 5,107 bytes
5 Dir(s) 45,984,378,880 bytes free
C:\Documents and Settings\Chris\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Chris\Desktop\cmd.txt deleted successfully.
< dir /s /a "C:\Documents and Settings\All Users\Application Data\{A0559A84-0A11-425F-BFFC-532378694B25}" /c

>

Volume in drive C has no label.
Volume Serial Number is 281A-F5FB
Directory of C:\Documents and Settings\All Users\Application Data\{A0559A84-0A11-425F-BFFC-532378694B25}
10/13/2011 06:36 PM <DIR> .
10/13/2011 06:36 PM <DIR> ..
10/13/2011 06:36 PM 3,584 1033.MST
10/13/2011 06:36 PM 19,041,280 default.msi
2 File(s) 19,044,864 bytes
Total Files Listed:
2 File(s) 19,044,864 bytes
2 Dir(s) 45,984,382,976 bytes free
C:\Documents and Settings\Chris\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Chris\Desktop\cmd.txt deleted successfully.
< dir /s /a "C:\Documents and Settings\All Users\Application Data\{A2A58654-12AA-408A-B411-58A76959BE7F}" /c

>

Volume in drive C has no label.
Volume Serial Number is 281A-F5FB
Directory of C:\Documents and Settings\All Users\Application Data\{A2A58654-12AA-408A-B411-58A76959BE7F}
06/20/2011 01:10 PM <DIR> .
06/20/2011 01:10 PM <DIR> ..
06/20/2011 01:13 PM 3,584 1033.MST
06/20/2011 01:14 PM 18,799,616 default.msi
2 File(s) 18,803,200 bytes
Total Files Listed:
2 File(s) 18,803,200 bytes
2 Dir(s) 45,984,382,976 bytes free
C:\Documents and Settings\Chris\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Chris\Desktop\cmd.txt deleted successfully.
< dir /s /a "C:\Documents and Settings\All Users\Application Data\{FD7CAB3E-E895-4E98-9D68-A307CC601204}" /c

>

Volume in drive C has no label.
Volume Serial Number is 281A-F5FB
Directory of C:\Documents and Settings\All Users\Application Data\{FD7CAB3E-E895-4E98-9D68-A307CC601204}
03/23/2012 03:00 PM <DIR> .
03/23/2012 03:00 PM <DIR> ..
03/23/2012 03:00 PM 3,584 1033.MST
03/23/2012 03:00 PM 21,185,024 default.msi
2 File(s) 21,188,608 bytes
Total Files Listed:
2 File(s) 21,188,608 bytes
2 Dir(s) 45,984,382,976 bytes free
C:\Documents and Settings\Chris\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Chris\Desktop\cmd.txt deleted successfully.
< dir /s /a "C:\Documents and Settings\Chris\Application Data\281AF" /c >
Volume in drive C has no label.
Volume Serial Number is 281A-F5FB
Directory of C:\Documents and Settings\Chris\Application Data\281AF
11/28/2011 06:18 PM <DIR> .
11/28/2011 06:18 PM <DIR> ..
11/13/2011 07:02 AM 3,432 F5FB.81A
1 File(s) 3,432 bytes
Total Files Listed:
1 File(s) 3,432 bytes
2 Dir(s) 45,984,382,976 bytes free
C:\Documents and Settings\Chris\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Chris\Desktop\cmd.txt deleted successfully.
< netsh winsock reset catalog /c >
Sucessfully reset the Winsock Catalog.
You must restart the machine in order to complete the reset.
C:\Documents and Settings\Chris\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Chris\Desktop\cmd.txt deleted successfully.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Chris\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Chris\Desktop\cmd.txt deleted successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\"EnableFirewall"

|dword:00000001 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\"DoNotAllowExcep

tions"|dword:00000000 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\"DisableNotifica

tions"|dword:00000000 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\"EnableFirewal

l"|dword:00000001 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\"DoNotAllowExc

eptions"|dword:00000000 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\"DisableNotifi

cations"|dword:00000000 /E : value set successfully!
Registry value

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedAppli

cations\List\\C:\Program Files\Vuze\Azureus.exe deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Chris
->Temp folder emptied: 2280789 bytes
->Temporary Internet Files folder emptied: 47125 bytes
->Java cache emptied: 8898 bytes
->FireFox cache emptied: 234924750 bytes
->Flash cache emptied: 3777625 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 557213 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 33251 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 230.00 mb


OTL by OldTimer - Version 3.2.42.2 log created on 05052012_203431

Files\Folders moved on Reboot...
C:\WINDOWS\temp\Perflib_Perfdata_fec.dat moved successfully.

Registry entries deleted on Reboot...
Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin

#14 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:03:41 AM

Posted 06 May 2012 - 04:05 AM

Hello CrisGer,



We need to run an OTL Fix



  • Please reopen Posted Image on your desktop.
  • Copy and Paste the following code into the Posted Image textbox. Do not include the word "Code"
    :files
    C:\Documents and Settings\Chris\Application Data\281AF
    :commands
    [emptytemp]
    
  • Push Posted Image
  • OTL may ask to reboot the machine. Please do so if asked.
  • Click Posted Image.
  • A report will open. Copy and Paste that report in your next reply.
  • If a report is not shown please navigate to the C:\_OTL\MovedFiles folder, and open the newest .log file present.
  • Copy/paste the content of the log back here in your next post.



I'd like us to scan your machine with aswMBR



Please download aswMBR.exe to your desktop.



  • Double click the aswMBR.exe icon to run it.
  • The program will offers to download the latest antivirus definitions from Avast servers. Click YES to agree.
  • When it's done in the AV Scan drop down options choose C:\
    Posted Image
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
Note - do NOT attempt any Fix or FixMBR yet.



How are things now ?



Regards,
Georgi

cXfZ4wS.png


#15 CrisGer

CrisGer
  • Topic Starter

  • Members
  • 306 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Colorado and California
  • Local time:05:41 PM

Posted 06 May 2012 - 07:15 AM

the avast scan is taking forever, now bogged down among the exe files of the cleaning software we have been using on the desktop so i am going to send what it found so far, and keep it running just in case...it found one yellow possible (locked entry) and one red dll and one red driver...see logs below..

system appears good, no redirects so far...

OTL Fix:

All processes killed
========== FILES ==========
C:\Documents and Settings\Chris\Application Data\281AF folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Chris
->Temp folder emptied: 2247 bytes
->Temporary Internet Files folder emptied: 35380 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 60882459 bytes
->Flash cache emptied: 456 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 58.00 mb


OTL by OldTimer - Version 3.2.42.2 log created on 05062012_053038

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

aswMBR scan so far:

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-05-06 05:50:36
-----------------------------
05:50:36.843 OS Version: Windows 5.1.2600 Service Pack 3
05:50:36.843 Number of processors: 1 586 0x2701
05:50:36.843 ComputerName: ATHLON UserName: Chris
05:50:37.703 Initialize success
05:50:43.796 AVAST engine defs: 12050600
05:50:51.375 Disk 0 \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port1Path1Target1Lun0
05:50:51.375 Disk 0 Vendor: Maxtor_7 BANC Size: 286188MB BusType: 3
05:50:51.375 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Scsi\nvgts2Port2Path0Target0Lun0
05:50:51.375 Disk 1 Vendor: ST332062 3.AA Size: 305245MB BusType: 3
05:50:51.390 Disk 1 MBR read successfully
05:50:51.406 Disk 1 MBR scan
05:50:51.437 Disk 1 Windows XP default MBR code
05:50:51.453 Disk 1 Partition 1 80 (A) 07 HPFS/NTFS NTFS 305234 MB offset 63
05:50:51.468 Disk 1 scanning sectors +625121280
05:50:51.562 Disk 1 scanning C:\WINDOWS\system32\drivers
05:51:11.921 Service scanning
05:51:27.015 Service sptd C:\WINDOWS\System32\Drivers\sptd.sys **LOCKED** 32
05:51:30.953 Modules scanning
05:51:54.250 Disk 1 trace - called modules:
05:51:54.281 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x8ad491f8]<<
05:51:54.296 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0x8ac7c498]
05:51:54.296 3 CLASSPNP.SYS[b8108fd7] -> nt!IofCallDriver -> \Device\0000007c[0x8abf6030]
05:51:54.312 5 ACPI.sys[b7e74620] -> nt!IofCallDriver -> \Device\Scsi\nvgts2Port2Path0Target0Lun0[0x8ac7d1c0]
05:51:54.328 \Driver\nvgts[0x8ac2c168] -> IRP_MJ_CREATE -> 0x8ad491f8
05:51:55.203 AVAST engine scan C:\
06:11:18.203 Disk 1 MBR has been saved successfully to "C:\Documents and Settings\Chris\Desktop\MBR.dat"
06:11:18.234 The log file has been saved successfully to "C:\Documents and Settings\Chris\Desktop\aswMBR.txt"

and it also spawned a MBRF .dat file on the desk top.

thanks for all the help, standing by for next steps... i will let the scan keep running to see if it finds anything else..

Edited by CrisGer, 06 May 2012 - 07:43 AM.

Game Researcher and Designer
http://3dworldandgamedevelopers.blogspot.com//
Admin
3D Worlds and Game Developers Group Linkedin




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users