Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

infected with trojan.dropper & unknown audio ads


  • This topic is locked This topic is locked
36 replies to this topic

#1 tyler87898

tyler87898

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 15 June 2012 - 09:47 PM

Hi, I have a problem with my Windows 7 computer in which I here random advertisements through my speakers. Also, in Google chrome, I can't sign in to Google (nor could anyone in my family) so I press the "can't access my account" button and it comes up with this red screen that says:

The site's security certificate is signed using a weak signature algorithm!
You attempted to reach support.google.com, but the server presented a certificate signed using a weak signature algorithm. This means that the security credentials the server presented could have been forged, and the server may not be the server you expected (you may be communicating with an attacker).
You cannot proceed because the website operator has requested heightened security for this domain.

I've used Malwarebytes to remove viruses but they just keep coming back when I reboot it doesn't help. Malwarebytes says there is a Trojan.Dropper.BCMiner.

I've also ran AVG and the DDS program. Here is the log from the DDS:

Thank you for your help.
Tyler
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Tyler at 21:14:18 on 2012-06-15
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8109.7061 [GMT -4:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
C:\Windows\runservice.exe
C:\Program Files\Microsoft LifeCam\MSCamS64.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
C:\Program Files (x86)\Secunia\PSI\PSIA.exe
C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\RemoteX\RemoteX.exe
C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files (x86)\Secunia\PSI\sua.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k HPService
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\RemoteX\RemoteXUser.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\GIGABYTE\SMART6\Recovery\RPMDaemon.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Jumi\jumi.exe
C:\Users\Tyler\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Users\Tyler\AppData\Local\Autobahn\nexdef.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
C:\Users\Tyler\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe
C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\sysWOW64\wbem\wmiprvse.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Tyler\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler64.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Jumi\JumiPortForwarderBonjour.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuyB0AyBzytDyDyBzytAyD0ByCtByByC0BtN0D0TzutBtDtCtBtDyCtCtA&cr=1217586327
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: Splashtop Connect SearchHook: {0f3dc9e0-c459-4a40-bcf8-747bd9322e10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll
mWinlogon: Userinit=userinit.exe,
BHO: Splashtop Connect VisualBookmark: {0e5680d1-bf44-4929-94af-fd30d784ad1d} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: AVG Do Not Track: {31332eef-cb9f-458f-afeb-d30e9a66b6ba} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
BHO: Somoto Toolbar: {652853ad-5592-4231-88c6-706613a52e61} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: SweetPacks Browser Helper: {eee6c35c-6118-11dc-9c72-001320c79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
TB: Somoto Toolbar: {652853ad-5592-4231-88c6-706613a52e61} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
TB: SweetPacks Toolbar for Internet Explorer: {eee6c35b-6118-11dc-9c72-001320c79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [Aim] "C:\Program Files (x86)\AIM\aim.exe" /d locale=en-US
uRun: [JumiController] C:\Program Files (x86)\Jumi\jumi.exe
uRun: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
uRun: [Media Finder] "C:\Program Files (x86)\Media Finder\Media Finder.exe" /opentotray
uRun: [Google Update] "C:\Users\Tyler\AppData\Local\Google\Update\GoogleUpdate.exe" /c
mRun: [STCAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
mRun: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
mRun: [ExpressFiles] "C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe" -tray
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [RemoteX] "C:\Program Files (x86)\RemoteX\RemoteXUser.exe"
mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
mRun: [<NO NAME>]
mRun: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
mRun: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
mRun: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
StartupFolder: C:\Users\Tyler\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\NEXDEF~1.LNK - C:\Users\Tyler\AppData\Local\Autobahn\nexdef.exe
StartupFolder: C:\Users\Tyler\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SECUNI~1.LNK - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html
IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
LSP: mswsock.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: Interfaces\{49D03A10-7327-4C83-B6D0-810CA30BB58A} : DhcpNameServer = 192.168.2.1 192.168.2.1 192.168.1.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
BHO-X64: Splashtop Connect VisualBookmark: {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: AVG Do Not Track: {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
BHO-X64: AVG Do Not Track - No File
BHO-X64: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
BHO-X64: WormRadar.com IESiteBlocker.NavFilter - No File
BHO-X64: Somoto Toolbar: {652853ad-5592-4231-88c6-706613a52e61} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
BHO-X64: Somoto Toolbar - No File
BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: SweetPacks Browser Helper: {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
BHO-X64: SWEETIE - No File
TB-X64: Somoto Toolbar: {652853ad-5592-4231-88c6-706613a52e61} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
TB-X64: SweetPacks Toolbar for Internet Explorer: {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
mRun-x64: [STCAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
mRun-x64: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
mRun-x64: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun-x64: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
mRun-x64: [ExpressFiles] "C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe" -tray
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [RemoteX] "C:\Program Files (x86)\RemoteX\RemoteXUser.exe"
mRun-x64: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
mRun-x64: [(Default)]
mRun-x64: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
mRun-x64: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
mRun-x64: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHA;AVGIDSHA;C:\Windows\system32\DRIVERS\avgidsha.sys --> C:\Windows\system32\DRIVERS\avgidsha.sys [?]
R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\system32\DRIVERS\avgrkx64.sys --> C:\Windows\system32\DRIVERS\avgrkx64.sys [?]
R1 AppleCharger;AppleCharger;C:\Windows\system32\DRIVERS\AppleCharger.sys --> C:\Windows\system32\DRIVERS\AppleCharger.sys [?]
R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\system32\DRIVERS\avgldx64.sys --> C:\Windows\system32\DRIVERS\avgldx64.sys [?]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\system32\DRIVERS\avgmfx64.sys --> C:\Windows\system32\DRIVERS\avgmfx64.sys [?]
R1 Avgtdia;AVG TDI Driver;C:\Windows\system32\DRIVERS\avgtdia.sys --> C:\Windows\system32\DRIVERS\avgtdia.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys --> C:\Windows\system32\DRIVERS\dtsoftbus01.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [2012-4-30 5106744]
R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-8-2 193288]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-2-28 2343816]
R2 LicCtrlService;LicCtrl Service;C:\Windows\Runservice.exe [2011-12-29 2560]
R2 SCBackService;Splashtop Connect Service;C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
R2 Secunia PSI Agent;Secunia PSI Agent;C:\Program Files (x86)\Secunia\PSI\psia.exe [2011-10-14 994360]
R2 Secunia Update Agent;Secunia Update Agent;C:\Program Files (x86)\Secunia\PSI\sua.exe [2011-10-14 399416]
R2 Smart TimeLock;Smart TimeLock Service;C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe [2011-12-26 114688]
R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\system32\DRIVERS\avgidsdrivera.sys --> C:\Windows\system32\DRIVERS\avgidsdrivera.sys [?]
R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\system32\DRIVERS\avgidsfiltera.sys --> C:\Windows\system32\DRIVERS\avgidsfiltera.sys [?]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;C:\Windows\system32\Drivers\EtronHub3.sys --> C:\Windows\system32\Drivers\EtronHub3.sys [?]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;C:\Windows\system32\Drivers\EtronXHCI.sys --> C:\Windows\system32\Drivers\EtronXHCI.sys [?]
R3 IntcDAud;Intel® Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 jumi;%Jumi%;C:\Windows\system32\DRIVERS\jumi.sys --> C:\Windows\system32\DRIVERS\jumi.sys [?]
R3 MEIx64;Intel® Management Engine Interface ;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;C:\Windows\system32\Drivers\nx6000.sys --> C:\Windows\system32\Drivers\nx6000.sys [?]
R3 PSI;PSI;C:\Windows\system32\DRIVERS\psi_mf.sys --> C:\Windows\system32\DRIVERS\psi_mf.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-3-25 116648]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-5-3 158856]
S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-3-25 116648]
S3 GVTDrv64;GVTDrv64;C:\Windows\GVTDrv64.sys [2011-12-26 30528]
S3 npggsvc;nProtect GameGuard Service;C:\Windows\system32\GameMon.des -service --> C:\Windows\system32\GameMon.des -service [?]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys --> C:\Windows\system32\drivers\rdpvideominiport.sys [?]
S3 Revoflt;Revoflt;C:\Windows\system32\DRIVERS\revoflt.sys --> C:\Windows\system32\DRIVERS\revoflt.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
S3 WSDPrintDevice;WSD Print Support via UMB;C:\Windows\system32\DRIVERS\WSDPrint.sys --> C:\Windows\system32\DRIVERS\WSDPrint.sys [?]
.
=============== Created Last 30 ================
.
2012-06-15 19:09:40 -------- d-----w- C:\Users\Tyler\AppData\Local\{C35FADBE-7A24-4787-90A4-4CC3A6A3573E}
2012-06-15 16:28:24 -------- d-----w- C:\Users\Tyler\AppData\Local\{051CD511-68FA-4B37-A10C-91A08F3388DE}
2012-06-15 04:41:14 476936 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll
2012-06-15 04:36:34 544008 ----a-w- C:\Windows\System32\npdeployJava1.dll
2012-06-15 04:27:26 -------- d-----w- C:\Users\Tyler\AppData\Local\Secunia PSI
2012-06-15 04:27:09 -------- d-----w- C:\Program Files (x86)\Secunia
2012-06-15 02:31:34 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-06-15 01:24:04 -------- d-----w- C:\Users\Tyler\AppData\Local\VS Revo Group
2012-06-15 01:23:50 31800 ----a-w- C:\Windows\System32\drivers\revoflt.sys
2012-06-15 01:23:49 -------- d-----w- C:\Program Files\VS Revo Group
2012-06-14 21:35:41 75264 ----a-w- C:\Windows\SysWow64\unacev2.dll
2012-06-14 21:35:41 153088 ----a-w- C:\Windows\SysWow64\UNRAR3.dll
2012-06-14 21:34:57 -------- d-----w- C:\Users\Tyler\AppData\Roaming\Malwarebytes
2012-06-14 21:34:53 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-06-14 21:34:53 -------- d-----w- C:\ProgramData\Malwarebytes
2012-06-14 21:34:53 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-06-14 19:31:01 -------- d-----w- C:\Users\Tyler\AppData\Local\{62B4328F-7DFB-48F2-A821-0F254D58144A}
2012-06-14 19:30:51 -------- d-----w- C:\Users\Tyler\AppData\Local\{1F94FE4E-6F27-400A-ABD2-4384DCF49D32}
2012-06-14 17:22:36 -------- d-sh--w- C:\Windows\SysWow64\%APPDATA%
2012-06-14 06:14:39 -------- d-----w- C:\Users\Tyler\AppData\Local\{EDAB6DF3-4082-4695-9DEC-93DC599563D6}
2012-06-14 06:14:18 -------- d-----w- C:\Users\Tyler\AppData\Local\{53539C68-1EE5-45C9-80BC-2E99402C9BE4}
2012-06-14 00:34:14 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-06-14 00:34:14 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-06-14 00:34:14 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-06-14 00:34:10 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-06-14 00:34:09 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-06-14 00:34:09 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-06-14 00:34:04 3146752 ----a-w- C:\Windows\System32\win32k.sys
2012-06-14 00:34:04 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-06-14 00:34:04 1112064 ----a-w- C:\Windows\System32\rdpcorets.dll
2012-06-13 18:14:06 -------- d-----w- C:\Users\Tyler\AppData\Local\{2EF07CD4-FA18-471D-B81F-26E818E9A1B7}
2012-06-13 18:13:51 -------- d-----w- C:\Users\Tyler\AppData\Local\{9BFE6D2C-8BAB-46AD-90BB-410EA72E2831}
2012-06-13 04:06:26 -------- d-----w- C:\Users\Tyler\AppData\Local\{B990790A-C089-425F-84B3-9322A677B6EB}
2012-06-13 04:06:04 -------- d-----w- C:\Users\Tyler\AppData\Local\{220DDDAE-770F-4A4F-AE88-AB6162CA8301}
2012-06-12 16:05:52 -------- d-----w- C:\Users\Tyler\AppData\Local\{BD1086AC-3792-471A-B580-9EC320EEAF0E}
2012-06-12 16:05:30 -------- d-----w- C:\Users\Tyler\AppData\Local\{EB73C82F-83EF-4202-9B08-820FCBAF1FF0}
2012-06-12 15:29:02 -------- d-----w- C:\Program Files (x86)\Common Files\Software Update Utility
2012-06-12 03:36:46 -------- d-----w- C:\Users\Tyler\AppData\Local\{819FF172-9F92-488B-BD41-599B91667760}
2012-06-12 03:36:22 -------- d-----w- C:\Users\Tyler\AppData\Local\{925EE45F-B765-4287-9BBD-EFB5F5F85E11}
2012-06-11 16:55:59 -------- d-----w- C:\Users\Tyler\AppData\Roaming\.platinum
2012-06-11 15:36:10 -------- d-----w- C:\Users\Tyler\AppData\Local\{670D09CC-A3F3-4A46-99DA-41FD849C751A}
2012-06-11 15:35:46 -------- d-----w- C:\Users\Tyler\AppData\Local\{C67CAB3F-D607-4B93-84DA-607C772AB150}
2012-06-11 03:35:22 -------- d-----w- C:\Users\Tyler\AppData\Local\{A38F2CD8-816D-4044-B88D-A723CC44C9F1}
2012-06-11 03:35:00 -------- d-----w- C:\Users\Tyler\AppData\Local\{CA8E3056-23FE-4AEC-B7B1-0DE6F392A828}
2012-06-10 15:34:47 -------- d-----w- C:\Users\Tyler\AppData\Local\{278D3D80-A27F-4593-B2A1-0032B5DC3E9F}
2012-06-10 15:34:23 -------- d-----w- C:\Users\Tyler\AppData\Local\{FD2F74B9-3A4E-45B8-913C-51AEEF1E2D76}
2012-06-10 02:04:28 -------- d-----w- C:\Users\Tyler\AppData\Local\{9AB13BFF-52C6-4309-8A84-A0B1C0AD1C77}
2012-06-10 02:04:06 -------- d-----w- C:\Users\Tyler\AppData\Local\{53CD3434-AA97-4AA6-ADFC-73731DC5B4B1}
2012-06-09 14:03:53 -------- d-----w- C:\Users\Tyler\AppData\Local\{4A844C68-1196-4777-8CCE-3CCE09B90F0E}
2012-06-09 14:03:32 -------- d-----w- C:\Users\Tyler\AppData\Local\{7EE3F213-CCCC-49B7-A093-D59E34F67D26}
2012-06-09 01:53:09 -------- d-----w- C:\Users\Tyler\AppData\Local\{B69124C2-FF64-4039-890B-CA0DA027EA19}
2012-06-09 01:52:47 -------- d-----w- C:\Users\Tyler\AppData\Local\{303E2582-C9E5-4E00-89FB-843A2EE86CB3}
2012-06-08 13:52:34 -------- d-----w- C:\Users\Tyler\AppData\Local\{36333D48-1855-4889-8496-014C905DC4D5}
2012-06-08 13:52:17 -------- d-----w- C:\Users\Tyler\AppData\Local\{7F5D1CE6-0D2F-414A-8ABC-2DC27FB850FE}
2012-06-08 00:14:10 -------- d-----w- C:\Users\Tyler\AppData\Local\{5B4AB7FE-3408-4462-BEBC-9CCB551B1C53}
2012-06-08 00:13:48 -------- d-----w- C:\Users\Tyler\AppData\Local\{39C1B4FF-C2AE-4134-A905-C632F13CF01C}
2012-06-07 12:13:35 -------- d-----w- C:\Users\Tyler\AppData\Local\{1A58A6B2-14A6-4219-9B82-F4C33DC65FF4}
2012-06-07 12:13:23 -------- d-----w- C:\Users\Tyler\AppData\Local\{17FA8262-CACE-467F-94F7-11374F496E6E}
2012-06-06 20:46:56 -------- d-----w- C:\Users\Tyler\AppData\Local\{139FA4F5-43C0-4850-BC27-62715E6FC9B4}
2012-06-06 20:46:35 -------- d-----w- C:\Users\Tyler\AppData\Local\{239CA91A-62B4-4D7A-A249-8088682C4AB9}
2012-06-05 20:35:31 -------- d-----w- C:\Users\Tyler\AppData\Local\{9C6F34EB-29B6-4CCB-8C6F-522E2E5ED5DE}
2012-06-05 20:35:08 -------- d-----w- C:\Users\Tyler\AppData\Local\{E590423C-A639-46E8-A9B7-E0AC9A93D9AE}
2012-06-04 21:27:47 -------- d-----w- C:\Users\Tyler\AppData\Local\{7491F73B-5F3A-490E-8B76-5A5BEB50BC07}
2012-06-04 21:27:25 -------- d-----w- C:\Users\Tyler\AppData\Local\{7B5CD6D3-8747-41F9-94C5-9D7D2884BC50}
2012-06-04 03:39:01 -------- d-----w- C:\Users\Tyler\AppData\Local\{0E9F37D6-58DA-4790-BF99-E8FD5B706C6E}
2012-06-04 03:38:49 -------- d-----w- C:\Users\Tyler\AppData\Local\{AF8A288D-EF0D-4F17-9422-2969D7ED1A84}
2012-06-04 01:05:25 -------- d-----w- C:\Program Files (x86)\iPod Computer Wizard
2012-06-03 16:37:34 -------- d-----w- C:\Users\Tyler\AppData\Roaming\GetRightToGo
2012-06-03 16:25:35 -------- d-----w- C:\Program Files\iTunes
2012-06-03 16:25:35 -------- d-----w- C:\Program Files\iPod
2012-06-03 16:25:35 -------- d-----w- C:\Program Files (x86)\iTunes
2012-06-03 15:38:23 -------- d-----w- C:\Users\Tyler\AppData\Local\{B0C18866-2770-436E-AB45-D244F54A4C14}
2012-06-03 15:38:02 -------- d-----w- C:\Users\Tyler\AppData\Local\{4D6D84BA-57D6-4142-9EFB-DB99195E4A8A}
2012-06-03 03:37:37 -------- d-----w- C:\Users\Tyler\AppData\Local\{1935D437-1E46-48E2-BB91-4FB17AD551A3}
2012-06-03 03:37:15 -------- d-----w- C:\Users\Tyler\AppData\Local\{0D6A61B0-9B3C-414E-AA96-2D061DA1A502}
2012-06-02 15:37:04 -------- d-----w- C:\Users\Tyler\AppData\Local\{834B57D7-542E-41DC-9BE8-402298B3BFFD}
2012-06-02 15:36:43 -------- d-----w- C:\Users\Tyler\AppData\Local\{AD1CAC25-31A3-4484-BA7D-7128DE7AD77C}
2012-06-02 03:36:18 -------- d-----w- C:\Users\Tyler\AppData\Local\{5209C998-A217-425B-AD50-DB321A5B44B8}
2012-06-02 03:35:57 -------- d-----w- C:\Users\Tyler\AppData\Local\{2A861CF1-54DF-497A-A38A-DBEE4D34B98A}
2012-05-31 21:38:17 -------- d-----w- C:\Users\Tyler\AppData\Local\{04DA7EA9-5D34-46ED-9AD3-648FF92E88F1}
2012-05-31 21:37:56 -------- d-----w- C:\Users\Tyler\AppData\Local\{FC665D14-B892-49A9-B047-966D5603E056}
2012-05-30 20:34:10 -------- d-----w- C:\Users\Tyler\AppData\Local\{250FC8A7-DA03-45FF-A199-1CD1232A0E5B}
2012-05-30 20:33:49 -------- d-----w- C:\Users\Tyler\AppData\Local\{F10D4224-395E-43B8-8EAA-8B39F67B6DFD}
2012-05-29 20:19:40 -------- d-----w- C:\Users\Tyler\AppData\Local\{CDE5773C-9FCE-4511-9844-38F89F951CBC}
2012-05-29 20:19:29 -------- d-----w- C:\Users\Tyler\AppData\Local\{2A4E71D4-A8B7-458E-95B5-7B2BF05331E1}
2012-05-28 18:40:08 -------- d-----w- C:\Users\Tyler\AppData\Local\{B071F02E-2478-4561-8426-A0507E2A7472}
2012-05-28 18:39:44 -------- d-----w- C:\Users\Tyler\AppData\Local\{5E9F951F-CF1E-42CC-98C5-5CC0321E3B37}
2012-05-28 06:39:19 -------- d-----w- C:\Users\Tyler\AppData\Local\{143530D0-B1AF-491F-9C31-DCF517899897}
2012-05-28 06:38:58 -------- d-----w- C:\Users\Tyler\AppData\Local\{FC97CAD8-D4B6-47A4-B5EC-A60F02D13741}
2012-05-27 18:20:04 -------- d-----w- C:\Users\Tyler\AppData\Local\{4C66515B-06EE-4433-9D53-9CF35A12B8F8}
2012-05-27 18:19:43 -------- d-----w- C:\Users\Tyler\AppData\Local\{416E2F81-F9FD-42D4-BD88-29CEE9B0AC02}
2012-05-27 06:19:02 -------- d-----w- C:\Users\Tyler\AppData\Local\{8EF002BD-1792-48EB-86CC-91C869FDBF14}
2012-05-27 06:18:51 -------- d-----w- C:\Users\Tyler\AppData\Local\{94D89C26-1367-4790-A361-6231AB57D4FC}
2012-05-26 18:37:19 -------- d-----w- C:\ProgramData\Premium
2012-05-26 18:37:17 -------- d-----w- C:\ProgramData\SweetIM
2012-05-26 18:37:17 -------- d-----w- C:\Program Files (x86)\SweetIM
2012-05-26 18:36:19 -------- d-----w- C:\ProgramData\InstallMate
2012-05-26 16:57:57 -------- d-----w- C:\Users\Tyler\AppData\Local\{224DC15B-285A-45A2-9033-63CA159BDC28}
2012-05-26 16:57:32 -------- d-----w- C:\Users\Tyler\AppData\Local\{69E997E9-749D-4D9C-ACB4-73DD2C582A40}
2012-05-26 04:57:08 -------- d-----w- C:\Users\Tyler\AppData\Local\{C2FEB86E-13AA-4DE6-9757-5EC68E83E437}
2012-05-26 04:56:44 -------- d-----w- C:\Users\Tyler\AppData\Local\{3DABD553-8050-41EB-9269-65CCB58F7A05}
2012-05-25 16:56:33 -------- d-----w- C:\Users\Tyler\AppData\Local\{57CBA854-3335-4DC1-B71E-9F112EE74F17}
2012-05-25 16:56:18 -------- d-----w- C:\Users\Tyler\AppData\Local\{6D18C4B5-3F79-49EC-B238-4D830D8C72B3}
2012-05-24 21:52:12 -------- d-----w- C:\Users\Tyler\AppData\Local\{DED387FA-D08C-472C-9286-9A66C23AD07C}
2012-05-24 21:51:50 -------- d-----w- C:\Users\Tyler\AppData\Local\{3EF97746-635C-4169-AFDC-D574DF1190FA}
2012-05-24 01:03:31 -------- d-----w- C:\Users\Tyler\AppData\Local\{75AD4AAE-500C-4775-9654-CECBDF15C0E2}
2012-05-24 01:03:08 -------- d-----w- C:\Users\Tyler\AppData\Local\{E7A33215-733A-41D0-944D-055409473695}
2012-05-22 20:37:41 -------- d-----w- C:\Users\Tyler\AppData\Local\{C08BF5CF-ED06-46D8-B26A-2E133E272A50}
2012-05-22 20:37:18 -------- d-----w- C:\Users\Tyler\AppData\Local\{07D6A424-45A3-4042-B4E5-3331380CC994}
2012-05-21 20:25:12 -------- d-----w- C:\Users\Tyler\AppData\Local\{A69C39BB-AB6D-4700-B65C-DAF522FF293B}
2012-05-21 20:24:54 -------- d-----w- C:\Users\Tyler\AppData\Local\{0FCEEB1B-74E8-4DB7-93D4-133BEC7FB0CB}
2012-05-21 02:43:48 -------- d-----w- C:\Users\Tyler\AppData\Local\{95A6C61B-9648-4CEB-8D67-6DABB176067A}
2012-05-21 02:43:26 -------- d-----w- C:\Users\Tyler\AppData\Local\{51DBB836-3CCB-4E43-8BA0-6696C8F6333A}
2012-05-20 14:43:11 -------- d-----w- C:\Users\Tyler\AppData\Local\{BD5E01C0-E624-49DB-8799-5D7CC6EE832C}
2012-05-20 14:42:47 -------- d-----w- C:\Users\Tyler\AppData\Local\{ED6D7ABF-661D-4B31-BA54-3DB89AA1A787}
2012-05-19 19:00:01 -------- d-----w- C:\Users\Tyler\AppData\Local\{74E6462B-8AE1-4D11-8CDF-03A207DFDDA6}
2012-05-19 18:59:48 -------- d-----w- C:\Users\Tyler\AppData\Local\{D8D73BDD-4F03-44DC-9B3A-6A32C3DAAD19}
2012-05-18 23:24:49 33856 ---ha-w- C:\Windows\System32\hamachi.sys
2012-05-18 23:24:47 -------- d-----w- C:\Program Files (x86)\LogMeIn Hamachi
2012-05-18 23:24:44 -------- d-----w- C:\Users\Tyler\AppData\Local\LogMeIn Hamachi
2012-05-18 21:12:40 -------- d-----w- C:\Users\Tyler\AppData\Local\{C17F8EEB-0E55-49A8-AFF3-60080A9D0C82}
2012-05-18 21:12:30 -------- d-----w- C:\Users\Tyler\AppData\Local\{E0351C74-3A49-49CA-9CA1-2FBDF67580B5}
2012-05-17 20:23:57 -------- d-----w- C:\Users\Tyler\AppData\Local\{35C654E1-D8F3-461B-951D-6F8AB90A0713}
2012-05-17 20:23:38 -------- d-----w- C:\Users\Tyler\AppData\Local\{098A9D45-2F08-4DDE-AB25-4D747E5AFC2D}
.
==================== Find3M ====================
.
2012-06-16 00:16:46 25640 ----a-w- C:\Windows\gdrv.sys
2012-06-15 04:41:12 472840 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-06-15 04:36:30 525576 ----a-w- C:\Windows\System32\deployJava1.dll
2012-06-15 03:22:00 30528 ----a-w- C:\Windows\GVTDrv64.sys
2012-06-15 02:31:34 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-18 02:06:48 2311680 ----a-w- C:\Windows\System32\jscript9.dll
2012-05-18 01:59:14 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-05-18 01:58:39 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-05-18 01:55:22 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-05-18 01:51:30 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-05-17 22:45:37 1800192 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-05-17 22:35:47 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-05-17 22:35:39 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-05-17 22:29:45 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-05-17 22:24:45 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-04-23 20:21:10 0 --sha-w- C:\Windows\SysWow64\mmf.sys
2012-04-19 08:50:26 28480 ----a-w- C:\Windows\System32\drivers\avgidsha.sys
2012-03-30 11:35:47 1918320 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-03-19 09:17:26 383808 ----a-w- C:\Windows\System32\drivers\avgtdia.sys
.
============= FINISH: 21:15:49.41 ===============

BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:03:31 AM

Posted 15 June 2012 - 11:48 PM

Greetings and Welcome to The Forums!!

My name is Gringo and I'll be glad to help you with your computer problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of hartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

Security Check

  • Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.



Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 tyler87898

tyler87898
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 16 June 2012 - 09:55 AM

This is the log to the "Security Check" and I did not run Combofix because I have Windows 7. I had no problems running the Security Check. My problems include audio ads coming out of my speakers randomly, getting redirected in google chrome, I can't even sign in to google in chrome and I see this page that says "The site's security certificate is signed using a weak signature algorithm!"

Results of screen317's Security Check version 0.99.41
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
AVG Anti-Virus Free Edition 2012
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
Spybot - Search & Destroy
Secunia PSI (2.0.0.4003)
Malwarebytes Anti-Malware version 1.61.0.1400
Java™ 6 Update 22
Java™ 6 Update 33
Java version out of date!
Adobe Reader X (10.1.3)
Mozilla Firefox (for.)
Google Chrome 19.0.1084.56
````````Process Check: objlist.exe by Laurent````````
AVG avgwdsvc.exe
AVG avgtray.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4%
````````````````````End of Log``````````````````````

#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:03:31 AM

Posted 16 June 2012 - 11:53 AM

you can run combofix on win 7 so please go ahead


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 tyler87898

tyler87898
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 16 June 2012 - 12:05 PM

When I run ComboFix the green bar "finishes" but then ComboFix just closes without giving me a log or telling me anything.

#6 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:03:31 AM

Posted 16 June 2012 - 01:00 PM

Hello

Ok lets try this, I want you to run combofix in safe mode but it is very important that when combofix reboots the computer for you to direct it back into safe mode so it can finish the scan.

Boot into Safe Mode

Reboot your computer in Safe Mode.
  • If the computer is running, shut down Windows, and then turn off the power.
  • Wait 30 seconds, and then turn the computer on.
  • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • Ensure that the Safe Mode option is selected.
  • Press Enter. The computer then begins to start in Safe mode.
  • Login on your usual account.

after combofix has finished its scan please post the report back here.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#7 tyler87898

tyler87898
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 16 June 2012 - 01:05 PM

Which safemode, regular safe mode or one of the other safe modes (with networking etc.) ?

Edited by tyler87898, 16 June 2012 - 01:07 PM.


#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:03:31 AM

Posted 16 June 2012 - 01:22 PM

regular safe mode is fine


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#9 tyler87898

tyler87898
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 16 June 2012 - 02:06 PM

Ok, here os the combofix log:


ComboFix 12-06-15.06 - Tyler 06/16/2012 14:50:13.1.4 - x64 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8109.6755 [GMT -4:00]
Running from: c:\users\Tyler\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\somototoolbar\vmNTemplatex.dll
c:\programdata\ntuser.dat
c:\windows\assembly\GAC_32\Desktop.ini
c:\windows\assembly\GAC_64\Desktop.ini
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\@
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\L\00000004.@
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\L\1afb2d56
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\L\201d3dde
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\U\00000004.@
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\U\00000008.@
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\U\000000cb.@
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\U\80000000.@
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\U\80000032.@
c:\windows\Installer\{16e2367e-77c6-36d4-562d-b5c375d40246}\U\80000064.@
.
Infected copy of c:\windows\system32\services.exe was found and disinfected
Restored copy from - c:\windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-05-16 to 2012-06-16 )))))))))))))))))))))))))))))))
.
.
2012-06-16 18:55 . 2012-06-16 18:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-06-16 03:31 . 2012-06-16 03:48 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-06-16 03:31 . 2012-06-16 03:33 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2012-06-15 04:41 . 2012-06-15 04:41 476936 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2012-06-15 04:36 . 2012-06-15 04:36 544008 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-06-15 04:27 . 2012-06-15 04:27 -------- d-----w- c:\users\Tyler\AppData\Local\Secunia PSI
2012-06-15 04:27 . 2012-06-15 04:27 -------- d-----w- c:\program files (x86)\Secunia
2012-06-15 02:31 . 2012-06-15 02:31 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-15 01:24 . 2012-06-15 01:24 -------- d-----w- c:\users\Tyler\AppData\Local\VS Revo Group
2012-06-15 01:23 . 2009-12-30 15:21 31800 ----a-w- c:\windows\system32\drivers\revoflt.sys
2012-06-15 01:23 . 2012-06-15 01:23 -------- d-----w- c:\program files\VS Revo Group
2012-06-14 21:35 . 2003-02-03 00:06 153088 ----a-w- c:\windows\SysWow64\UNRAR3.dll
2012-06-14 21:35 . 2002-03-06 05:00 75264 ----a-w- c:\windows\SysWow64\unacev2.dll
2012-06-14 21:34 . 2012-06-14 21:34 -------- d-----w- c:\users\Tyler\AppData\Roaming\Malwarebytes
2012-06-14 21:34 . 2012-06-14 21:34 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-06-14 21:34 . 2012-06-14 21:34 -------- d-----w- c:\programdata\Malwarebytes
2012-06-14 21:34 . 2012-04-04 19:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-14 17:22 . 2012-06-14 17:22 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2012-06-14 00:34 . 2012-04-26 05:41 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-06-14 00:34 . 2012-04-26 05:41 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-06-14 00:34 . 2012-04-26 05:34 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-06-14 00:34 . 2012-05-04 11:06 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-06-14 00:34 . 2012-05-04 10:03 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-06-14 00:34 . 2012-05-04 10:03 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-06-14 00:34 . 2012-05-15 01:32 3146752 ----a-w- c:\windows\system32\win32k.sys
2012-06-14 00:34 . 2012-04-28 05:32 1112064 ----a-w- c:\windows\system32\rdpcorets.dll
2012-06-14 00:34 . 2012-04-28 03:55 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-12 15:29 . 2012-06-12 15:29 -------- d-----w- c:\program files (x86)\Common Files\Software Update Utility
2012-06-11 16:55 . 2012-06-11 16:56 -------- d-----w- c:\users\Tyler\AppData\Roaming\.platinum
2012-06-04 01:05 . 2012-06-04 01:05 -------- d-----w- c:\program files (x86)\iPod Computer Wizard
2012-06-03 16:25 . 2012-06-03 16:25 -------- d-----w- c:\program files\iTunes
2012-06-03 16:25 . 2012-06-03 16:25 -------- d-----w- c:\program files (x86)\iTunes
2012-06-03 16:25 . 2012-06-03 16:25 -------- d-----w- c:\program files\iPod
2012-05-26 18:37 . 2012-05-26 18:37 -------- d-----w- c:\programdata\Premium
2012-05-26 18:37 . 2012-06-16 03:15 -------- d-----w- c:\program files (x86)\SweetIM
2012-05-26 18:36 . 2012-05-26 18:37 -------- d-----w- c:\programdata\InstallMate
2012-05-18 23:24 . 2009-03-18 20:35 33856 ---ha-w- c:\windows\system32\hamachi.sys
2012-05-18 23:24 . 2012-05-18 23:24 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2012-05-18 23:24 . 2012-06-16 18:36 -------- d-----w- c:\users\Tyler\AppData\Local\LogMeIn Hamachi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-16 18:35 . 2011-12-27 02:03 25640 ----a-w- c:\windows\gdrv.sys
2012-06-15 04:41 . 2011-12-27 03:17 472840 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-06-15 04:36 . 2011-12-30 01:50 525576 ----a-w- c:\windows\system32\deployJava1.dll
2012-06-15 03:22 . 2011-12-27 02:03 30528 ----a-w- c:\windows\GVTDrv64.sys
2012-06-15 02:31 . 2011-12-28 06:56 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-30 11:35 . 2012-05-08 20:24 1918320 ----a-w- c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0F3DC9E0-C459-4a40-BCF8-747BD9322E10}"= "c:\program files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll" [2011-03-04 165776]
.
[HKEY_CLASSES_ROOT\clsid\{0f3dc9e0-c459-4a40-bcf8-747bd9322e10}]
[HKEY_CLASSES_ROOT\AddressBarSearch.SearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{4E8E0178-00EF-413d-9324-E7B3E31572E3}]
[HKEY_CLASSES_ROOT\AddressBarSearch.SearchHook]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Aim"="c:\program files (x86)\AIM\aim.exe" [2012-05-30 4331392]
"JumiController"="c:\program files (x86)\Jumi\jumi.exe" [2012-05-18 3581440]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2012-03-12 1242448]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-05-03 17355912]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"="c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-03-04 776064]
"ZyngaGamesAgent"="c:\program files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [2010-11-15 841544]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-05-20 119152]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"RemoteX"="c:\program files (x86)\RemoteX\RemoteXUser.exe" [2011-02-14 185344]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-10 49208]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"Sweetpacks Communicator"="c:\program files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe" [2012-02-26 295728]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\Tyler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
NexDef Plug-in.lnk - c:\users\Tyler\AppData\Local\Autobahn\nexdef.exe [2011-8-11 15490560]
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2011-10-14 291896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
R2 __RemoteX__;RemoteX Server;c:\program files (x86)\RemoteX\RemoteX.exe [2011-02-14 271360]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 116648]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
R2 LicCtrlService;LicCtrl Service;c:\windows\runservice.exe [2011-12-29 2560]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SCBackService;Splashtop Connect Service;c:\program files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe [2011-10-14 994360]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe [2011-10-14 399416]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-05-03 158856]
R2 Smart TimeLock;Smart TimeLock Service;c:\program files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
R2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
R2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [2011-03-24 493384]
R2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-03-22 497480]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dump_wmimmc;dump_wmimmc;c:\gamescampus\MLBDugoutHeroes\GameGuard\dump_wmimmc.sys [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 116648]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2012-06-15 30528]
R3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys [x]
R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 jumi;%Jumi%;c:\windows\system32\DRIVERS\jumi.sys [x]
S3 MEIx64;Intel® Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-06-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 20:15]
.
2012-06-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 20:15]
.
2012-06-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3304748398-3523269193-287244508-1000Core.job
- c:\users\Tyler\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-15 02:34]
.
2012-06-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3304748398-3523269193-287244508-1000UA.job
- c:\users\Tyler\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-15 02:34]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1d09c093-f71e-43c3-b948-19316cbd695e}"= "mscoree.dll" [2010-11-05 444752]
.
[HKEY_CLASSES_ROOT\CLSID\{1d09c093-f71e-43c3-b948-19316cbd695e}]
[HKEY_CLASSES_ROOT\tGBandObj.tGBandObjClass]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-07 11858536]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-21 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-21 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-21 416024]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"RPMKickstart"="c:\program files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe" [2011-03-30 2552320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuyB0AyBzytDyDyBzytAyD0ByCtByByC0BtN0D0TzutBtDtCtBtDyCtCtA&cr=1217586327
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Download with &Media Finder - c:\program files (x86)\Media Finder\hook.html
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-Media Finder - c:\program files (x86)\Media Finder\Media Finder.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-3304748398-3523269193-287244508-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-3304748398-3523269193-287244508-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-3304748398-3523269193-287244508-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E0E84BE1-6425-770A-B5A5-81642554FF03}*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\0c\03\1c\15&\02g"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-06-16 14:59:51 - machine was rebooted
ComboFix-quarantined-files.txt 2012-06-16 18:59
.
Pre-Run: 893,278,179,328 bytes free
Post-Run: 893,290,332,160 bytes free
.
- - End Of File - - 470FD24E90296FC43A004D898F9382D3

#10 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:03:31 AM

Posted 16 June 2012 - 09:52 PM

Greetings

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.
  • Download TDSSKiller and save it to your Desktop.
  • doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • it will ask to download extra definitions - ALLOW IT
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#11 tyler87898

tyler87898
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 16 June 2012 - 10:30 PM

TDSSKiller log:


22:59:16.0301 4680 TDSS rootkit removing tool 2.7.40.0 Jun 15 2012 15:13:31
22:59:16.0771 4680 ============================================================
22:59:16.0771 4680 Current date / time: 2012/06/16 22:59:16.0771
22:59:16.0771 4680 SystemInfo:
22:59:16.0771 4680
22:59:16.0771 4680 OS Version: 6.1.7601 ServicePack: 1.0
22:59:16.0771 4680 Product type: Workstation
22:59:16.0771 4680 ComputerName: TYLER-PC
22:59:16.0771 4680 UserName: Tyler
22:59:16.0771 4680 Windows directory: C:\Windows
22:59:16.0771 4680 System windows directory: C:\Windows
22:59:16.0771 4680 Running under WOW64
22:59:16.0771 4680 Processor architecture: Intel x64
22:59:16.0771 4680 Number of processors: 4
22:59:16.0771 4680 Page size: 0x1000
22:59:16.0771 4680 Boot type: Normal boot
22:59:16.0771 4680 ============================================================
22:59:18.0306 4680 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1F8B1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
22:59:18.0308 4680 Drive \Device\Harddisk1\DR1 - Size: 0xEF000000 (3.73 Gb), SectorSize: 0x200, Cylinders: 0x1E7, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
22:59:18.0309 4680 ============================================================
22:59:18.0309 4680 \Device\Harddisk0\DR0:
22:59:18.0309 4680 MBR partitions:
22:59:18.0309 4680 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
22:59:18.0309 4680 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
22:59:18.0309 4680 \Device\Harddisk1\DR1:
22:59:18.0310 4680 MBR partitions:
22:59:18.0310 4680 \Device\Harddisk1\DR1\Partition0: MBR, Type 0xC, StartLBA 0x30, BlocksNum 0x777FD0
22:59:18.0310 4680 ============================================================
22:59:18.0337 4680 C: <-> \Device\Harddisk0\DR0\Partition1
22:59:18.0337 4680 ============================================================
22:59:18.0337 4680 Initialize success
22:59:18.0337 4680 ============================================================
22:59:20.0151 2716 ============================================================
22:59:20.0151 2716 Scan started
22:59:20.0151 2716 Mode: Manual;
22:59:20.0151 2716 ============================================================
22:59:22.0026 2716 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
22:59:22.0028 2716 1394ohci - ok
22:59:22.0060 2716 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
22:59:22.0063 2716 ACPI - ok
22:59:22.0084 2716 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
22:59:22.0085 2716 AcpiPmi - ok
22:59:22.0154 2716 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:59:22.0154 2716 AdobeARMservice - ok
22:59:22.0197 2716 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
22:59:22.0202 2716 adp94xx - ok
22:59:22.0220 2716 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
22:59:22.0223 2716 adpahci - ok
22:59:22.0242 2716 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
22:59:22.0244 2716 adpu320 - ok
22:59:22.0259 2716 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
22:59:22.0260 2716 AeLookupSvc - ok
22:59:22.0306 2716 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
22:59:22.0310 2716 AFD - ok
22:59:22.0319 2716 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
22:59:22.0320 2716 agp440 - ok
22:59:22.0341 2716 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
22:59:22.0342 2716 ALG - ok
22:59:22.0352 2716 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
22:59:22.0353 2716 aliide - ok
22:59:22.0355 2716 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
22:59:22.0356 2716 amdide - ok
22:59:22.0376 2716 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
22:59:22.0377 2716 AmdK8 - ok
22:59:22.0380 2716 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
22:59:22.0381 2716 AmdPPM - ok
22:59:22.0390 2716 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
22:59:22.0392 2716 amdsata - ok
22:59:22.0398 2716 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
22:59:22.0400 2716 amdsbs - ok
22:59:22.0406 2716 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
22:59:22.0406 2716 amdxata - ok
22:59:22.0431 2716 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
22:59:22.0432 2716 AppID - ok
22:59:22.0447 2716 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
22:59:22.0447 2716 AppIDSvc - ok
22:59:22.0488 2716 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
22:59:22.0489 2716 Appinfo - ok
22:59:22.0532 2716 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
22:59:22.0532 2716 Apple Mobile Device - ok
22:59:22.0564 2716 AppleCharger (6be11ad81d4527d299f0cb5f3731aabc) C:\Windows\system32\DRIVERS\AppleCharger.sys
22:59:22.0565 2716 AppleCharger - ok
22:59:22.0579 2716 AppleChargerSrv (95ef7247c50c7241fdae39a9b3aff4ae) C:\Windows\system32\AppleChargerSrv.exe
22:59:22.0580 2716 AppleChargerSrv - ok
22:59:22.0618 2716 AppMgmt (4aba3e75a76195a3e38ed2766c962899) C:\Windows\System32\appmgmts.dll
22:59:22.0620 2716 AppMgmt - ok
22:59:22.0629 2716 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
22:59:22.0631 2716 arc - ok
22:59:22.0646 2716 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
22:59:22.0647 2716 arcsas - ok
22:59:22.0672 2716 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
22:59:22.0672 2716 AsyncMac - ok
22:59:22.0695 2716 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
22:59:22.0695 2716 atapi - ok
22:59:22.0736 2716 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
22:59:22.0742 2716 AudioEndpointBuilder - ok
22:59:22.0746 2716 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
22:59:22.0749 2716 AudioSrv - ok
22:59:22.0782 2716 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
22:59:22.0783 2716 AxInstSV - ok
22:59:22.0820 2716 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
22:59:22.0825 2716 b06bdrv - ok
22:59:22.0852 2716 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
22:59:22.0854 2716 b57nd60a - ok
22:59:22.0887 2716 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
22:59:22.0888 2716 BDESVC - ok
22:59:22.0906 2716 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
22:59:22.0907 2716 Beep - ok
22:59:22.0963 2716 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
22:59:22.0969 2716 BFE - ok
22:59:22.0997 2716 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\system32\qmgr.dll
22:59:23.0004 2716 BITS - ok
22:59:23.0043 2716 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
22:59:23.0044 2716 blbdrive - ok
22:59:23.0110 2716 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
22:59:23.0112 2716 Bonjour Service - ok
22:59:23.0146 2716 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
22:59:23.0147 2716 bowser - ok
22:59:23.0149 2716 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:59:23.0149 2716 BrFiltLo - ok
22:59:23.0151 2716 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:59:23.0151 2716 BrFiltUp - ok
22:59:23.0159 2716 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
22:59:23.0160 2716 BridgeMP - ok
22:59:23.0196 2716 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
22:59:23.0198 2716 Browser - ok
22:59:23.0207 2716 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
22:59:23.0210 2716 Brserid - ok
22:59:23.0213 2716 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
22:59:23.0214 2716 BrSerWdm - ok
22:59:23.0215 2716 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
22:59:23.0216 2716 BrUsbMdm - ok
22:59:23.0218 2716 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
22:59:23.0218 2716 BrUsbSer - ok
22:59:23.0232 2716 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
22:59:23.0233 2716 BTHMODEM - ok
22:59:23.0250 2716 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
22:59:23.0251 2716 bthserv - ok
22:59:23.0266 2716 catchme - ok
22:59:23.0271 2716 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:59:23.0272 2716 cdfs - ok
22:59:23.0305 2716 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
22:59:23.0307 2716 cdrom - ok
22:59:23.0332 2716 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
22:59:23.0333 2716 CertPropSvc - ok
22:59:23.0348 2716 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:59:23.0349 2716 circlass - ok
22:59:23.0390 2716 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:59:23.0393 2716 CLFS - ok
22:59:23.0430 2716 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:59:23.0431 2716 clr_optimization_v2.0.50727_32 - ok
22:59:23.0472 2716 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:59:23.0473 2716 clr_optimization_v2.0.50727_64 - ok
22:59:23.0534 2716 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:59:23.0536 2716 clr_optimization_v4.0.30319_32 - ok
22:59:23.0555 2716 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:59:23.0557 2716 clr_optimization_v4.0.30319_64 - ok
22:59:23.0571 2716 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:59:23.0571 2716 CmBatt - ok
22:59:23.0588 2716 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
22:59:23.0589 2716 cmdide - ok
22:59:23.0621 2716 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
22:59:23.0626 2716 CNG - ok
22:59:23.0649 2716 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:59:23.0650 2716 Compbatt - ok
22:59:23.0663 2716 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
22:59:23.0664 2716 CompositeBus - ok
22:59:23.0665 2716 COMSysApp - ok
22:59:23.0671 2716 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:59:23.0671 2716 crcdisk - ok
22:59:23.0705 2716 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
22:59:23.0707 2716 CryptSvc - ok
22:59:23.0742 2716 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
22:59:23.0746 2716 CSC - ok
22:59:23.0767 2716 CscService (3ab183ab4d2c79dcf459cd2c1266b043) C:\Windows\System32\cscsvc.dll
22:59:23.0773 2716 CscService - ok
22:59:23.0815 2716 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
22:59:23.0820 2716 DcomLaunch - ok
22:59:23.0850 2716 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
22:59:23.0853 2716 defragsvc - ok
22:59:23.0891 2716 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
22:59:23.0892 2716 DfsC - ok
22:59:23.0927 2716 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
22:59:23.0930 2716 Dhcp - ok
22:59:23.0942 2716 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:59:23.0943 2716 discache - ok
22:59:23.0969 2716 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:59:23.0970 2716 Disk - ok
22:59:23.0997 2716 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
22:59:23.0999 2716 Dnscache - ok
22:59:24.0029 2716 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
22:59:24.0032 2716 dot3svc - ok
22:59:24.0061 2716 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
22:59:24.0063 2716 DPS - ok
22:59:24.0098 2716 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:59:24.0098 2716 drmkaud - ok
22:59:24.0133 2716 dtsoftbus01 (400582b09e0bb557d0ec28a945150eeb) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
22:59:24.0135 2716 dtsoftbus01 - ok
22:59:24.0189 2716 dump_wmimmc - ok
22:59:24.0219 2716 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
22:59:24.0228 2716 DXGKrnl - ok
22:59:24.0259 2716 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
22:59:24.0260 2716 EapHost - ok
22:59:24.0334 2716 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:59:24.0361 2716 ebdrv - ok
22:59:24.0456 2716 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
22:59:24.0457 2716 EFS - ok
22:59:24.0511 2716 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
22:59:24.0517 2716 ehRecvr - ok
22:59:24.0555 2716 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
22:59:24.0556 2716 ehSched - ok
22:59:24.0594 2716 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:59:24.0599 2716 elxstor - ok
22:59:24.0612 2716 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
22:59:24.0613 2716 ErrDev - ok
22:59:24.0662 2716 EtronHub3 (72eccb2f5c9cfc32a9b2a60933832501) C:\Windows\system32\Drivers\EtronHub3.sys
22:59:24.0678 2716 EtronHub3 - ok
22:59:24.0791 2716 EtronXHCI (7bb310f6fb9e1b9d21dd2ce7eb0d5464) C:\Windows\system32\Drivers\EtronXHCI.sys
22:59:24.0792 2716 EtronXHCI - ok
22:59:24.0814 2716 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
22:59:24.0818 2716 EventSystem - ok
22:59:24.0836 2716 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:59:24.0838 2716 exfat - ok
22:59:24.0869 2716 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:59:24.0871 2716 fastfat - ok
22:59:24.0915 2716 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
22:59:24.0921 2716 Fax - ok
22:59:24.0924 2716 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:59:24.0925 2716 fdc - ok
22:59:24.0941 2716 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
22:59:24.0942 2716 fdPHost - ok
22:59:24.0948 2716 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
22:59:24.0949 2716 FDResPub - ok
22:59:24.0964 2716 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:59:24.0965 2716 FileInfo - ok
22:59:24.0970 2716 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:59:24.0971 2716 Filetrace - ok
22:59:24.0973 2716 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:59:24.0973 2716 flpydisk - ok
22:59:24.0990 2716 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
22:59:24.0993 2716 FltMgr - ok
22:59:25.0037 2716 FontCache (b4447f606bb19fd8ad0bafb59b90f5d9) C:\Windows\system32\FntCache.dll
22:59:25.0046 2716 FontCache - ok
22:59:25.0105 2716 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:59:25.0105 2716 FontCache3.0.0.0 - ok
22:59:25.0120 2716 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:59:25.0120 2716 FsDepends - ok
22:59:25.0152 2716 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
22:59:25.0152 2716 Fs_Rec - ok
22:59:25.0167 2716 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
22:59:25.0183 2716 fvevol - ok
22:59:25.0183 2716 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:59:25.0183 2716 gagp30kx - ok
22:59:25.0227 2716 gdrv (7907e14f9bcf3a4689c9a74a1a873cb6) C:\Windows\gdrv.sys
22:59:25.0228 2716 gdrv - ok
22:59:25.0256 2716 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
22:59:25.0257 2716 GEARAspiWDM - ok
22:59:25.0286 2716 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
22:59:25.0293 2716 gpsvc - ok
22:59:25.0401 2716 gupdate (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:59:25.0402 2716 gupdate - ok
22:59:25.0413 2716 gupdatem (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:59:25.0414 2716 gupdatem - ok
22:59:25.0439 2716 GVTDrv64 (8126331fbd4ed29eb3b356f9c905064d) C:\Windows\GVTDrv64.sys
22:59:25.0440 2716 GVTDrv64 - ok
22:59:25.0479 2716 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
22:59:25.0479 2716 hamachi - ok
22:59:25.0542 2716 Hamachi2Svc (d483dbaef409e8ab7477c28615fcd853) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
22:59:25.0551 2716 Hamachi2Svc - ok
22:59:25.0621 2716 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:59:25.0622 2716 hcw85cir - ok
22:59:25.0660 2716 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
22:59:25.0663 2716 HdAudAddService - ok
22:59:25.0684 2716 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
22:59:25.0685 2716 HDAudBus - ok
22:59:25.0688 2716 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:59:25.0689 2716 HidBatt - ok
22:59:25.0699 2716 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:59:25.0701 2716 HidBth - ok
22:59:25.0713 2716 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:59:25.0714 2716 HidIr - ok
22:59:25.0727 2716 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
22:59:25.0729 2716 hidserv - ok
22:59:25.0746 2716 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
22:59:25.0746 2716 HidUsb - ok
22:59:25.0779 2716 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
22:59:25.0781 2716 hkmsvc - ok
22:59:25.0815 2716 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
22:59:25.0818 2716 HomeGroupListener - ok
22:59:25.0841 2716 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
22:59:25.0843 2716 HomeGroupProvider - ok
22:59:25.0868 2716 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
22:59:25.0869 2716 HpSAMD - ok
22:59:25.0940 2716 HPSLPSVC - ok
22:59:25.0981 2716 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
22:59:25.0988 2716 HTTP - ok
22:59:26.0025 2716 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
22:59:26.0025 2716 hwpolicy - ok
22:59:26.0057 2716 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
22:59:26.0058 2716 i8042prt - ok
22:59:26.0089 2716 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
22:59:26.0093 2716 iaStorV - ok
22:59:26.0166 2716 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
22:59:26.0167 2716 IDriverT - ok
22:59:26.0224 2716 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:59:26.0232 2716 idsvc - ok
22:59:26.0533 2716 igfx (0089b53f1befd34b7d8ca4ab021335fa) C:\Windows\system32\DRIVERS\igdkmd64.sys
22:59:26.0629 2716 igfx - ok
22:59:26.0682 2716 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:59:26.0682 2716 iirsp - ok
22:59:26.0755 2716 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
22:59:26.0763 2716 IKEEXT - ok
22:59:26.0852 2716 IntcAzAudAddService (392d5c87f282e8e36df5154418a7bb20) C:\Windows\system32\drivers\RTKVHD64.sys
22:59:26.0877 2716 IntcAzAudAddService - ok
22:59:26.0953 2716 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\Windows\system32\DRIVERS\IntcDAud.sys
22:59:26.0956 2716 IntcDAud - ok
22:59:26.0985 2716 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
22:59:26.0986 2716 intelide - ok
22:59:27.0002 2716 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:59:27.0002 2716 intelppm - ok
22:59:27.0043 2716 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
22:59:27.0044 2716 IPBusEnum - ok
22:59:27.0064 2716 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:59:27.0065 2716 IpFilterDriver - ok
22:59:27.0114 2716 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
22:59:27.0120 2716 iphlpsvc - ok
22:59:27.0139 2716 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
22:59:27.0140 2716 IPMIDRV - ok
22:59:27.0153 2716 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:59:27.0154 2716 IPNAT - ok
22:59:27.0226 2716 iPod Service (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe
22:59:27.0229 2716 iPod Service - ok
22:59:27.0243 2716 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:59:27.0243 2716 IRENUM - ok
22:59:27.0250 2716 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
22:59:27.0251 2716 isapnp - ok
22:59:27.0450 2716 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
22:59:27.0450 2716 iScsiPrt - ok
22:59:27.0497 2716 jumi (ccb39c7006d436d238ac75d2abfde1fe) C:\Windows\system32\DRIVERS\jumi.sys
22:59:27.0497 2716 jumi - ok
22:59:27.0512 2716 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
22:59:27.0512 2716 kbdclass - ok
22:59:27.0534 2716 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
22:59:27.0534 2716 kbdhid - ok
22:59:27.0561 2716 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:59:27.0561 2716 KeyIso - ok
22:59:27.0569 2716 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
22:59:27.0571 2716 KSecDD - ok
22:59:27.0586 2716 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
22:59:27.0587 2716 KSecPkg - ok
22:59:27.0610 2716 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:59:27.0610 2716 ksthunk - ok
22:59:27.0642 2716 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
22:59:27.0646 2716 KtmRm - ok
22:59:27.0666 2716 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\System32\srvsvc.dll
22:59:27.0669 2716 LanmanServer - ok
22:59:27.0700 2716 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
22:59:27.0702 2716 LanmanWorkstation - ok
22:59:27.0733 2716 LicCtrlService (29fab5363138f6e322f4cd780ed9d337) C:\Windows\runservice.exe
22:59:27.0733 2716 LicCtrlService - ok
22:59:27.0778 2716 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:59:27.0779 2716 lltdio - ok
22:59:27.0811 2716 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
22:59:27.0815 2716 lltdsvc - ok
22:59:27.0828 2716 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
22:59:27.0829 2716 lmhosts - ok
22:59:27.0904 2716 LMS (0803906d607a9b83184447b75b60ecc2) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
22:59:27.0907 2716 LMS - ok
22:59:27.0934 2716 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:59:27.0935 2716 LSI_FC - ok
22:59:27.0951 2716 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:59:27.0953 2716 LSI_SAS - ok
22:59:27.0965 2716 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:59:27.0966 2716 LSI_SAS2 - ok
22:59:27.0995 2716 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:59:27.0997 2716 LSI_SCSI - ok
22:59:28.0015 2716 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:59:28.0016 2716 luafv - ok
22:59:28.0049 2716 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
22:59:28.0050 2716 Mcx2Svc - ok
22:59:28.0061 2716 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:59:28.0062 2716 megasas - ok
22:59:28.0077 2716 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:59:28.0080 2716 MegaSR - ok
22:59:28.0114 2716 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys
22:59:28.0115 2716 MEIx64 - ok
22:59:28.0123 2716 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:59:28.0124 2716 MMCSS - ok
22:59:28.0134 2716 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:59:28.0135 2716 Modem - ok
22:59:28.0159 2716 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:59:28.0159 2716 monitor - ok
22:59:28.0187 2716 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:59:28.0188 2716 mouclass - ok
22:59:28.0201 2716 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:59:28.0202 2716 mouhid - ok
22:59:28.0231 2716 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
22:59:28.0232 2716 mountmgr - ok
22:59:28.0260 2716 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
22:59:28.0262 2716 mpio - ok
22:59:28.0271 2716 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:59:28.0272 2716 mpsdrv - ok
22:59:28.0299 2716 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
22:59:28.0301 2716 MRxDAV - ok
22:59:28.0319 2716 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:59:28.0321 2716 mrxsmb - ok
22:59:28.0334 2716 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:59:28.0337 2716 mrxsmb10 - ok
22:59:28.0349 2716 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:59:28.0350 2716 mrxsmb20 - ok
22:59:28.0359 2716 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
22:59:28.0359 2716 msahci - ok
22:59:28.0406 2716 MSCamSvc (a592a054d78750b4d73abaa4c94decdf) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
22:59:28.0407 2716 MSCamSvc - ok
22:59:28.0417 2716 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
22:59:28.0418 2716 msdsm - ok
22:59:28.0438 2716 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
22:59:28.0440 2716 MSDTC - ok
22:59:28.0462 2716 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:59:28.0463 2716 Msfs - ok
22:59:28.0482 2716 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:59:28.0483 2716 mshidkmdf - ok
22:59:28.0536 2716 MSHUSBVideo (55218f924e55fd2786ed40edf4ed79c3) C:\Windows\system32\Drivers\nx6000.sys
22:59:28.0536 2716 MSHUSBVideo - ok
22:59:28.0536 2716 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
22:59:28.0536 2716 msisadrv - ok
22:59:28.0567 2716 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
22:59:28.0582 2716 MSiSCSI - ok
22:59:28.0582 2716 msiserver - ok
22:59:28.0598 2716 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:59:28.0598 2716 MSKSSRV - ok
22:59:28.0598 2716 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:59:28.0598 2716 MSPCLOCK - ok
22:59:28.0614 2716 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:59:28.0615 2716 MSPQM - ok
22:59:28.0643 2716 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
22:59:28.0647 2716 MsRPC - ok
22:59:28.0650 2716 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
22:59:28.0651 2716 mssmbios - ok
22:59:28.0670 2716 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:59:28.0671 2716 MSTEE - ok
22:59:28.0680 2716 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:59:28.0681 2716 MTConfig - ok
22:59:28.0691 2716 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:59:28.0692 2716 Mup - ok
22:59:28.0720 2716 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
22:59:28.0725 2716 napagent - ok
22:59:28.0762 2716 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:59:28.0765 2716 NativeWifiP - ok
22:59:28.0812 2716 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
22:59:28.0821 2716 NDIS - ok
22:59:28.0843 2716 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:59:28.0844 2716 NdisCap - ok
22:59:28.0861 2716 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:59:28.0862 2716 NdisTapi - ok
22:59:28.0880 2716 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
22:59:28.0880 2716 Ndisuio - ok
22:59:28.0905 2716 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
22:59:28.0906 2716 NdisWan - ok
22:59:28.0931 2716 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
22:59:28.0932 2716 NDProxy - ok
22:59:28.0941 2716 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:59:28.0942 2716 NetBIOS - ok
22:59:28.0960 2716 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
22:59:28.0963 2716 NetBT - ok
22:59:28.0985 2716 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:59:28.0986 2716 Netlogon - ok
22:59:29.0020 2716 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
22:59:29.0023 2716 Netman - ok
22:59:29.0041 2716 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
22:59:29.0045 2716 netprofm - ok
22:59:29.0121 2716 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:59:29.0123 2716 NetTcpPortSharing - ok
22:59:29.0145 2716 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:59:29.0146 2716 nfrd960 - ok
22:59:29.0198 2716 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
22:59:29.0201 2716 NlaSvc - ok
22:59:29.0212 2716 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:59:29.0213 2716 Npfs - ok
22:59:29.0225 2716 npggsvc - ok
22:59:29.0227 2716 NPPTNT2 - ok
22:59:29.0268 2716 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
22:59:29.0269 2716 nsi - ok
22:59:29.0279 2716 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:59:29.0280 2716 nsiproxy - ok
22:59:29.0332 2716 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
22:59:29.0346 2716 Ntfs - ok
22:59:29.0431 2716 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:59:29.0431 2716 Null - ok
22:59:29.0462 2716 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
22:59:29.0464 2716 nvraid - ok
22:59:29.0490 2716 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
22:59:29.0492 2716 nvstor - ok
22:59:29.0512 2716 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
22:59:29.0514 2716 nv_agp - ok
22:59:29.0553 2716 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
22:59:29.0554 2716 ohci1394 - ok
22:59:29.0586 2716 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:59:29.0589 2716 p2pimsvc - ok
22:59:29.0607 2716 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
22:59:29.0611 2716 p2psvc - ok
22:59:29.0622 2716 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:59:29.0624 2716 Parport - ok
22:59:29.0650 2716 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys
22:59:29.0651 2716 partmgr - ok
22:59:29.0661 2716 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
22:59:29.0664 2716 PcaSvc - ok
22:59:29.0665 2716 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
22:59:29.0665 2716 pci - ok
22:59:29.0680 2716 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
22:59:29.0680 2716 pciide - ok
22:59:29.0696 2716 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:59:29.0696 2716 pcmcia - ok
22:59:29.0712 2716 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:59:29.0712 2716 pcw - ok
22:59:29.0745 2716 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:59:29.0751 2716 PEAUTH - ok
22:59:29.0925 2716 PeerDistSvc (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
22:59:29.0937 2716 PeerDistSvc - ok
22:59:30.0003 2716 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
22:59:30.0004 2716 PerfHost - ok
22:59:30.0102 2716 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
22:59:30.0115 2716 pla - ok
22:59:30.0146 2716 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
22:59:30.0151 2716 PlugPlay - ok
22:59:30.0170 2716 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
22:59:30.0171 2716 PNRPAutoReg - ok
22:59:30.0189 2716 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:59:30.0191 2716 PNRPsvc - ok
22:59:30.0227 2716 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
22:59:30.0231 2716 PolicyAgent - ok
22:59:30.0257 2716 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
22:59:30.0259 2716 Power - ok
22:59:30.0301 2716 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
22:59:30.0302 2716 PptpMiniport - ok
22:59:30.0321 2716 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:59:30.0322 2716 Processor - ok
22:59:30.0336 2716 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
22:59:30.0338 2716 ProfSvc - ok
22:59:30.0359 2716 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:59:30.0360 2716 ProtectedStorage - ok
22:59:30.0394 2716 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
22:59:30.0395 2716 Psched - ok
22:59:30.0426 2716 PSI (fb46e9a827a8799ebd7bfa9128c91f37) C:\Windows\system32\DRIVERS\psi_mf.sys
22:59:30.0426 2716 PSI - ok
22:59:30.0468 2716 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:59:30.0480 2716 ql2300 - ok
22:59:30.0548 2716 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:59:30.0549 2716 ql40xx - ok
22:59:30.0573 2716 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
22:59:30.0576 2716 QWAVE - ok
22:59:30.0583 2716 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:59:30.0584 2716 QWAVEdrv - ok
22:59:30.0592 2716 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:59:30.0593 2716 RasAcd - ok
22:59:30.0617 2716 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:59:30.0618 2716 RasAgileVpn - ok
22:59:30.0629 2716 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
22:59:30.0631 2716 RasAuto - ok
22:59:30.0653 2716 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:59:30.0655 2716 Rasl2tp - ok
22:59:30.0690 2716 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
22:59:30.0693 2716 RasMan - ok
22:59:30.0699 2716 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:59:30.0700 2716 RasPppoe - ok
22:59:30.0710 2716 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:59:30.0711 2716 RasSstp - ok
22:59:30.0731 2716 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
22:59:30.0733 2716 rdbss - ok
22:59:30.0741 2716 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:59:30.0741 2716 rdpbus - ok
22:59:30.0757 2716 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:59:30.0757 2716 RDPCDD - ok
22:59:30.0804 2716 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
22:59:30.0804 2716 RDPDR - ok
22:59:30.0819 2716 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:59:30.0819 2716 RDPENCDD - ok
22:59:30.0819 2716 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:59:30.0819 2716 RDPREFMP - ok
22:59:30.0850 2716 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
22:59:30.0850 2716 RdpVideoMiniport - ok
22:59:30.0897 2716 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys
22:59:30.0899 2716 RDPWD - ok
22:59:30.0931 2716 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
22:59:30.0934 2716 rdyboost - ok
22:59:30.0967 2716 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
22:59:30.0968 2716 RemoteAccess - ok
22:59:30.0974 2716 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
22:59:30.0976 2716 RemoteRegistry - ok
22:59:31.0005 2716 Revoflt (9c3ac71a9934b884fac567a8807e9c4d) C:\Windows\system32\DRIVERS\revoflt.sys
22:59:31.0005 2716 Revoflt - ok
22:59:31.0030 2716 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
22:59:31.0031 2716 RpcEptMapper - ok
22:59:31.0038 2716 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
22:59:31.0039 2716 RpcLocator - ok
22:59:31.0076 2716 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
22:59:31.0078 2716 RpcSs - ok
22:59:31.0093 2716 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:59:31.0094 2716 rspndr - ok
22:59:31.0138 2716 RTL8167 (e50cfb92986dcab49de93788fd695813) C:\Windows\system32\DRIVERS\Rt64win7.sys
22:59:31.0143 2716 RTL8167 - ok
22:59:31.0160 2716 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
22:59:31.0161 2716 s3cap - ok
22:59:31.0187 2716 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:59:31.0188 2716 SamSs - ok
22:59:31.0202 2716 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
22:59:31.0204 2716 sbp2port - ok
22:59:31.0304 2716 SBSDWSCService (794d4b48dfb6e999537c7c3947863463) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
22:59:31.0314 2716 SBSDWSCService - ok
22:59:31.0341 2716 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
22:59:31.0343 2716 SCardSvr - ok
22:59:31.0412 2716 SCBackService (8475e746eb72d04f1015e6f091f50e09) C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
22:59:31.0414 2716 SCBackService - ok
22:59:31.0458 2716 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
22:59:31.0459 2716 scfilter - ok
22:59:31.0502 2716 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
22:59:31.0512 2716 Schedule - ok
22:59:31.0537 2716 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
22:59:31.0537 2716 SCPolicySvc - ok
22:59:31.0571 2716 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
22:59:31.0573 2716 SDRSVC - ok
22:59:31.0606 2716 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:59:31.0606 2716 secdrv - ok
22:59:31.0624 2716 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
22:59:31.0625 2716 seclogon - ok
22:59:31.0749 2716 Secunia PSI Agent (5b66db4877bbac9f7493aa8d84421e49) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
22:59:31.0753 2716 Secunia PSI Agent - ok
22:59:31.0803 2716 Secunia Update Agent (0e88fdf474f2cdd370a4a6ce77d018f0) C:\Program Files (x86)\Secunia\PSI\sua.exe
22:59:31.0805 2716 Secunia Update Agent - ok
22:59:31.0883 2716 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll
22:59:31.0885 2716 SENS - ok
22:59:31.0889 2716 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
22:59:31.0890 2716 SensrSvc - ok
22:59:31.0913 2716 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:59:31.0913 2716 Serenum - ok
22:59:31.0915 2716 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:59:31.0915 2716 Serial - ok
22:59:31.0946 2716 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:59:31.0946 2716 sermouse - ok
22:59:31.0977 2716 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
22:59:31.0977 2716 SessionEnv - ok
22:59:32.0006 2716 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
22:59:32.0007 2716 sffdisk - ok
22:59:32.0013 2716 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
22:59:32.0013 2716 sffp_mmc - ok
22:59:32.0021 2716 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
22:59:32.0021 2716 sffp_sd - ok
22:59:32.0031 2716 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:59:32.0032 2716 sfloppy - ok
22:59:32.0076 2716 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
22:59:32.0079 2716 SharedAccess - ok
22:59:32.0115 2716 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
22:59:32.0119 2716 ShellHWDetection - ok
22:59:32.0141 2716 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:59:32.0142 2716 SiSRaid2 - ok
22:59:32.0157 2716 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:59:32.0158 2716 SiSRaid4 - ok
22:59:32.0211 2716 SkypeUpdate (579ba0a911ff5ea70cb604cd3b744b0a) C:\Program Files (x86)\Skype\Updater\Updater.exe
22:59:32.0212 2716 SkypeUpdate - ok
22:59:32.0280 2716 Smart TimeLock (101556f6216e97f1258d87c38203695f) C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
22:59:32.0280 2716 Smart TimeLock - ok
22:59:32.0300 2716 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:59:32.0302 2716 Smb - ok
22:59:32.0321 2716 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
22:59:32.0322 2716 SNMPTRAP - ok
22:59:32.0330 2716 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:59:32.0331 2716 spldr - ok
22:59:32.0371 2716 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
22:59:32.0374 2716 Spooler - ok
22:59:32.0461 2716 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
22:59:32.0491 2716 sppsvc - ok
22:59:32.0572 2716 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
22:59:32.0574 2716 sppuinotify - ok
22:59:32.0626 2716 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
22:59:32.0630 2716 srv - ok
22:59:32.0651 2716 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
22:59:32.0654 2716 srv2 - ok
22:59:32.0669 2716 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
22:59:32.0671 2716 srvnet - ok
22:59:32.0687 2716 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
22:59:32.0689 2716 SSDPSRV - ok
22:59:32.0702 2716 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
22:59:32.0704 2716 SstpSvc - ok
22:59:32.0743 2716 Steam Client Service - ok
22:59:32.0764 2716 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:59:32.0765 2716 stexstor - ok
22:59:32.0792 2716 StillCam (decacb6921ded1a38642642685d77dac) C:\Windows\system32\DRIVERS\serscan.sys
22:59:32.0793 2716 StillCam - ok
22:59:32.0832 2716 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
22:59:32.0838 2716 stisvc - ok
22:59:32.0866 2716 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
22:59:32.0867 2716 storflt - ok
22:59:32.0886 2716 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
22:59:32.0887 2716 storvsc - ok
22:59:32.0908 2716 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
22:59:32.0909 2716 swenum - ok
22:59:32.0927 2716 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
22:59:32.0933 2716 swprv - ok
22:59:32.0935 2716 Synth3dVsc - ok
22:59:32.0985 2716 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
22:59:33.0001 2716 SysMain - ok
22:59:33.0111 2716 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
22:59:33.0113 2716 TabletInputService - ok
22:59:33.0141 2716 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
22:59:33.0145 2716 TapiSrv - ok
22:59:33.0168 2716 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
22:59:33.0170 2716 TBS - ok
22:59:33.0256 2716 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
22:59:33.0272 2716 Tcpip - ok
22:59:33.0334 2716 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
22:59:33.0341 2716 TCPIP6 - ok
22:59:33.0382 2716 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
22:59:33.0383 2716 tcpipreg - ok
22:59:33.0394 2716 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:59:33.0395 2716 TDPIPE - ok
22:59:33.0414 2716 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
22:59:33.0415 2716 TDTCP - ok
22:59:33.0444 2716 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
22:59:33.0446 2716 tdx - ok
22:59:33.0458 2716 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
22:59:33.0459 2716 TermDD - ok
22:59:33.0495 2716 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
22:59:33.0502 2716 TermService - ok
22:59:33.0509 2716 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
22:59:33.0510 2716 Themes - ok
22:59:33.0529 2716 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:59:33.0530 2716 THREADORDER - ok
22:59:33.0554 2716 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
22:59:33.0557 2716 TrkWks - ok
22:59:33.0588 2716 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
22:59:33.0590 2716 TrustedInstaller - ok
22:59:33.0619 2716 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:59:33.0619 2716 tssecsrv - ok
22:59:33.0650 2716 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
22:59:33.0651 2716 TsUsbFlt - ok
22:59:33.0652 2716 tsusbhub - ok
22:59:33.0676 2716 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
22:59:33.0677 2716 tunnel - ok
22:59:33.0698 2716 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:59:33.0699 2716 uagp35 - ok
22:59:33.0723 2716 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
22:59:33.0726 2716 udfs - ok
22:59:33.0738 2716 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
22:59:33.0739 2716 UI0Detect - ok
22:59:33.0754 2716 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
22:59:33.0755 2716 uliagpkx - ok
22:59:33.0781 2716 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
22:59:33.0782 2716 umbus - ok
22:59:33.0806 2716 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:59:33.0807 2716 UmPass - ok
22:59:33.0833 2716 UmRdpService (a293dcd756d04d8492a750d03b9a297c) C:\Windows\System32\umrdp.dll
22:59:33.0836 2716 UmRdpService - ok
22:59:33.0955 2716 UNS (eb79c6c91a99930015ef29ae7fa802d1) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
22:59:33.0972 2716 UNS - ok
22:59:34.0053 2716 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
22:59:34.0056 2716 upnphost - ok
22:59:34.0092 2716 USBAAPL64 (fb251567f41bc61988b26731dec19e4b) C:\Windows\system32\Drivers\usbaapl64.sys
22:59:34.0092 2716 USBAAPL64 - ok
22:59:34.0131 2716 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys
22:59:34.0132 2716 usbaudio - ok
22:59:34.0146 2716 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
22:59:34.0148 2716 usbccgp - ok
22:59:34.0165 2716 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
22:59:34.0166 2716 usbcir - ok
22:59:34.0190 2716 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
22:59:34.0191 2716 usbehci - ok
22:59:34.0213 2716 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
22:59:34.0216 2716 usbhub - ok
22:59:34.0224 2716 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
22:59:34.0225 2716 usbohci - ok
22:59:34.0255 2716 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:59:34.0256 2716 usbprint - ok
22:59:34.0267 2716 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:59:34.0268 2716 USBSTOR - ok
22:59:34.0277 2716 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
22:59:34.0277 2716 usbuhci - ok
22:59:34.0302 2716 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
22:59:34.0304 2716 usbvideo - ok
22:59:34.0315 2716 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
22:59:34.0317 2716 UxSms - ok
22:59:34.0350 2716 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:59:34.0351 2716 VaultSvc - ok
22:59:34.0368 2716 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
22:59:34.0369 2716 vdrvroot - ok
22:59:34.0408 2716 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
22:59:34.0414 2716 vds - ok
22:59:34.0430 2716 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:59:34.0431 2716 vga - ok
22:59:34.0445 2716 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:59:34.0446 2716 VgaSave - ok
22:59:34.0463 2716 VGPU - ok
22:59:34.0485 2716 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
22:59:34.0487 2716 vhdmp - ok
22:59:34.0502 2716 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
22:59:34.0502 2716 viaide - ok
22:59:34.0519 2716 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
22:59:34.0521 2716 vmbus - ok
22:59:34.0534 2716 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
22:59:34.0535 2716 VMBusHID - ok
22:59:34.0542 2716 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
22:59:34.0543 2716 volmgr - ok
22:59:34.0576 2716 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
22:59:34.0580 2716 volmgrx - ok
22:59:34.0592 2716 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
22:59:34.0595 2716 volsnap - ok
22:59:34.0620 2716 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:59:34.0622 2716 vsmraid - ok
22:59:34.0668 2716 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
22:59:34.0682 2716 VSS - ok
22:59:34.0765 2716 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
22:59:34.0766 2716 vwifibus - ok
22:59:34.0795 2716 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
22:59:34.0800 2716 W32Time - ok
22:59:34.0823 2716 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:59:34.0824 2716 WacomPen - ok
22:59:34.0850 2716 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:59:34.0851 2716 WANARP - ok
22:59:34.0858 2716 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:59:34.0858 2716 Wanarpv6 - ok
22:59:35.0014 2716 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
22:59:35.0025 2716 WatAdminSvc - ok
22:59:35.0072 2716 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
22:59:35.0085 2716 wbengine - ok
22:59:35.0108 2716 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
22:59:35.0111 2716 WbioSrvc - ok
22:59:35.0131 2716 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
22:59:35.0131 2716 wcncsvc - ok
22:59:35.0146 2716 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
22:59:35.0162 2716 WcsPlugInService - ok
22:59:35.0222 2716 WCUService_STC_FF (e47e66538692b1cfd6cc8021546fcc83) C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
22:59:35.0224 2716 WCUService_STC_FF - ok
22:59:35.0244 2716 WCUService_STC_IE (147c60622cb53e901efd8bb6d44a4c46) C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
22:59:35.0246 2716 WCUService_STC_IE - ok
22:59:35.0263 2716 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:59:35.0264 2716 Wd - ok
22:59:35.0289 2716 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:59:35.0295 2716 Wdf01000 - ok
22:59:35.0310 2716 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:59:35.0312 2716 WdiServiceHost - ok
22:59:35.0314 2716 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:59:35.0315 2716 WdiSystemHost - ok
22:59:35.0346 2716 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
22:59:35.0349 2716 WebClient - ok
22:59:35.0364 2716 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
22:59:35.0367 2716 Wecsvc - ok
22:59:35.0380 2716 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
22:59:35.0382 2716 wercplsupport - ok
22:59:35.0400 2716 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
22:59:35.0402 2716 WerSvc - ok
22:59:35.0415 2716 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:59:35.0416 2716 WfpLwf - ok
22:59:35.0432 2716 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:59:35.0432 2716 WIMMount - ok
22:59:35.0471 2716 WinDefend - ok
22:59:35.0474 2716 WinHttpAutoProxySvc - ok
22:59:35.0519 2716 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
22:59:35.0522 2716 Winmgmt - ok
22:59:35.0579 2716 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
22:59:35.0597 2716 WinRM - ok
22:59:35.0700 2716 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
22:59:35.0701 2716 WinUsb - ok
22:59:35.0743 2716 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
22:59:35.0751 2716 Wlansvc - ok
22:59:35.0843 2716 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:59:35.0852 2716 wlidsvc - ok
22:59:35.0887 2716 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
22:59:35.0887 2716 WmiAcpi - ok
22:59:35.0906 2716 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
22:59:35.0908 2716 wmiApSrv - ok
22:59:35.0927 2716 WMPNetworkSvc - ok
22:59:35.0938 2716 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
22:59:35.0940 2716 WPCSvc - ok
22:59:35.0964 2716 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
22:59:35.0966 2716 WPDBusEnum - ok
22:59:35.0975 2716 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:59:35.0975 2716 ws2ifsl - ok
22:59:35.0989 2716 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll
22:59:35.0991 2716 wscsvc - ok
22:59:36.0021 2716 WSDPrintDevice (8d918b1db190a4d9b1753a66fa8c96e8) C:\Windows\system32\DRIVERS\WSDPrint.sys
22:59:36.0022 2716 WSDPrintDevice - ok
22:59:36.0024 2716 WSearch - ok
22:59:36.0087 2716 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
22:59:36.0108 2716 wuauserv - ok
22:59:36.0145 2716 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
22:59:36.0147 2716 WudfPf - ok
22:59:36.0168 2716 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:59:36.0170 2716 WUDFRd - ok
22:59:36.0188 2716 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
22:59:36.0190 2716 wudfsvc - ok
22:59:36.0217 2716 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
22:59:36.0221 2716 WwanSvc - ok
22:59:36.0246 2716 __RemoteX__ - ok
22:59:36.0263 2716 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:59:36.0357 2716 \Device\Harddisk0\DR0 - ok
22:59:36.0372 2716 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
22:59:37.0774 2716 \Device\Harddisk1\DR1 - ok
22:59:37.0775 2716 Boot (0x1200) (34523a334ab14afda8ded7f0c464601c) \Device\Harddisk0\DR0\Partition0
22:59:37.0776 2716 \Device\Harddisk0\DR0\Partition0 - ok
22:59:37.0777 2716 Boot (0x1200) (c815262665166c4ff122e820548bd0aa) \Device\Harddisk0\DR0\Partition1
22:59:37.0778 2716 \Device\Harddisk0\DR0\Partition1 - ok
22:59:37.0780 2716 Boot (0x1200) (c77f84b6f1f28280d435cd3b3633b744) \Device\Harddisk1\DR1\Partition0
22:59:37.0781 2716 \Device\Harddisk1\DR1\Partition0 - ok
22:59:37.0781 2716 ============================================================
22:59:37.0781 2716 Scan finished
22:59:37.0781 2716 ============================================================
22:59:37.0786 6044 Detected object count: 0
22:59:37.0786 6044 Actual detected object count: 0




aswMBR log:


aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-06-16 23:01:32
-----------------------------
23:01:32.771 OS Version: Windows x64 6.1.7601 Service Pack 1
23:01:32.771 Number of processors: 4 586 0x2A07
23:01:32.771 ComputerName: TYLER-PC UserName: Tyler
23:01:33.875 Initialize success
23:20:23.625 AVAST engine defs: 12061601
23:23:40.310 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1
23:23:40.311 Disk 0 Vendor: SAMSUNG_HD103SJ 1AJ10001 Size: 953869MB BusType: 3
23:23:40.312 Disk 1 \Device\Harddisk1\DR1 -> \Device\0000007e
23:23:40.313 Disk 1 Vendor: Size: 953869MB BusType: 0
23:23:40.324 Disk 0 MBR read successfully
23:23:40.326 Disk 0 MBR scan
23:23:40.329 Disk 0 Windows 7 default MBR code
23:23:40.338 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
23:23:40.350 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953767 MB offset 206848
23:23:40.387 Disk 0 scanning C:\Windows\system32\drivers
23:23:46.298 Service scanning
23:23:58.649 Modules scanning
23:23:58.653 Disk 0 trace - called modules:
23:23:58.994 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
23:23:58.997 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007713060]
23:23:59.000 3 CLASSPNP.SYS[fffff8800160143f] -> nt!IofCallDriver -> [0xfffffa800717e520]
23:23:59.003 5 ACPI.sys[fffff88000f577a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-1[0xfffffa8007176680]
23:23:59.642 AVAST engine scan C:\Windows
23:24:01.739 AVAST engine scan C:\Windows\system32
23:25:39.870 AVAST engine scan C:\Windows\system32\drivers
23:25:47.670 AVAST engine scan C:\Users\Tyler
23:28:27.490 Disk 0 MBR has been saved successfully to "C:\Users\Tyler\Desktop\MBR.dat"
23:28:27.494 The log file has been saved successfully to "C:\Users\Tyler\Desktop\aswMBR.txt"



I've noticed after running ComboFix before the audio ads went away and google chrome started working, too.

#12 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:03:31 AM

Posted 16 June 2012 - 10:38 PM

Greetings

At this time I would like you to run this script for me and it is a good time to check out the computer to see if there is anything else that needs to be addressed.

:Run CFScript:

Open Notepad and copy/paste the text in the box into the window:

ClearJavaCache::

Folder::
c:\program files (x86)\SweetIM
c:\programdata\Premium
c:\programdata\InstallMate
c:\program files (x86)\Splashtop
c:\program files (x86)\Media Finder

DDS::
mStart Page = hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuyB0AyBzytDyDyBzytAyD0ByCtByByC0BtN0D0TzutBtDtCtBtDyCtCtA&cr=1217586327
IE: Download with &Media Finder - c:\program files (x86)\Media Finder\hook.html

Save it to your desktop as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe
Posted Image
This will let ComboFix run again.
Restart if you have to.
Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following

  • report from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now after running the script?

Gringo

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#13 tyler87898

tyler87898
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 16 June 2012 - 10:47 PM

Should I run it in safemode?

#14 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:03:31 AM

Posted 16 June 2012 - 10:51 PM

only if it will not run in normal mode


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#15 tyler87898

tyler87898
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 16 June 2012 - 11:20 PM

Here is the log from ComboFix:

ComboFix 12-06-15.06 - Tyler 06/17/2012 0:00.2.4 - x64 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8109.6570 [GMT -4:00]
Running from: c:\users\Tyler\Downloads\ComboFix.exe
Command switches used :: c:\users\Tyler\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Splashtop
c:\program files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\uninst.exe
c:\program files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUAgent.exe
c:\program files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\.gitignore
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome.manifest
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\addonManagerOverlay.xul
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\config-dialog.xul
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\extensions.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\extensions.xul
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\facebook.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\bg_blue.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\bg_green.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\bg_grey.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\bg_red.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\bg_yellow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\btn_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\btn_bg_single.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\footer_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\bg\header_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\close_button.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\config_background.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\config_background_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\config_line.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\configs.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebook-buttons.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebook.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebook_button.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebook_button_1.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebook_intro.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebookbtn.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebookbtn_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebookbtn_sign.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebookbtnDown.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebookbtnDown_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\facebookbtnDown_sign.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\favicon.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\footer_icons.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\friends-bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\friends_empty.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\friends_index.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\friends_loading.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\head_search.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\close.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\OpenSidebarNotice-left.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\OpenSidebarNotice-left_1.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\OpenSidebarNotice-left_arrow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\OpenSidebarNotice-left_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\OpenSidebarNotice-up.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\OpenSidebarNotice-up_arrow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\OpenSidebarNotice-up_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\tips_up.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\hint\tips_up_1.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\history_empty.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\horizontal-slider-handler-bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\loading-line.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\loading-square.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\logo-s.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\logout_button.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\bgcolor_F.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\bgcolor_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\bgcolor_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\blue.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\blue_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\blue_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\blue_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\config.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\config_frame.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\config_line.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\d_left.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\d_right.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\green.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\green_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\green_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\green_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\grey.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\grey_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\grey_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\grey_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\gridicon.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\o_left.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\o_right.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\p_left.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\p_right.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\red.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\red_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\red_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\red_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\split.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\wallicon.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\yellow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\yellow_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\yellow_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\menu\yellow_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\modes.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\modes_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\pager_arrows.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\baidu_logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\bing_logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\google_logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_bg_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_bg_line.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_bg_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_bg_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_button.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_g.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\search_kuang.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\searcharrow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\searchtype_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\searchtype_bg_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\yahoo_logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\search\yandex_logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\slider-bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\star-1.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\star-2.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\star.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\stconnect-logo-s.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\stconnect-logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\tabs\mostvisited.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\tabs\myfavorite.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\tabs\myfriends.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\tabs\myhistory.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\tabs\tabs.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\tabs\tabs_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\back.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\empty.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\empty_opaque.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_bottom.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_bottom_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_left.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_left_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_right.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_right_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_top.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbnail\flexible_border_top_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\thumbtack.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\top_sites_empty.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\user_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\user_pic.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\vertical-slider-dot.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\vertical-slider-handler-bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\view_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\view_bg_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\wall\btnNext.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\images\wall\btnPrevious.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\index.htm
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery-1.4.2.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.center.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.cookie.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.corner.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.debug.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.blind.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.bounce.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.clip.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.core.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.drop.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.explode.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.fold.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.highlight.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.pulsate.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.scale.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.shake.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.slide.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.effects.transfer.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.hotkeys-0.7.9.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.jsonp.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.mousewheel.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.pager.lite.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.position.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.stconnect.common.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.stconnect.flow.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.stconnect.grid.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.stconnect.lang.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.stylesheet.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.accordion.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.autocomplete.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.button.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.core.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.datepicker.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.dialog.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.draggable.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.droppable.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.mouse.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.position.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.progressbar.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.resizable.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.selectable.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.slider.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.sortable.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.tabs.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jquery\jquery.ui.widget.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\json2.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\jsonp\splashtab.php
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\facebook.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\ajax-loader.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\arrow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\comment_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\comment_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\divider.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\downarrow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\like_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\like_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\loadingbig.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\loadingsmall.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\login_center.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\login_center_disable.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\login_left.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\login_left_disable.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\login_right.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\login_right_disable.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\no_pic.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\play_video.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\unlike_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\images\unlike_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\index.html
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\sidebar.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\sidebar\sidebar.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\splashtab.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\stconnect.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\stconnect.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\SVConfig\css\style.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\SVConfig\default.html
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\SVConfig\js\script.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\SVConfig\js\svconfig_locale.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-anim_basic_16x16.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_flat_0_aaaaaa_40x100.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_flat_75_ffffff_40x100.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_glass_55_fbf9ee_1x400.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_glass_65_ffffff_1x400.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_glass_75_dadada_1x400.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_glass_75_e6e6e6_1x400.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_glass_95_fef1ec_1x400.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-bg_highlight-soft_75_cccccc_1x100.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-icons_222222_256x240.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-icons_2e83ff_256x240.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-icons_454545_256x240.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-icons_888888_256x240.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\images\ui-icons_cd0a0a_256x240.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.accordion.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.all.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.autocomplete.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.base.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.button.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.core.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.datepicker.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.dialog.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.progressbar.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.resizable.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.slider.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.tabs.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\base\jquery.ui.theme.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\bgblue.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\bggreen.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\bggrey.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\bgred.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\bgyellow.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\images\bg_blue_3.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\images\bg_green_3.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\images\bg_grey_3.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\images\bg_red_3.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\overlay\images\bg_yellow_3.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\cs.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\da.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\de.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\el.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\en.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\es.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\fi.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\fr.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\hr.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\hu.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\it.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\ja.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\ko.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\nb.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\nl.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\no.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\pl.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\pt-BR.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\pt.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\ru.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\sk.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\sl.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\sv.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\tr.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\zh-CN.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\zh-TW.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\css\zh.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_cs.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_da.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_de.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_el.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_en.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_es.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_fi.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_fr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_hr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_hu.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_it.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_ja.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_ko.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_nb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_nl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_pl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_pt.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_pt_BR.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_ru.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_sk.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_sl_SI.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_sv_SE.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_tr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_zh_CN.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mf_zh_TW.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_cs.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_da.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_de.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_el.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_en.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_es.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_fi.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_fr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_hr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_hu.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_it.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_ja.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_ko.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_nb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_nl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_pl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_pt.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_pt_BR.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_ru.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_sk.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_sl_SI.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_sv_SE.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_tr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_zh_CN.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\mh_zh_TW.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_cs.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_da.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_de.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_el.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_en.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_es.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_fi.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_fr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_hr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_hu.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_it.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_ja.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_ko.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_nb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_nl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_pl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_pt.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_pt_BR.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_ru.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_sk.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_sl_SI.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_sv_SE.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_tr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_zh_cn.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\themes\tabs\images\ts_zh_TW.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\css\eula.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\css\style.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\default.html
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\eula.htm
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\bl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\blank.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\bottom.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\br.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\btn_arrow.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\button_R.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\favorite.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\FB.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\left.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\person.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\pic.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\pic_F.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\pic_FB.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\pic_S.gif
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\remindbg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\right.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\Search.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\cs_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\cs_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\cs_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\da_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\da_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\da_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\de_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\de_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\de_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\el_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\el_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\el_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\en_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\en_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\en_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\es_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\es_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\es_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\fi_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\fi_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\fi_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\fr_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\fr_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\fr_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\hr_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\hr_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\hr_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\hu_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\hu_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\hu_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\it_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\it_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\it_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ja_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ja_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ja_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ko_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ko_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ko_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\nb_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\nb_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\nb_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\nl_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\nl_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\nl_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\no_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\no_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\no_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pl_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pl_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pl_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pt-BR_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pt-BR_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pt-BR_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pt_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pt_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\pt_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ru_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ru_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\ru_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sk_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sk_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sk_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sl_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sl_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sl_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sv_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sv_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\sv_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\tr_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\tr_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\tr_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\zh-CN_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\zh-CN_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\zh-CN_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\zh_free_button_D.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\zh_free_button_O.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\start\zh_free_button_P.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\cs.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\da.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\de.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\el.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\en.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\es.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\fi.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\fr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\hr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\hu.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\it.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\ja.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\ko.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\nb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\nl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\no.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\pl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\pt-BR.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\pt.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\ru.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\sk.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\sl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\sv.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\tr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\zh-CN.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\title\zh.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\tl.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\top.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\tr.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\welcome_bg.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\yahoo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\images\yandex.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\js\script.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\js\welcome.api.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\js\Welcome\js\welcome.lang.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\login.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\login.xul
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\md5.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\sidebar.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\sidebar.xul
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\splashtop-protocol.htm
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\stconnect-tracking.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\stconnect.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\stconnect.xul
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\content\tabbrowser.xml
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\cs-CZ\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\da\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\de\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\el\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\en-US\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\en\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\es\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\fi-FI\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\fr\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\hr\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\hu\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\it\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\ja\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\ko\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\nb\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\nl\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\pl\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\pt-BR\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\pt\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\ru\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\sk\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\sl-SI\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\sv-SE\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\tr\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\zh-CN\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\locale\zh-TW\stconnect.dtd
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\skin\config-dialog.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\skin\fb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\skin\logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\skin\share.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\skin\stconnect.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\skin\toolbar-icon-16x16.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\chrome\skin\toolbar-icon-24x24.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\components\libstutils.dll
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\components\libstutils.xpt
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\components\stconnect-protocol.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\components\stconnect.idl
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\components\stconnect.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\components\stconnect.xpt
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\defaults\preferences\prefs.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\install.rdf
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\big\246ee772548c0b40ee205f075fb7c9cc.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\big\51fc89b9f7f31f7d420334c5f9f091dc.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\big\87468c07c02e370ef84d4b7e3a668589.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\big\dfac2ac2f8102bbfbd4ef18a247d74cb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\icon\246ee772548c0b40ee205f075fb7c9cc.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\icon\51fc89b9f7f31f7d420334c5f9f091dc.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\icon\87468c07c02e370ef84d4b7e3a668589.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\icon\dfac2ac2f8102bbfbd4ef18a247d74cb.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\de-DE\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\big\011ba225df6f00f413ffb26950609542.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\big\87468c07c02e370ef84d4b7e3a668589.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\big\d799891118a50c76fad21fde99ca8965.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\big\dfac2ac2f8102bbfbd4ef18a247d74cb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\icon\011ba225df6f00f413ffb26950609542.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\icon\87468c07c02e370ef84d4b7e3a668589.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\icon\d799891118a50c76fad21fde99ca8965.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\icon\dfac2ac2f8102bbfbd4ef18a247d74cb.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\default\Zynga.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\edition.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\big\006d5652f4c43ab9e69328ab5e74f7e4.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\big\87468c07c02e370ef84d4b7e3a668589.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\big\d799891118a50c76fad21fde99ca8965.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\big\dceba85e4da0eda3aef1f9b260642e19.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\big\dfac2ac2f8102bbfbd4ef18a247d74cb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\icon\006d5652f4c43ab9e69328ab5e74f7e4.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\icon\87468c07c02e370ef84d4b7e3a668589.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\icon\d799891118a50c76fad21fde99ca8965.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\icon\dceba85e4da0eda3aef1f9b260642e19.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\icon\dfac2ac2f8102bbfbd4ef18a247d74cb.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\en-US\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\FFSEConfig.ini
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\big\8e8a8bbf74101ddfb950a2ee31b80f24.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\big\dfac2ac2f8102bbfbd4ef18a247d74cb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\big\f9dc77c492a32af7237c3660430fec61.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\big\fa7ad823c6773138ef99e000830a4ab5.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\icon\8e8a8bbf74101ddfb950a2ee31b80f24.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\icon\dfac2ac2f8102bbfbd4ef18a247d74cb.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\icon\f9dc77c492a32af7237c3660430fec61.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\icon\fa7ad823c6773138ef99e000830a4ab5.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ja-JP\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\big\08592c4bd0a5cc1e24ea33be3e829a42.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\big\94b6600a9d95227a6d7e352d77689718.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\big\9ab491d30987c8bfea79fd317b4a8ee4.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\big\dfac2ac2f8102bbfbd4ef18a247d74cb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\icon\08592c4bd0a5cc1e24ea33be3e829a42.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\icon\94b6600a9d95227a6d7e352d77689718.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\icon\9ab491d30987c8bfea79fd317b4a8ee4.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\icon\dfac2ac2f8102bbfbd4ef18a247d74cb.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\pt-BR\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\big\80ebf756fa43476ec71b425bf277d006.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\big\98cd726bda33e25de6f26b6f6c8c57b2.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\big\9933100710babb5ee43c9297769e47f9.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\big\bbaea2ac39a38a7a921394269d1c3797.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\icon\80ebf756fa43476ec71b425bf277d006.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\icon\98cd726bda33e25de6f26b6f6c8c57b2.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\icon\9933100710babb5ee43c9297769e47f9.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\icon\bbaea2ac39a38a7a921394269d1c3797.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\ru-RU\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\stconnect-module.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\SVlogo.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\utils.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\big\7bad394370e8a5ca7072eca3f8a07b74.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\big\89325421f722ed72cbd1032df9bdab65.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\big\96797aad0dd3ee21c4a7301ca8732d80.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\big\f03f5717616221de41881be555473a02.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\icon\7bad394370e8a5ca7072eca3f8a07b74.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\icon\89325421f722ed72cbd1032df9bdab65.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\icon\96797aad0dd3ee21c4a7301ca8732d80.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\icon\f03f5717616221de41881be555473a02.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-CN\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\big\418ec4aff9d1578f0c5af252791b3adf.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\big\a92fbc5ad5706bbfb5c0da0776cd8d94.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\big\cea86dd36b0f531cfe2f53ca29162a00.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\big\dfac2ac2f8102bbfbd4ef18a247d74cb.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\big\eef3e469e85253ae66ed6a6bb4925ee8.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\icon\418ec4aff9d1578f0c5af252791b3adf.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\icon\a92fbc5ad5706bbfb5c0da0776cd8d94.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\icon\cea86dd36b0f531cfe2f53ca29162a00.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\icon\dfac2ac2f8102bbfbd4ef18a247d74cb.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\icon\eef3e469e85253ae66ed6a6bb4925ee8.ico
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}\resource\zh-TW\stconnect\image\stconnect_data.sqlite
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}\chrome.manifest
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}\chrome\content\logo.png
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}\components\services.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}\install.rdf
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}\resource\hooks.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}\resource\search.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\chrome.manifest
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\chrome\m\yoono.com\sidebar.jar
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\chrome\yoono.jar
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\app-startup-observer.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\deviceVMProtocol.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\library-loader.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\yoono.xpt
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\yoonoAbout.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\yoonoHelp.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\yoonoIWebAPI.idl
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\yoonoIWebAPI.xpt
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\yoonoProtocol.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\components\yoonoWebAPI.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\defaults\preferences\yoonoprefs.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\install.rdf
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib\WINNT_x86-msvc\1.9.1\yoono.dll
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\xbl.css
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\xbl.xml
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoBkmSync.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoCommandQueue.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoCookies.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoDialogs.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoKeyValueDB.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoLog.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoPrefs.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoServerConnection.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoService.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoSidebarService.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoStorage.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoUtils.js
c:\program files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules\yoonoYEXTIF.js
c:\program files (x86)\Splashtop\Splashtop Connect IE Software Updater\uninst.exe
c:\program files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUAgent.exe
c:\program files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
c:\program files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\23ce1a013bae69eda2408df8cf8730f9.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\364e4c56477dd7782e46bfb4fc975a42.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\862c4a99b6522591383967991a14a890.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\971df164762b4b2b1b8a9254e227f77a.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\favicon\23ce1a013bae69eda2408df8cf8730f9.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\favicon\364e4c56477dd7782e46bfb4fc975a42.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\favicon\862c4a99b6522591383967991a14a890.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\br\thumbnail\favicon\971df164762b4b2b1b8a9254e227f77a.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\51200b908689485c844c16c1198840e0.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\57c90a84f0832f491a224119dd5d1d39.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\b15ee80a48d1cd805b2fa2e375086d5d.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\cbf1967047b39d11403fee711c40dc1c.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\favicon\51200b908689485c844c16c1198840e0.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\favicon\57c90a84f0832f491a224119dd5d1d39.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\favicon\b15ee80a48d1cd805b2fa2e375086d5d.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\cn\thumbnail\favicon\cbf1967047b39d11403fee711c40dc1c.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\116a53d9ce5715b1eb9d830cc32be18b.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\364e4c56477dd7782e46bfb4fc975a42.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\b999c6e60a9a47ca8e1ecfc273a46336.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\fa15ee642abbf3daaf6588c6f52bb020.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\favicon\116a53d9ce5715b1eb9d830cc32be18b.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\favicon\364e4c56477dd7782e46bfb4fc975a42.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\favicon\b999c6e60a9a47ca8e1ecfc273a46336.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\de\thumbnail\favicon\fa15ee642abbf3daaf6588c6f52bb020.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\2565591c7bc57d099c7698e68ee5f9c3.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\364e4c56477dd7782e46bfb4fc975a42.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\dac316434e6b63243989b10489edc9a9.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\fa15ee642abbf3daaf6588c6f52bb020.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\favicon\2565591c7bc57d099c7698e68ee5f9c3.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\favicon\364e4c56477dd7782e46bfb4fc975a42.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\favicon\dac316434e6b63243989b10489edc9a9.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\default\thumbnail\favicon\fa15ee642abbf3daaf6588c6f52bb020.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\defaultTS.ini
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\06666916c0b99fe708c8bfd165192461.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\3617d5d1954e69a3d996020f4ee4ec66.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\364e4c56477dd7782e46bfb4fc975a42.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\e839c1c12ffb38b6ac2186ddb6b70c4c.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\favicon\06666916c0b99fe708c8bfd165192461.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\favicon\3617d5d1954e69a3d996020f4ee4ec66.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\favicon\364e4c56477dd7782e46bfb4fc975a42.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\jp\thumbnail\favicon\e839c1c12ffb38b6ac2186ddb6b70c4c.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\19fb1c0345762caa5814855c2141f5d0.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\4bde32fae5c83ce3825a55bf9438114c.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\991ea981cdc5d422435329fa9c93ac37.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\bac18893e0947c94aedfba93f85ba38e.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\favicon\19fb1c0345762caa5814855c2141f5d0.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\favicon\4bde32fae5c83ce3825a55bf9438114c.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\favicon\991ea981cdc5d422435329fa9c93ac37.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\ru\thumbnail\favicon\bac18893e0947c94aedfba93f85ba38e.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\364e4c56477dd7782e46bfb4fc975a42.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\44b872a9ff3e628828240aa00e56f24d.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\768224e9de037f4b9835352d814dff47.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\834b71f96ffb77af5c9ca828425e7596.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\favicon\364e4c56477dd7782e46bfb4fc975a42.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\favicon\44b872a9ff3e628828240aa00e56f24d.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\favicon\768224e9de037f4b9835352d814dff47.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\tw\thumbnail\favicon\834b71f96ffb77af5c9ca828425e7596.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\2565591c7bc57d099c7698e68ee5f9c3.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\35dfbd7c42bad94dfa61a8b65665eaba.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\364e4c56477dd7782e46bfb4fc975a42.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\fa15ee642abbf3daaf6588c6f52bb020.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\favicon\2565591c7bc57d099c7698e68ee5f9c3.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\favicon\35dfbd7c42bad94dfa61a8b65665eaba.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\favicon\364e4c56477dd7782e46bfb4fc975a42.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\favicon\fa15ee642abbf3daaf6588c6f52bb020.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\favicon\fd1f0092ede56f8088abeddcb703d2c7.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\default_top_sites\us\thumbnail\fd1f0092ede56f8088abeddcb703d2c7.png
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\download_IE\DownloadIEConfig.ini
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\search\26321ea81b934c9cd27ac3ec7683b8a0
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\search\icon\Baidu.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\search\icon\Bing.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\search\icon\Google.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\search\icon\Yahoo.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\Config\search\icon\Yandex.ico
c:\program files (x86)\Splashtop\Splashtop Connect IE\LowerHelper.exe
c:\program files (x86)\Splashtop\Splashtop Connect IE\sqlite3.dll
c:\program files (x86)\Splashtop\Splashtop Connect IE\STC.dll
c:\program files (x86)\Splashtop\Splashtop Connect IE\STC_EULA_installshield_101111.rtf
c:\program files (x86)\Splashtop\Splashtop Connect IE\STCActivate.exe
c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe
c:\program files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe
c:\program files (x86)\Splashtop\Splashtop Connect IE\STCRes.dll
c:\program files (x86)\Splashtop\Splashtop Connect\BackService.exe
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-AE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-BH\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-DZ\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-EG\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-IQ\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-JO\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-KW\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-LB\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-LY\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-MA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-OM\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-QA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-SA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-SY\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-TN\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ar-YE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\config.ini
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\cs-CZ\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\da-DK\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\de-AT\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\de-CH\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\de-DE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\de-LI\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\de-LU\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\el-GR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-029\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-AU\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-BZ\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-CA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-GB\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-IE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-IN\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-JM\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-MY\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-NZ\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-PH\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-SG\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-TT\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-US\Zynga.ico
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-US\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-ZA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\en-ZW\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-AR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-BO\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-CL\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-CO\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-CR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-DO\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-EC\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-ES\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-ES_tradnl\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-GT\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-HN\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-NI\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-PA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-PE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-PR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-PY\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-SV\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-US\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-UY\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\es-VE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\fi-FI\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\fr-BE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\fr-CA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\fr-CH\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\fr-FR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\fr-LU\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\fr-MC\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\he-IL\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\hr-BA\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\hr-HR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\hu-HU\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\it-CH\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\it-IT\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ja-JP\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ko-KR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\nb-NO\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\nl-BE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\nl-NL\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\pl-PL\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\pt-BR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\pt-PT\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ru-RU\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\sk-SK\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\sl-SI\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\sv-FI\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\sv-SE\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\tr-TR\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\zh-CN\Zynga.ico
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\zh-CN\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\zh-HK\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\zh-MO\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\zh-SG\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\zh-TW\zyngagamesres.dll.mui
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\Zynga.ico
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ZyngaGames.dll
c:\program files (x86)\Splashtop\Splashtop Connect\plugins\zyngagames\ZyngaGamesRes.dll
c:\program files (x86)\Splashtop\Splashtop Connect\uninst.exe
c:\program files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
c:\program files (x86)\SweetIM
c:\program files (x86)\SweetIM\Communicator\mgcommon.dll
c:\program files (x86)\SweetIM\Communicator\mgcommunication.dll
c:\program files (x86)\SweetIM\Communicator\mgsimcommon.dll
c:\program files (x86)\SweetIM\Communicator\mgxml_wrapper.dll
c:\program files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
c:\programdata\InstallMate
c:\programdata\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\_Setup.dll
c:\programdata\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\_Setupx.dll
c:\programdata\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\20120526143619.log
c:\programdata\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\Setup.dat
c:\programdata\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\Setup.exe
c:\programdata\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\Setup.ico
c:\programdata\InstallMate\{16782E9C-E344-47BD-A045-B9BA79870632}\TsuDll.dll
c:\programdata\Premium
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SCBackService
-------\Service_WCUService_STC_FF
-------\Service_WCUService_STC_IE
-------\Service_SCBackService
-------\Service_WCUService_STC_FF
-------\Service_WCUService_STC_IE
.
.
((((((((((((((((((((((((( Files Created from 2012-05-17 to 2012-06-17 )))))))))))))))))))))))))))))))
.
.
2012-06-17 04:07 . 2012-06-17 04:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-06-16 19:19 . 2012-05-15 05:41 8955792 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{379C36D0-4E99-4AC0-B8A2-E6F86CB948BA}\mpengine.dll
2012-06-16 03:31 . 2012-06-16 03:48 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-06-16 03:31 . 2012-06-16 03:33 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2012-06-15 04:41 . 2012-06-15 04:41 476936 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2012-06-15 04:36 . 2012-06-15 04:36 544008 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-06-15 04:27 . 2012-06-15 04:27 -------- d-----w- c:\users\Tyler\AppData\Local\Secunia PSI
2012-06-15 04:27 . 2012-06-15 04:27 -------- d-----w- c:\program files (x86)\Secunia
2012-06-15 02:31 . 2012-06-15 02:31 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-15 01:24 . 2012-06-15 01:24 -------- d-----w- c:\users\Tyler\AppData\Local\VS Revo Group
2012-06-15 01:23 . 2009-12-30 15:21 31800 ----a-w- c:\windows\system32\drivers\revoflt.sys
2012-06-15 01:23 . 2012-06-15 01:23 -------- d-----w- c:\program files\VS Revo Group
2012-06-14 21:35 . 2003-02-03 00:06 153088 ----a-w- c:\windows\SysWow64\UNRAR3.dll
2012-06-14 21:35 . 2002-03-06 05:00 75264 ----a-w- c:\windows\SysWow64\unacev2.dll
2012-06-14 21:34 . 2012-06-14 21:34 -------- d-----w- c:\users\Tyler\AppData\Roaming\Malwarebytes
2012-06-14 21:34 . 2012-06-14 21:34 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-06-14 21:34 . 2012-06-14 21:34 -------- d-----w- c:\programdata\Malwarebytes
2012-06-14 21:34 . 2012-04-04 19:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-14 17:22 . 2012-06-14 17:22 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2012-06-14 00:34 . 2012-04-26 05:41 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-06-14 00:34 . 2012-04-26 05:41 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-06-14 00:34 . 2012-04-26 05:34 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-06-14 00:34 . 2012-05-04 11:06 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-06-14 00:34 . 2012-05-04 10:03 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-06-14 00:34 . 2012-05-04 10:03 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-06-14 00:34 . 2012-05-15 01:32 3146752 ----a-w- c:\windows\system32\win32k.sys
2012-06-14 00:34 . 2012-04-28 05:32 1112064 ----a-w- c:\windows\system32\rdpcorets.dll
2012-06-14 00:34 . 2012-04-28 03:55 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-12 15:29 . 2012-06-12 15:29 -------- d-----w- c:\program files (x86)\Common Files\Software Update Utility
2012-06-11 16:55 . 2012-06-11 16:56 -------- d-----w- c:\users\Tyler\AppData\Roaming\.platinum
2012-06-04 01:05 . 2012-06-04 01:05 -------- d-----w- c:\program files (x86)\iPod Computer Wizard
2012-06-03 16:25 . 2012-06-03 16:25 -------- d-----w- c:\program files\iTunes
2012-06-03 16:25 . 2012-06-03 16:25 -------- d-----w- c:\program files (x86)\iTunes
2012-06-03 16:25 . 2012-06-03 16:25 -------- d-----w- c:\program files\iPod
2012-05-18 23:24 . 2009-03-18 20:35 33856 ---ha-w- c:\windows\system32\hamachi.sys
2012-05-18 23:24 . 2012-05-18 23:24 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2012-05-18 23:24 . 2012-06-16 19:02 -------- d-----w- c:\users\Tyler\AppData\Local\LogMeIn Hamachi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-16 19:02 . 2011-12-27 02:03 25640 ----a-w- c:\windows\gdrv.sys
2012-06-15 04:41 . 2011-12-27 03:17 472840 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-06-15 04:36 . 2011-12-30 01:50 525576 ----a-w- c:\windows\system32\deployJava1.dll
2012-06-15 03:22 . 2011-12-27 02:03 30528 ----a-w- c:\windows\GVTDrv64.sys
2012-06-15 02:31 . 2011-12-28 06:56 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-30 11:35 . 2012-05-08 20:24 1918320 ----a-w- c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-16_18.56.53 )))))))))))))))))))))))))))))))))))))))))
.
- 2012-06-16 03:51 . 2012-06-16 18:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2012-06-16 03:51 . 2012-06-17 02:20 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2011-12-27 02:09 . 2012-06-16 18:37 41610 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2011-12-27 02:09 . 2012-06-16 19:03 41610 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-06-16 19:03 28180 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-12-27 02:04 . 2012-06-16 19:03 10358 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3304748398-3523269193-287244508-1000_UserData.bin
+ 2012-06-17 04:08 . 2012-06-17 04:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-06-16 18:56 . 2012-06-16 18:56 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-06-16 18:56 . 2012-06-16 18:56 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-06-17 04:08 . 2012-06-17 04:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 04:54 . 2012-06-16 18:35 294912 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-06-17 02:20 294912 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-12-27 19:56 . 2012-06-16 22:42 236070 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
- 2009-07-14 05:01 . 2012-06-16 18:37 278696 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-06-17 03:58 278696 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 04:54 . 2012-06-16 18:35 3653632 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-17 02:20 3653632 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-12-27 06:51 . 2012-06-17 03:58 4310028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3304748398-3523269193-287244508-1000-8192.dat
- 2011-12-27 06:51 . 2012-06-16 18:37 4310028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3304748398-3523269193-287244508-1000-8192.dat
- 2011-12-28 07:05 . 2012-06-16 03:49 1494684 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3304748398-3523269193-287244508-1000-12288.dat
+ 2011-12-28 07:05 . 2012-06-17 03:58 1494684 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3304748398-3523269193-287244508-1000-12288.dat
- 2009-07-14 04:54 . 2012-06-16 18:35 14417920 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-17 02:20 14417920 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Aim"="c:\program files (x86)\AIM\aim.exe" [2012-05-30 4331392]
"JumiController"="c:\program files (x86)\Jumi\jumi.exe" [2012-05-18 3581440]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2012-03-12 1242448]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-05-03 17355912]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-05-20 119152]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"RemoteX"="c:\program files (x86)\RemoteX\RemoteXUser.exe" [2011-02-14 185344]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-10 49208]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\Tyler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
NexDef Plug-in.lnk - c:\users\Tyler\AppData\Local\Autobahn\nexdef.exe [2011-8-11 15490560]
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2011-10-14 291896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
R2 __RemoteX__;RemoteX Server;c:\program files (x86)\RemoteX\RemoteX.exe [2011-02-14 271360]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 116648]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
R2 LicCtrlService;LicCtrl Service;c:\windows\runservice.exe [2011-12-29 2560]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe [2011-10-14 994360]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe [2011-10-14 399416]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-05-03 158856]
R2 Smart TimeLock;Smart TimeLock Service;c:\program files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
R2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dump_wmimmc;dump_wmimmc;c:\gamescampus\MLBDugoutHeroes\GameGuard\dump_wmimmc.sys [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 116648]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2012-06-15 30528]
R3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys [x]
R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 jumi;%Jumi%;c:\windows\system32\DRIVERS\jumi.sys [x]
S3 MEIx64;Intel® Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-06-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 20:15]
.
2012-06-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-25 20:15]
.
2012-06-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3304748398-3523269193-287244508-1000Core.job
- c:\users\Tyler\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-15 02:34]
.
2012-06-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3304748398-3523269193-287244508-1000UA.job
- c:\users\Tyler\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-15 02:34]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1d09c093-f71e-43c3-b948-19316cbd695e}"= "mscoree.dll" [2010-11-05 444752]
.
[HKEY_CLASSES_ROOT\CLSID\{1d09c093-f71e-43c3-b948-19316cbd695e}]
[HKEY_CLASSES_ROOT\tGBandObj.tGBandObjClass]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-07 11858536]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-21 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-21 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-21 416024]
"combofix"="c:\combofix\CF24080.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"RPMKickstart"="c:\program files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe" [2011-03-30 2552320]
"combofix"="c:\combofix\CF24080.3XE" [2010-11-20 345088]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - c:\program files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll
Wow6432Node-HKLM-Run-STCAgent - c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe
Wow6432Node-HKLM-Run-ZyngaGamesAgent - c:\program files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
Wow6432Node-HKLM-Run-Sweetpacks Communicator - c:\program files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-3304748398-3523269193-287244508-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-3304748398-3523269193-287244508-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-3304748398-3523269193-287244508-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E0E84BE1-6425-770A-B5A5-81642554FF03}*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \F3F0046F119EFA4F]
"1"=hex:97,5e,49,d3,7c,a0,18,18,10,c9,e3,e3,c1,ae,57,ed,c2,97,86,6a,a5,82,f8,
d5,42,54,3b,7e,24,3e,19,f8
"2"=hex:f1,df,16,de,80,08,0e,2a,d1,38,b5,6f,94,ca,dc,d2,b3,e8,d2,40,6c,6f,61,
5e,d2,5e,7f,21,14,b5,b2,29
"3"=hex:97,5e,49,d3,7c,a0,18,18,10,c9,e3,e3,c1,ae,57,ed,c2,97,86,6a,a5,82,f8,
d5,f2,55,76,c8,bc,53,92,25,3f,d1,b6,bc,00,35,73,43,96,90,79,f6,5b,97,35,47,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \F3F0046F119EFA4F\BB6E5071F4E6B2769BD4E4FACC553A99]
"1"=hex:09,d8,ec,22,15,54,e7,37,3d,5b,59,2d,b7,79,05,2e,dc,0a,71,44,dc,37,80,
ce,24,ad,19,19,d6,bf,9e,2f
"2"=hex:69,46,da,08,bb,5c,f4,0f
"3"=hex:cf,bc,f3,a1,ac,b3,0e,de,1b,dd,0e,a6,23,53,36,06,38,0d,e2,0c,b9,42,0c,
e6,9d,2b,b6,71,d6,e8,2f,5a,e6,73,9e,85,13,1e,4e,be,6a,12,b9,e3,74,7c,ce,68,\
"4"=hex:2f,ad,a2,e7,8a,bf,05,5e
"5"=hex:bf,e5,23,7b,b0,66,d6,fc,b8,e8,6b,a0,96,52,f7,32,80,09,8f,24,b7,b3,55,
1a,98,d1,47,16,02,43,61,1c,b9,d5,8f,2a,7b,81,b1,fb,95,22,f8,b3,2c,53,9d,ae,\
"6"=hex:bf,e5,23,7b,b0,66,d6,fc,bc,64,22,fb,7e,d3,39,3e,a3,00,33,13,c0,21,f4,
51,6c,4e,0c,96,e2,dd,ad,8a,b6,c4,05,e8,5a,bd,9a,e9,d4,1a,3d,68,9d,00,32,20
"7"=hex:85,bb,69,ad,52,49,47,61,50,80,55,ef,fa,b4,14,9a,04,b7,d6,59,f0,23,46,
cc,d3,ec,dd,49,40,98,41,b7,16,93,15,99,41,9a,8d,78,4a,2e,fb,89,b2,3d,70,79,\
"8"=hex:63,5a,d7,1b,b1,d4,18,46,35,af,4c,16,24,f5,39,bf,d4,77,c7,03,c8,2b,eb,
9c,bc,0c,2b,45,12,f8,f0,c6,02,69,f2,29,ac,16,90,ac
"9"=hex:81,20,8f,ab,28,6a,52,9c
"18"=hex:70,56,26,33,e3,20,f8,ab
"10"=hex:ef,01,3f,48,b8,d3,ab,86
"11"=hex:81,20,8f,ab,28,6a,52,9c
"12"=hex:81,20,8f,ab,28,6a,52,9c
"13"=hex:81,20,8f,ab,28,6a,52,9c
"14"=hex:81,20,8f,ab,28,6a,52,9c
"24"=hex:81,20,8f,ab,28,6a,52,9c
"26"=hex:81,20,8f,ab,28,6a,52,9c
"27"=hex:81,20,8f,ab,28,6a,52,9c
"19"=hex:81,20,8f,ab,28,6a,52,9c
"22"=hex:81,20,8f,ab,28,6a,52,9c
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\0c\03\1c\15&\02g"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-06-17 00:11:31 - machine was rebooted
ComboFix-quarantined-files.txt 2012-06-17 04:11
ComboFix2.txt 2012-06-16 18:59
.
Pre-Run: 892,159,787,008 bytes free
Post-Run: 892,126,437,376 bytes free
.
- - End Of File - - F4341EC44EE025478329D59DFD808DA1


My computer seems to be running normally again. I think I'm virus free! But I just want to make sure...




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users