I am so sorry again....i think i accidentally installed Yontoo, visual bee and deal ply...

"{5A6A1830-C447-4324-ACB7-556C969E7BD3}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5A9CD09D-11AD-48D1-AA92-0009C9172437}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5AACC3EF-78DD-4EC7-AEA4-7C470128FD7F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.186_1111\thunderliveud.exe |
"{5AD4B93E-2A64-477B-BD88-B6304821955E}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\xmpboot.exe |
"{5BF860D5-2660-41A8-B3D9-DFE7DF1E0DE7}" = dir=in | app=c:\program files\cyberlink\powerdirector11\pdr10.exe |
"{5C280C17-5FA7-4746-B8B6-C1BD7B5B4A24}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\fcminidownloader\minidownloader.exe |
"{5C5F7CC6-3FCA-47A6-9311-E529F1E89370}" = protocol=6 | dir=in | app=c:\windows\system32\pptvlauncher.exe |
"{5CD5E352-0ECE-46B3-BAD2-5B9F0BD4E3C9}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{5EBD2FAC-8998-43F3-8FFB-07AFA0654935}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qq\bin\txupd.exe |
"{6096343A-7A98-41AE-9A9C-10E786DEE141}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qzonemusic\qzonemusic.exe |
"{609D5E86-6533-4DE2-AAFF-C03F37594750}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqintl\bin\txupd.exe |
"{612F328A-55AA-4B14-96A2-C4906AEC6805}" = protocol=6 | dir=in | app=c:\program files (x86)\yourfiledownloader\yourfile.exe |
"{6135D49F-D42A-4D10-8CDD-3346FB3B9583}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{61615267-7EE3-4563-BBF5-0EA3021BE67E}" = protocol=6 | dir=in | app=c:\users\kitty tsang\appdata\roaming\dropbox\bin\dropbox.exe |
"{62064CAA-B9CD-4415-A1D6-76552BC6E375}" = protocol=17 | dir=in | app=c:\users\user\downloads\qvodsetup5.exe |
"{6261703B-9848-4F68-94B0-3A50F5CCFACA}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgdiagex.exe |
"{6289B46E-790A-4236-9992-478F36E07D82}" = protocol=17 | dir=in | app=e:\pps.tv\ppstream\ppsap.exe |
"{63825C0B-A2DA-4627-9A2E-0AC3112660CB}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{6486DE47-EF26-4F70-8D14-F11A3CB2491B}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\netmon\lsp_check.exe |
"{64B40F75-1BBE-4319-9CF2-01829B42E297}" = protocol=6 | dir=in | app=e:\pps.tv\ppstream\ppstream.exe |
"{65477BDE-C3D9-435D-86DA-AD7784DBC2FC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{65921BAD-2D01-44BC-980B-8063BC21B122}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{66230926-3776-45C2-A6C4-E1CD7641EB1F}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{676E613B-044A-4E9E-96A3-07F603EBF7BA}" = protocol=17 | dir=in | app=c:\program files (x86)\sweetim\communicator\sweetpacksupdatemanager.exe |
"{68327277-A7EB-4ACF-B5D3-62E6852C759D}" = protocol=17 | dir=in | app=c:\program files (x86)\ppstream\ppstream.exe |
"{683A566D-82E0-4E2F-8CD2-CDEC63B8F0EB}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{69C24320-C9B7-4F00-AFB4-0080B8EEC9C6}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xlbugreport.exe |
"{6A6A61B3-2C6B-447E-AF4C-B8147D7DF411}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{6B1DAAE7-10EE-4999-8B82-59B66EFFEB9E}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xmp.exe |
"{6BA0C557-BE7D-432D-944F-F85BCBA32574}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{6BAB2384-B4C3-4C45-AE9A-739F17287329}" = protocol=6 | dir=in | app=c:\program files (x86)\ppsgame\ppsgame.exe |
"{6C3DB079-3A22-471E-8387-A73A624B25EA}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{6C6B7712-03C8-4A28-8A53-7A752871674D}" = protocol=17 | dir=in | app=c:\windows\syswow64\msiexec.exe |
"{6C8E2718-6017-4642-B33A-280435242963}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{6CC500DC-389B-46D9-95DF-6DE24A6BB3CF}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\fcminidownloader\minidownloader.exe |
"{6EC9171D-3984-4ADD-AED4-BB36A5611D5A}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\bbinside\baidu-tb-asbar.exe |
"{6EF71D8C-1A6C-450B-8F17-1F3F13DFB129}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qq\bin\auclt.exe |
"{705F85B9-E8B4-426F-99EA-C0D023B9E632}" = protocol=17 | dir=in | app=c:\program files (x86)\kugou\kgmusic\kgservice.exe |
"{71622FB0-62A1-407F-BEBE-9A0609560BD1}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{7196E2D6-CEDB-4727-A4D1-FDD05AE2FCE1}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\xbrowser.exe |
"{72628323-B1A9-4F6F-B392-6B76ABD157BC}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{74EBF8E2-B48B-484C-BDE9-F690C8A4DF33}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{75B35ECF-AA2C-48E8-BB41-ABC8B5FF5D1D}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |
"{7687005B-90D1-4ABA-A430-87429630556F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xmp.exe |
"{778AB919-E555-497D-85EB-A49DF458C718}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\lanspeedviewer\speed_viewer_i.exe |
"{78EF978A-9233-4574-A82C-1F5CAFF629DE}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.139_1111\thunderplatform.exe |
"{79B8E018-14CE-4959-81AC-B34A9922AEBF}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{7B630227-29B2-4E22-AFD3-6E30C87CDCAA}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{7BD365E1-028B-4D02-94D0-F7591CE76754}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.186_1111\thunderplatform.exe |
"{7C032920-D450-4366-AE00-0A0337DAD4E6}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{7D4445E9-80AA-40FE-A2F0-2C0AB413A647}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |
"{7E8BCCFC-6CDB-4E9C-B6DD-6D1AFECDC4F8}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{7ECAB242-4974-4C17-929B-A60B4A83FA9A}" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\pplite\plugin\1.0.1.2906\plugininstaller.exe |
"{7ED82E08-C4AD-4038-BED3-75A9599004FA}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\netmon\net_monitor_i.exe |
"{7FFFB312-EBDB-47CE-9DA2-C5F952B07CE4}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{80136566-D3C3-4CA8-88D4-6D8EF6313032}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{80ADBB73-8F7F-44FA-8C5D-38798454B4A6}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{81C9D6D1-2BE5-4679-8B27-4C65E16771D8}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.186_1111\thunderplatform.exe |
"{82AB1CC9-C2CA-41E0-B72F-34EE3368B854}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{838742DD-A6A0-4E4A-ADC1-6F10125B3F3A}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qq\bin\qq.exe |
"{839085ED-D3CE-431C-9BCF-17A6D8B50B4E}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{86142BB1-F8AC-4E27-8282-0CD3B336697B}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{8674692E-AE11-494B-8ACA-1047D7E453E3}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xlbugreport.exe |
"{869CB387-C54E-4CCD-A11A-9FF2AAD9C909}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{86D58E2F-B556-421B-B376-FC25A1DA5173}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\lanspeedviewer\lsp_check.exe |
"{8707B0BB-53A0-4B94-B129-DE1170AD74FB}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{8722FBCD-E8E4-4F68-BACA-67108CF24AB4}" = protocol=17 | dir=in | app=c:\users\user\appdata\roaming\dropbox\bin\dropbox.exe |
"{880C336A-CF3C-4E4A-926B-F2A33A41A3A2}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\xmpboot.exe |
"{881E6111-DECA-4D54-9D7A-7C9E6FCCC5BA}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoupdateservice.exe |
"{886214B7-983B-4A8B-BDBF-CF3AC7CAE409}" = protocol=17 | dir=in | app=c:\program files (x86)\expressfiles\expressfiles.exe |
"{889661B9-8D05-4AAD-8BE8-77D384475A4E}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qq\bin\auclt.exe |
"{8927E29D-63BA-44EE-B1B1-3DDF8045FD3A}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{8934C17F-A44E-4326-B169-092A3CA478A1}" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\pplite\plugin\1.0.1.2148\plugininstaller.exe |
"{896C6418-42DC-45AA-B508-46EE1B7EA5ED}" = dir=in | app=c:\program files (x86)\baidu\baiduplayer\1.16.0.73\baidup2pservice.exe |
"{897015A7-0FAE-4D07-99D6-FA5A178A4F70}" = protocol=6 | dir=in | app=c:\program files (x86)\ppstream\ppstream.exe |
"{8A5ACC39-4065-4FC3-92A5-EB7DE4472636}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoconsole.exe |
"{8A607B03-C360-4E3C-A7CD-EABE8EA1F4D4}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\lanspeedviewer\speed_viewer_i.exe |
"{8ADBC026-6BCB-4DF1-A8C5-7BED772CF02F}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{8B3F5244-4D55-4C62-B94B-F1DDB68F2EB8}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{8B8343A6-B957-448A-85BA-492B685C30F0}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqintl\bin\auclt.exe |
"{8C662208-B17E-4C85-ACBA-5178ACF061BA}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{8D00A643-E7E5-48E3-AC17-C7BA6D9537CB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8FEEDC50-24D1-41C8-B003-CF98C490906D}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{905A108F-3892-4C31-8FA0-176B9C788E2A}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.139_1111\thunderplatform.exe |
"{917F5B89-1D26-4BC9-8ABF-ADC2847D47C7}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{9214FDA1-F9D4-4FBA-9EDA-381629696209}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{92DB6490-35DD-45CF-BDEE-B20B00BD482A}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe |
"{92F6B80A-900E-42CF-B8C9-7B30EA59529A}" = protocol=17 | dir=in | app=c:\program files (x86)\pplive\pptv\3.3.0.0061\crashreporter.exe |
"{95DCC927-8286-4C38-95F8-D60E6FACF2E3}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe |
"{97363715-30CA-46C8-8825-15C69CBAB548}" = protocol=17 | dir=in | app=c:\program files (x86)\yourfiledownloader\downloader.exe |
"{97DB6838-69A2-42B9-AD98-9F8F9E09EF16}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{98D4C282-6690-43B7-B874-0FF0CD9C368D}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qqmusicupdate.exe |
"{991CDC64-631B-483B-8C67-B6E6CD240247}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\xldoctor\7.2.10.3694_4\program\xldoctorui.exe |
"{9B00C845-ECE3-470B-A3AB-8AD37CF1AFEA}" = protocol=6 | dir=in | app=c:\program files (x86)\kugou\kgmusic\kgservice.exe |
"{9BABC383-2815-4BD0-9B4D-B64114B26B72}" = protocol=17 | dir=in | app=c:\program files (x86)\ppstream\ppsap.exe |
"{9C70A7D2-076E-40D6-BC97-E7EE9AECEB2F}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{9C9769B1-510E-4AEB-8539-648BDE3F2CF0}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{9DA8A80C-0539-4624-8DFC-6CBAA6FDCF66}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9DE3305B-772F-4D5A-8A5C-D5CE7D3A3B89}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{9FDAE7FF-9832-4F86-9733-8A97EC6CF275}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{A01E4B65-0C2D-4154-A5A1-ABDB7B7C0A01}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{A0FA4487-84BD-4220-A773-4381C686E4AD}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qqintl\bin\auclt.exe |
"{A2681594-CF69-4124-AAAE-0FFFB521729F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{A2FFD3D6-4E47-4C3C-9EE1-235606FEB7A1}" = protocol=6 | dir=in | app=c:\program files (x86)\expressfiles\expressfiles.exe |
"{A4C2F225-6CD4-4BF7-8242-40EF2735B938}" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\pplite\plugin\1.0.1.2148\plugininstaller.exe |
"{A53B241B-9F2E-4108-997F-D19450E07AD9}" = protocol=6 | dir=in | app=c:\program files (x86)\pplive\pptv\3.3.0.0061\ppliveu.exe |
"{A8976778-544E-4EE4-8483-6860BC49194E}" = protocol=17 | dir=in | app=c:\users\kitty tsang\appdata\roaming\dropbox\bin\dropbox.exe |
"{A9185272-F0D3-4F05-81E5-C80D7FC72748}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoupdateservice.exe |
"{AB2D5B4E-A9DC-403C-9646-3BDB633A7CA3}" = protocol=17 | dir=in | app=c:\program files\soluto\soluto.exe |
"{ABA925A7-1F23-44FC-B95B-60607758F53C}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqintl\bin\qq.exe |
"{ABFDE232-B242-47C7-B854-F2B5A30C7EE8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{AC5350C6-0424-4F28-9A84-1089861650C1}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{AD7609C6-5B39-4B00-A8E0-A2F066BEAE4B}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\panprocess.exe |
"{AE5C5F6E-9F0A-4679-B09D-8B151A5177DE}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{AFA42A03-2A1F-43CA-AC93-BCF0F9D43CDE}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{AFB57647-4C0A-4E19-AF41-8C09DFA9500B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{B213E4E6-C7D7-4485-B3A2-6975D5BAB307}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qqmusicie.exe |
"{B2217B9D-9A2B-427E-9811-66812A735423}" = protocol=17 | dir=in | app=c:\windows\system32\pptvlauncher.exe |
"{B2661CFE-1C67-420E-9E7A-B5E1D568C884}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qq\bin\setupex\qqsetupex.exe |
"{B5670949-A8E0-4A2E-8527-196409597719}" = protocol=17 | dir=in | app=c:\program files (x86)\funshion online\funshion\funshionupgrade.exe |
"{B5B2E10E-6212-43A0-B3E3-38A2D2AFB14E}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xlbugreport.exe |
"{B6D7BA9D-EF06-4ED8-A63F-743752AD4A93}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{B7AAE610-C886-41F8-9FBF-D063AD730226}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{B84E201F-EF52-45E8-B6CF-BDB8C8E0D03E}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\bbinside\baidu-tb-asbar.exe |
"{B8EE8446-0119-4FEC-8537-E1C9A5647BDF}" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\pplite\plugin\1.0.1.1717\plugininstaller.exe |
"{B93900C2-698D-4859-A270-38266A351427}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{BB6394CB-1958-4B89-AEC5-A32D12F1E820}" = protocol=6 | dir=out | app=system |
"{BC8DF74F-E283-489C-9CCB-C96CF38D25AB}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qqmusicupdate.exe |
"{BE0ED683-6896-4A71-B868-301E6BFAB068}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{C253BEEE-5218-495F-B178-A7D14B1CF59F}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{C39732DF-B7C8-4B42-B335-1654D611F8D0}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{C44182DC-F790-4B9E-9D8E-C30EEDA4D055}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xlbugreport.exe |
"{C5548EC5-B6E4-44BB-BC16-CFCB55080D2C}" = protocol=6 | dir=in | app=c:\program files (x86)\funshion online\funshion\funshionupgrade.exe |
"{C5C74959-B39E-4056-8120-7B474409F038}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |
"{C6D006A2-F6B8-4353-AD1C-BE377C8BFA92}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{C6E8785B-AB11-4529-BB8C-F0B59CFEF01A}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoservice.exe |
"{C72BA777-0AAE-47F9-9B33-93571EE4BCBF}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xlbugreport.exe |
"{C74DE64B-A431-49AF-BC54-80A7E63140C7}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{C7765E9C-8B0C-4505-A716-47EA98147BFA}" = protocol=17 | dir=in | app=c:\users\user\appdata\local\temp\qqpcdetector.exe |
"{C8519848-C179-46C7-9F71-82B5AB1117BD}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{C8C8943D-B5E5-4B8A-956B-A7F096BD6075}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\xlbugreport.exe |
"{C98EB57B-FE9D-4987-ACD2-6057654B4776}" = protocol=6 | dir=in | app=c:\users\user\appdata\local\temp\qqpcdetector.exe |
"{C9D17357-270C-4DDF-B220-B5392950A0C0}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{C9F2AB85-A2B3-4A8C-9978-31E4692C524A}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |
"{CA415951-CDD9-4619-851D-D7E84A86BE1C}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\netmon\net_monitor_i.exe |
"{CA45CAC1-10B9-43D4-8240-6EBD80EE1ABA}" = protocol=6 | dir=in | app=c:\windows\syswow64\msiexec.exe |
"{CA7EC176-B2D7-49F2-A1C9-95BDD61959FF}" = protocol=17 | dir=in | app=c:\program files\soluto\soluto.exe |
"{CAB68C97-61F1-4AF0-A834-F4CC89BCA156}" = protocol=17 | dir=in | app=c:\program files (x86)\yourfiledownloader\yourfile.exe |
"{CB3CAF4A-A5A6-4824-9F34-6B50C7EA09F6}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qq\bin\setupex\qqsetupex.exe |
"{CC606D5C-5EC1-4CBE-8EAA-4ACB656F8B31}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{CC7AA43A-DBDC-4E96-9B6D-4B352D2F1B59}" = protocol=17 | dir=in | app=c:\program files (x86)\expressfiles\expressdl.exe |
"{CCA10B32-1E80-4996-B203-D1CD1B6E911F}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qq\bin\qq.exe |
"{CD54C03C-6197-4ECE-B2C9-DEFCB63C3E93}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CF689ACE-6B6A-42BC-AC60-2DC7348F94C2}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{CFB67641-A836-477F-817E-620246D10324}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |
"{D02F6B15-031B-450D-AE1A-049AFF3DB4E9}" = protocol=6 | dir=in | app=c:\program files (x86)\ppstream\ppstream.exe |
"{D0F2B6A6-BD86-4566-8837-BDF4DFEC4950}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{D1620C44-D740-4CBD-BD9C-63A0C7548E1D}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qzonemusic\qzonemusic.exe |
"{D1C2C431-B8A4-4AAD-BB2A-9EE64BD2569E}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{D3E5D10A-9388-478B-9834-3840BE46A981}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{D50893C7-4EAD-48C3-AF75-E36E21CADDE8}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoupdateservice.exe |
"{D54EEE3B-1E00-4BD2-8963-9CA0370311CD}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{D7A932B5-CEAA-405C-B4C6-4E658BE29F9E}" = protocol=6 | dir=in | app=e:\pps.tv\ppstream\ppsap.exe |
"{D7E1C0FA-CE4A-42D0-BA1F-B82AB8B2FE5B}" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\pplite\plugin\1.0.1.2908\plugininstaller.exe |
"{D965171A-7DBC-42A6-834B-08586C4F17D9}" = protocol=6 | dir=in | app=c:\program files (x86)\kugou\kgmusic\kugou.exe |
"{DB6E8B18-A393-4C20-BD2F-31384F7CD59B}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgdiagex.exe |
"{DCC06383-F078-445A-A233-70FDC97CA8F6}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\thunder.exe |
"{DCD47DF8-41C3-46A5-9182-9E825DECDCDE}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{DCEAB985-85ED-4B98-B548-5B50AF9A1A4E}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"{DD1EB977-BF91-42D4-AD57-10E79D0DB294}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DDEFE78E-522B-4A24-A55D-41813B375170}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{DE252C28-FB76-4A27-9C3F-61C34E1F8373}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\tencent\qqdownload\107\tencentdl.exe |
"{DF48F1EB-AC1D-48C8-9EDE-288119399D57}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{E050F815-8A20-4F2C-A53B-C289350B02A4}" = protocol=6 | dir=in | app=c:\program files (x86)\yourfiledownloader\downloader.exe |
"{E1511289-0A2A-4910-845B-86136E3791F4}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqintl\bin\qq.exe |
"{E207F293-166F-4B6C-B291-A6C150BA7DA5}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E2EC9E0B-AB98-42E8-847A-483EF4EE4FBA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{E45904F4-88CC-4794-815B-EAE9C0DF9B71}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qq\bin\txupd.exe |
"{E4E441BB-6CE5-4642-8704-B57085E78517}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{E4E9BAAD-DCF5-425A-914A-286A86520D44}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |
"{E4FD93A2-91B5-4749-A658-1449C7BC3AD4}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{E5E32C2D-F9EE-4553-947B-7780BF649AD6}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\lanspeedviewer\lsp_check.exe |
"{E6B9A6A5-4AA9-45C1-A066-E05E571651F1}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qqmusic.exe |
"{E776AFB9-3EEA-455C-8BC4-2C9C1FBE0BC8}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{E7B98434-F6CD-48A1-84F9-ACD9EF287656}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
"{E7C56FEA-9BF2-40DC-BC22-967D0C47FAFA}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.186_1111\xlbugreport.exe |
"{E872F0E4-6D1C-424F-A1CD-48958123B21E}" = protocol=6 | dir=in | app=c:\program files (x86)\funshion online\funshion\funshionservice.exe |
"{E952E46B-6928-4CFF-9409-773989860C91}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{EB43CA6B-DB37-4C54-B8A3-AC0A772FCC83}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xmp.exe |
"{EC22D7B6-D8C5-4A54-98A8-723E19F70916}" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qzonemusic.exe |
"{ECA7E152-4099-4FBE-80D8-BD570AFD800E}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{ED0E0811-4B84-433C-AAF4-8EE145466B75}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\netmon\lsp_check.exe |
"{EDDD5A56-C400-4244-A7A3-B183B1C29F58}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderplatform.exe |
"{EE2C73DB-7FE1-42A7-B791-83F60807DC19}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qqintl\bin\qq.exe |
"{EF26AC90-7182-49BF-879F-8FAA3DC3F424}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{EFFEF850-96D5-4BA8-9ACC-D81396615C52}" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qqmusic\qzonemusic.exe |
"{F05836DC-B080-4DA6-9B52-4B37F244ECD9}" = protocol=17 | dir=in | app=c:\program files\soluto\solutoservice.exe |
"{F1126C4D-6B24-4226-97C3-CBFC47A974F2}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{F153DF0D-6806-4C30-B165-200A3FAA2186}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{F20BACFB-80CD-4AFE-A927-8C2E90A5B8D7}" = dir=in | app=c:\program files (x86)\intel corporation\intel wireless display\widiapp.exe |
"{F332B918-6D5F-4778-8AAE-F263E6667B9F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{F3374A27-5777-4C0D-8DA4-B5714A00E2A4}" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\pplite\plugin\1.0.1.2906\plugininstaller.exe |
"{F3C6639A-2E74-46E5-BA53-C19F98A0AA29}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\kankanlive.exe |
"{F47558F5-F1AF-4057-A802-28FAA41141B2}" = dir=in | app=c:\programdata\baidu\baiduplayer\bdupdate.exe |
"{F608E2EB-482D-4267-8FCD-0143DB45A887}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"{F64786AF-2EA0-4AB7-83E2-67487E599987}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\xbrowser.exe |
"{F80547A4-AFBF-4955-9462-DA2FAC17DCDA}" = protocol=6 | dir=in | app=c:\program files\soluto\solutoconsole.exe |
"{F95337D8-9B5B-4286-8D94-C3294CACF9C4}" = dir=in | app=c:\program files (x86)\baidu\baiduplayer\1.16.0.73\statreport.exe |
"{F981BB35-30C9-4EB8-8CF6-608313A0851A}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\thunderexternal\thunderplatform.exe |
"{F9F91BC8-C7A9-4ADE-A3FA-05E3D6C25CBB}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe |
"{FC34EDE6-762F-4B99-8F59-DF7410A6B1FB}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{FD2365BC-935C-49AD-8B0B-F4999A13D75A}" = dir=in | app=c:\program files (x86)\baidu\baiduplayer\1.16.0.73\baiduplayer.exe |
"{FEDBFE9F-A653-43AF-A07F-F327FE1ED44C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{FEE202FF-BF34-411D-86B8-B852867A9569}" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\thunderliveud.exe |
"{FF3E2959-5E28-4003-9CF6-C442677AFDAA}" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\xmp\program\xlbugreport.exe |
"TCP Query User{17F18BC0-846B-444D-970B-130B3EF18E98}C:\program files (x86)\kugou\kgmusic\kgservice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\kugou\kgmusic\kgservice.exe |
"TCP Query User{23A55C00-8B09-4997-8C2D-36571CC5FF2F}C:\program files (x86)\kugou2012\kugou.exe" = protocol=6 | dir=in | app=c:\program files (x86)\kugou2012\kugou.exe |
"TCP Query User{2EA0EF72-C00C-44A1-ACBB-67BEE4E7D9C8}C:\program files (x86)\thunder network\thunder\program\thunder.exe" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\thunder.exe |
"TCP Query User{2FB19E10-F454-412F-B52E-5CEDE016BD63}C:\program files (x86)\pplive\pptv\pplive.exe" = protocol=6 | dir=in | app=c:\program files (x86)\pplive\pptv\pplive.exe |
"TCP Query User{300A436C-4854-4C63-97A5-7EF70BC3575E}C:\users\kitty tsang\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\kitty tsang\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{334C0087-AE00-41E1-B0E7-A2CB61780472}C:\program files (x86)\duowan\yy-4\yy.exe" = protocol=6 | dir=in | app=c:\program files (x86)\duowan\yy-4\yy.exe |
"TCP Query User{39AB008F-3CE3-4050-8857-E7D382883186}C:\program files (x86)\kugou2012\kugou.exe" = protocol=6 | dir=in | app=c:\program files (x86)\kugou2012\kugou.exe |
"TCP Query User{4D233EEB-F5E6-4CAF-B510-1DEE224C7972}C:\program files (x86)\qvodplayer\qvodplayer.exe" = protocol=6 | dir=in | app=c:\program files (x86)\qvodplayer\qvodplayer.exe |
"TCP Query User{5715669D-2346-42C4-8079-3D7D843C62EA}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{59A05AF3-AB0D-4FD1-89B7-EC3DE205BF7C}C:\program files (x86)\thunder network\thunder\program\thunder.exe" = protocol=6 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\thunder.exe |
"TCP Query User{5BCD2B0F-ECB1-40CF-91A5-2D5ADEE8CFFE}C:\program files (x86)\duowan\yy-4\4.13.0.3\yy.exe" = protocol=6 | dir=in | app=c:\program files (x86)\duowan\yy-4\4.13.0.3\yy.exe |
"TCP Query User{6AA66FFF-5351-4F47-B45B-4F8BB0C80705}C:\program files (x86)\pplive\pptv\pplive.exe" = protocol=6 | dir=in | app=c:\program files (x86)\pplive\pptv\pplive.exe |
"TCP Query User{7943309E-2FEA-4F8C-BBF7-5640D31C3405}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{9E7AD84D-617F-44D8-A262-560DF1D4C4A9}C:\program files (x86)\tencent\qq\bin\qq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tencent\qq\bin\qq.exe |
"TCP Query User{B31D504F-C878-47A7-967A-C48D60DBA35C}C:\program files (x86)\qvodplayer\qvodterminal.exe" = protocol=6 | dir=in | app=c:\program files (x86)\qvodplayer\qvodterminal.exe |
"TCP Query User{B71DFD92-A333-410D-B995-58A50638873D}C:\program files (x86)\common files\pplivenetwork\ppap.exe" = protocol=6 | dir=in | app=c:\program files (x86)\common files\pplivenetwork\ppap.exe |
"TCP Query User{BFDD73CC-F5F0-44EA-B1DA-8868B30E0EE7}C:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"TCP Query User{DA98F181-C592-4A62-9F40-1EF47AA39C8B}C:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.116_1111\thunderplatform.exe" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.116_1111\thunderplatform.exe |
"TCP Query User{DDFC1107-2E1A-49A8-9C3B-E94A254FC7E2}C:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.130_1111\thunderplatform.exe" = protocol=6 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.130_1111\thunderplatform.exe |
"TCP Query User{E4372A12-B71A-40FB-8FAC-08AA7F068062}C:\program files (x86)\duowan\yy-4\4.11.0.3\yy.exe" = protocol=6 | dir=in | app=c:\program files (x86)\duowan\yy-4\4.11.0.3\yy.exe |
"TCP Query User{EFA83F91-FB5F-4FA2-9501-EDA68288E763}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"TCP Query User{F5C64CF0-6610-47B3-A87C-5651AA4514A9}C:\program files (x86)\common files\pplivenetwork\ppap.exe" = protocol=6 | dir=in | app=c:\program files (x86)\common files\pplivenetwork\ppap.exe |
"UDP Query User{2C480183-0B25-41E7-A0D6-FF6D0EF6BD15}C:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\kankan\thunderservicelite.exe |
"UDP Query User{2CA8D24B-59BF-4E2B-9A87-BE29FD6636C4}C:\program files (x86)\duowan\yy-4\yy.exe" = protocol=17 | dir=in | app=c:\program files (x86)\duowan\yy-4\yy.exe |
"UDP Query User{2D320708-3D5C-4437-BEC3-16F4E86BCCE6}C:\program files (x86)\kugou2012\kugou.exe" = protocol=17 | dir=in | app=c:\program files (x86)\kugou2012\kugou.exe |
"UDP Query User{4527BE3B-5D61-4880-8F43-B204EC820554}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{56DA49AF-CE4F-4D99-BFE6-4CB8274F37C3}C:\program files (x86)\qvodplayer\qvodplayer.exe" = protocol=17 | dir=in | app=c:\program files (x86)\qvodplayer\qvodplayer.exe |
"UDP Query User{611E8604-BC6F-4FA0-8661-F5A2EA8ACCB4}C:\program files (x86)\thunder network\thunder\program\thunder.exe" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\thunder.exe |
"UDP Query User{759F145A-5AF8-42DC-A7F9-71D91E1F404C}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{77D24FFC-F2DE-4EC2-9D8B-992165C65ADF}C:\program files (x86)\pplive\pptv\pplive.exe" = protocol=17 | dir=in | app=c:\program files (x86)\pplive\pptv\pplive.exe |
"UDP Query User{85C629C4-2C7A-4765-970C-E754EA14F796}C:\program files (x86)\kugou\kgmusic\kgservice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\kugou\kgmusic\kgservice.exe |
"UDP Query User{86B0AB76-740D-4247-99E6-DEA53F46B360}C:\program files (x86)\thunder network\thunder\program\thunder.exe" = protocol=17 | dir=in | app=c:\program files (x86)\thunder network\thunder\program\thunder.exe |
"UDP Query User{881D7667-50CC-4A32-8C1A-B49A0C41683D}C:\program files (x86)\tencent\qq\bin\qq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tencent\qq\bin\qq.exe |
"UDP Query User{8CB5C85B-EBC5-480B-970B-EEDDD02F60DF}C:\users\kitty tsang\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\kitty tsang\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{92284085-F350-46F9-9B08-7E4ECE7F83BB}C:\program files (x86)\common files\pplivenetwork\ppap.exe" = protocol=17 | dir=in | app=c:\program files (x86)\common files\pplivenetwork\ppap.exe |
"UDP Query User{9627A4DC-016A-4D23-B466-A0CA5A7C3A50}C:\program files (x86)\qvodplayer\qvodterminal.exe" = protocol=17 | dir=in | app=c:\program files (x86)\qvodplayer\qvodterminal.exe |
"UDP Query User{9C4D4448-D017-4371-98B1-4FE4037D6652}C:\program files (x86)\kugou2012\kugou.exe" = protocol=17 | dir=in | app=c:\program files (x86)\kugou2012\kugou.exe |
"UDP Query User{A78C15C8-6989-42B3-AB70-80C56FB73E67}C:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.130_1111\thunderplatform.exe" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.130_1111\thunderplatform.exe |
"UDP Query User{B2DBF326-15D5-4CCF-8160-54FBABB746E5}C:\program files (x86)\duowan\yy-4\4.13.0.3\yy.exe" = protocol=17 | dir=in | app=c:\program files (x86)\duowan\yy-4\4.13.0.3\yy.exe |
"UDP Query User{B39EAFB7-68E6-4C11-8B42-E6A912ECE8C7}C:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.116_1111\thunderplatform.exe" = protocol=17 | dir=in | app=c:\program files (x86)\common files\thunder network\tp\ver1\1.1.2.116_1111\thunderplatform.exe |
"UDP Query User{DE094758-DA11-484F-95E5-5120423AB118}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{DF08C813-A087-4E39-97C7-D556F955B167}C:\program files (x86)\common files\pplivenetwork\ppap.exe" = protocol=17 | dir=in | app=c:\program files (x86)\common files\pplivenetwork\ppap.exe |
"UDP Query User{F065BC8A-97B2-452F-A08F-6BACBBE19C23}C:\program files (x86)\duowan\yy-4\4.11.0.3\yy.exe" = protocol=17 | dir=in | app=c:\program files (x86)\duowan\yy-4\4.11.0.3\yy.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{058EB68D-8F07-4E07-BD3B-B97D18E092F0}" = AVG 2013
"{0E5D76AD-A3FB-48D5-8400-8903B10317D3}" = iTunes
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{206BD2C5-DE08-4577-A0D7-D441A79D5A3A}" = Windows Live Remote Client Resources
"{21B133D6-5979-47F0-BE1C-F6A6B304693F}" = Visual Studio 2010 x64 Redistributables
"{26A24AE4-039D-4CA4-87B4-2F86416031FF}" = Java(TM) 6 Update 31 (64-bit)
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display
"{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System
"{4A6CD9D9-3252-4122-8F87-CA4D5B00BB65}" = Soluto
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{502275B0-3DA3-44D8-8702-066525CAAE98}" = AVG 2013
"{551F492A-01B0-4DC4-866F-875EC4EDC0A8}" = CyberLink PowerDirector 11
"{57DD35E9-D9BB-4089-BB05-EF933C586CB3}" = Broadcom InConcert Maestro
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{88C6A6D9-324C-46E8-BA87-563D14021442}_is1" = ThinkVantage Communications Utility
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-0028-0404-1000-0000000FF1CE}" = Microsoft Office IME (Chinese (Traditional)) 2010
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0404-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Chinese (Traditional)) 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-002A-040C-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (French) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{AE91E0F3-C49A-4EF4-8B98-A07BD409EB90}" = Windows Live Remote Service Resources
"{AF162E20-417F-4946-A06D-65734984957F}" = Intel(R) PROSet/Wireless WiFi Software
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{C6C9D5F7-630C-4125-8C4E-94AF77C1896E}" = ThinkPad Bluetooth with Enhanced Data Rate Software
"{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}" = Apple Mobile Device Support
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E224B44B-B5EB-4af3-A80A-A255358E241A}_is1" = ThinkVantage AutoLock
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"22AF3CC91FBC5231DD5CB8903F03E2AF3E97ADDF" = Windows Driver Package - Realtek (RTL8167) Net (12/06/2010 7.035.1206.2010)
"2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB" = Windows 驅動程式封裝 - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0)
"466E9B20D871055D6D3CDA2CDD1D355E978A61AF" = Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11)
"73C6BE3E3B6FC5418F2B47E6C75F6C8F9552DC12" = Windows Driver Package - Intel (iaStor) hdc (11/06/2010 10.1.0.1008)
"77A943AB876C131591E0EA5DB6AB08D89EE2EA9E" = Windows Driver Package - Synaptics (SynTP) Mouse (02/17/2011 15.2.14.0)
"AVG" = AVG 2013
"CNXT_AUDIO_HDA" = Conexant HD Audio
"DisableAMTPopup" = Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7
"EnablePS" = Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7
"LENOVO.SMIIF" = Lenovo System Interface Driver
"LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"OnScreenDisplay" = On Screen Display
"PC-Doctor for Windows" = Lenovo ThinkVantage Toolbox
"Power Management Driver" = ThinkPad Power Management Driver
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = ThinkPad UltraNav Driver
"WinRAR archiver" = WinRAR 4.00 (64 位元)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{000F2A10-9CDF-47BF-9CF2-9AC87567B433}" = Windows Live Photo Common
"{03241D8D-2217-42F7-9FCB-6A68D141C14D}" = Windows Live 软件包
"{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}" = 騰訊QQ2012
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{10EF35CA-C694-42DD-AA45-0585135ABD31}_is1" = 蹄僩秞氈2012
"{13F59938-C595-479C-B479-F171AB9AF64F}" = Lenovo User Guide
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YTD Video Downloader 3.9
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{25C64847-B900-48AD-A164-1B4F9B774650}" = System Update
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 39
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{2CEDEB33-4931-48B1-8010-20618772B58E}" = Sage Simply Accounting 2012
"{2D49C296-BCCA-4800-BAF6-A0269EBDCF74}" = Windows Live Messenger
"{317D56AC-0DB3-48F5-929A-42032DAC9AD7}" = Windows Live Writer
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{368BEC2C-B7A2-4762-9213-2D8465D533CA}" = Windows Live UX Platform Language Pack
"{3CA54984-A14B-42FE-9FF1-7EA90151D725}" = Tencent QQ
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}" = Create Recovery Media
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{588CE0C0-860B-49A8-AFCF-3C69465B345F}" = Windows Live Mesh
"{5A3F6A80-7913-475E-8B96-477A952CFA43}" = SupportSoft Assisted Service
"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer
"{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7115EEBC-DA7B-434C-B81C-EA5B26EA9A94}" = Windows Live Writer Resources
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7177EE4E-3D1D-4F45-85B5-B93DC758BA0B}" = OLYMPUS Viewer 2
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{753F0A72-59C3-41CE-A36A-F2DF2079275C}" = Windows Live Mail
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7B982EBD-D017-4527-BF1A-FC489EC6B100}" = Windows Live 照片库
"{7F061FA8-5A87-4758-876B-17EE28B358D0}" = Messenger 浏览器插件
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}" = Olympus ib
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E537894-A559-4D60-B3CB-F4485E3D24E3}" = ThinkVantage Access Connections
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0404-0000-0000000FF1CE}" = Microsoft Office Access MUI (Chinese (Traditional)) 2010
"{90140000-0015-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2010
"{90140000-0015-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0404-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Chinese (Traditional)) 2010
"{90140000-0016-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2010
"{90140000-0016-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0017-0404-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (Chinese (Traditional)) 2010
"{90140000-0017-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{D57FE800-0DDA-4DD9-99F5-5DEEBAEAD41E}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0017-040C-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (French) 2010
"{90140000-0017-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{62BC8863-A303-4CB9-B1FB-446642BE1938}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0018-0404-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2010
"{90140000-0018-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2010
"{90140000-0018-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0404-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Chinese (Traditional)) 2010
"{90140000-0019-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2010
"{90140000-0019-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0404-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Chinese (Traditional)) 2010
"{90140000-001A-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2010
"{90140000-001A-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0404-0000-0000000FF1CE}" = Microsoft Office Word MUI (Chinese (Traditional)) 2010
"{90140000-001B-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2010
"{90140000-001B-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2010
"{90140000-001F-0401-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{1A43C155-3DDA-43C9-92C5-0E7D0B2B156D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0404-0000-0000000FF1CE}" = Microsoft Office Proof (Chinese (Traditional)) 2010
"{90140000-001F-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{B87E50FB-B8F9-4B81-8D63-F5A3C5A330B3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2010
"{90140000-001F-0413-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{5072FEA2-862C-4BF0-9654-CB0DCBE2BE28}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0028-0404-0000-0000000FF1CE}" = Microsoft Office IME (Chinese (Traditional)) 2010
"{90140000-0028-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{3ECE53A5-4BA5-49EA-828F-FD071F2652F0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0028-0404-1000-0000000FF1CE}_Office14.OMUI.zh-tw_{51739025-3F28-46D2-9BB2-4E2A130C8C4C}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0404-1000-0000000FF1CE}_Office14.OMUI.zh-tw_{B8238131-3761-4A88-98B5-2356DF5B0A71}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-040C-1000-0000000FF1CE}_Office14.OMUI.fr-fr_{0CCCD9C7-637C-41CA-A293-6E9992109B09}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0404-0000-0000000FF1CE}" = Microsoft Office Proofing (Chinese (Traditional)) 2010
"{90140000-002C-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{C82D6AFC-1F97-4F03-8A8A-564D647E483E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2010
"{90140000-002C-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C8E4AA87-3E5A-4C70-8CB7-43FE25C99B74}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0404-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Chinese (Traditional)) 2010
"{90140000-0044-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2010
"{90140000-0044-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0404-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Chinese (Traditional)) 2010
"{90140000-006E-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{A7F0BFAF-D706-40CD-9C1C-4B1809614797}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2010
"{90140000-006E-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{7C5C7E8C-F6D2-43AC-93A4-89E4FF7367E6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0404-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Chinese (Traditional)) 2010
"{90140000-00A1-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2010
"{90140000-00A1-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0404-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Chinese (Traditional)) 2010
"{90140000-00BA-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{70C51D0C-D8E7-488A-8205-33FF4E05D543}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-040C-0000-0000000FF1CE}" = Microsoft Office Groove MUI (French) 2010
"{90140000-00BA-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0100-0404-0000-0000000FF1CE}" = Microsoft Office O MUI (Chinese (Traditional)) 2010
"{90140000-0100-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{685AA8C6-3D8E-475A-A48D-3733F914C8EB}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0100-040C-0000-0000000FF1CE}" = Microsoft Office O MUI (French) 2010
"{90140000-0100-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{C929DDD6-AD73-4251-B988-83FF2835FCF8}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0101-0404-0000-0000000FF1CE}" = Microsoft Office X MUI (Chinese (Traditional)) 2010
"{90140000-0101-0404-0000-0000000FF1CE}_Office14.OMUI.zh-tw_{257A4FD1-228B-4E6E-9F9E-FDBB899A8FD6}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0101-040C-0000-0000000FF1CE}" = Microsoft Office X MUI (French) 2010
"{90140000-0101-040C-0000-0000000FF1CE}_Office14.OMUI.fr-fr_{E5E8A3C4-3429-431F-BCCF-5AD753B3A526}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{903EDF14-4E28-4463-AA5E-4AEE71C0263B}" = Windows Live Movie Maker
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{95120000-003F-0409-0000-0000000FF1CE}" = Microsoft Office Excel Viewer
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CA0DEE4-E84B-466F-9B96-FC255F3A929F}" = Integrated Camera TWAIN
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A617953D-210A-4523-B63B-0E34D5C93A27}" = YTD Toolbar v6.7
"{A68C62E8-B243-4777-89BB-12173DFA1D45}" = OLYMPUS Digital Camera Updater
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}" = one2free Next G Connection Manager
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1028-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Chinese Traditional
"{AC76BA86-7AD7-2447-0000-A00000000003}" = Chinese Simplified Fonts Support For Adobe Reader X
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}" = RealDownloader
"{B2CA6F37-1602-4823-81B5-0384B6888AA6}" = Integrated Camera Driver Installer Package Ver.1.1.0.1147
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6F1E738-7F1A-405B-B5EE-AFB001D92CA7}" = Nokia Internet Modem
"{BAEE89D5-6E87-4F89-9603-A1C100479181}" = Windows Live Messenger
"{C01A86F5-56E7-101F-9BC9-E3F1025EB779}" = Intel(R) Identity Protection Technology 1.1.2.0
"{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C83D5AA1-6A1F-4102-8F7F-C0230DD31FC0}" = RapidBoot
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple 應用程式支援
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF088261-BC81-4FB9-9BA0-7B5B9602D01A}" = Messenger 分享元件
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}" = ThinkPad Power Manager
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2B53C96-C9FC-4FC3-8324-1BCE50DEA7E7}" = QuickBooks
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{EB61B60D-1443-41FA-BBD7-BCD8217551B7}" = QuickBooks Premier Edition 2010
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F84906ED-BB54-4889-B131-FED9C9056FC8}" = Intel(R) Wireless Display
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F929096B-54A0-4C5C-B125-1E7EB1917412}" = MySQL Connector/ODBC 3.51
"{F992409C-9D10-4AE2-BAEB-B5409AD3785E}" = 用于远程连接的 Windows Live Mesh ActiveX 控件(简体中文)
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}" = Message Center Plus
"{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}" = Lenovo Warranty Information
"{FE041B02-234C-4AAA-9511-80DF6482A458}" = RICOH Media Driver v2.10.18.02
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"BaiduPlayer" = 百度影音1.16.0.73
"Duplicate Cleaner" = Duplicate Cleaner 2.0.6
"Eusing Free Registry Cleaner" = Eusing Free Registry Cleaner
"FreeFixer1.02" = FreeFixer
"Google Chrome" = Google Chrome
"InstallShield_{2CEDEB33-4931-48B1-8010-20618772B58E}" = Sage Simply Accounting 2012
"InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}" = CyberLink PowerDirector 11
"InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}" = Olympus ib
"InstallShield_{C83D5AA1-6A1F-4102-8F7F-C0230DD31FC0}" = RapidBoot
"jZip" = jZip
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.2.0 (Full)
"Lenovo Welcome_is1" = Lenovo Welcome
"Logon Loader" = Logon Loader 3.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware 版本 1.70.0.1100
"NirSoft BlueScreenView" = NirSoft BlueScreenView
"NSS" = Norton Security Scan
"Office14.OMUI.fr-fr" = Microsoft Office Language Pack 2010 - French/Français
"Office14.OMUI.zh-tw" = Microsoft Office Language Pack 2010 - Chinese (Traditional)/中文(繁體)
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Picasa 3" = Picasa 3
"PPLive" = PPTV厙釐萇弝 V3.3.0.0061
"PPSGame" = PPSGame V1.0.1.452
"PPStream" = PPStream V2.7.0.1499 Final
"QQMusic" = QQ音乐8.4
"RealPlayer 16.0" = RealPlayer
"The KMPlayer" = The KMPlayer (remove only)
"thunder_is1" = 捃濘7
"UN070618" = BUFFALO TurboUSB for FLASH/HDD
"WinLiveSuite" = Windows Live 程式集
"WinRAR archiver" = WinRAR 4.00 (32 位元)
"YInstHelper" = Yahoo! Install Manager
"Youtube Downloader HD_is1" = Youtube Downloader HD v. 2.9.4
"Youtube Music Downloader_is1" = Youtube Music Downloader V3.8.3
"Youtube to MP3 Converter_is1" = Youtube to MP3 Converter v. 1.4
"迅雷看看高清播放组件" = 迅雷看看高清播放组件
"迅雷看看播放器" = 迅雷看看播放器

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2354949678-1773501639-2422343938-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"VisualBee for Microsoft PowerPoint" = VisualBee for Microsoft PowerPoint

========== Last 20 Event Log Errors ==========

[ Lenovo-Message Center Plus/Admin Events ]
Error - 31/8/2011 6:13:55 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = 找不到檔案 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\Messages\MCPToLTT_ROW\download_1.ico'。
-> Exception message: 找不到檔案 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\Messages\MCPToLTT_ROW\download_1.ico'。

Error - 21/4/2012 3:48:33 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = 並未將物件參考設定為物件的執行個體 -> Exception message: 並未將物件參考設定為物件的執行個體

Error - 7/6/2012 16:17:20 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = IOException -> Exception message: 由於另一個處理序正在使用檔案 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\LocalRepository.bin'，所以無法存取該檔案。

Error - 7/6/2012 16:17:24 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = Exception -> Exception message: 由於另一個處理序正在使用檔案 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\LocalRepository.bin'，所以無法存取該檔案。

Error - 7/6/2012 21:44:58 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = 找不到路徑 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\Messages\SeedDB\SeedDB.tag'
的一部分。 -> Exception message: 找不到路徑 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\Messages\SeedDB\SeedDB.tag'
的一部分。

Error - 15/10/2012 18:25:14 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = IOException -> Exception message: 由於另一個處理序正在使用檔案 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\LocalRepository.bin'，所以無法存取該檔案。

Error - 15/10/2012 18:26:04 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = Exception -> Exception message: 由於另一個處理序正在使用檔案 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\LocalRepository.bin'，所以無法存取該檔案。

Error - 15/10/2012 22:25:30 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = 找不到路徑 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\Messages\SeedDB\SeedDB.tag'
的一部分。 -> Exception message: 找不到路徑 'C:\ProgramData\Lenovo\MessageCenterPlus\LocalRepository\Messages\SeedDB\SeedDB.tag'
的一部分。

Error - 9/12/2012 1:22:46 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = 並未將物件參考設定為物件的執行個體 -> Exception message: 並未將物件參考設定為物件的執行個體

Error - 10/1/2013 5:12:36 | Computer Name = user-THINK | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = 並未將物件參考設定為物件的執行個體 -> Exception message: 並未將物件參考設定為物件的執行個體


< End of report >

OTL logfile created on: 8/2/2013 18:29:41 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kitty Tsang\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C04 | Country: 香港特別行政區 | Language: ZHH | Date Format: d/M/yyyy

3.91 Gb Total Physical Memory | 2.13 Gb Available Physical Memory | 54.38% Memory free
7.82 Gb Paging File | 5.81 Gb Available in Paging File | 74.22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 448.96 Gb Total Space | 154.93 Gb Free Space | 34.51% Space Free | Partition Type: NTFS
Drive H: | 122.24 Mb Total Space | 119.76 Mb Free Space | 97.97% Space Free | Partition Type: FAT
Drive Q: | 15.62 Gb Total Space | 0.00 Gb Free Space | 0.01% Space Free | Partition Type: NTFS

Computer Name: USER-THINK | User Name: Kitty Tsang | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/02/08 16:28:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kitty Tsang\Desktop\OTL.exe
PRC - [2013/02/08 15:45:42 | 000,547,275 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Kitty Tsang\Desktop\JRT.exe
PRC - [2013/01/31 10:38:54 | 003,289,208 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2013/01/24 10:02:29 | 000,945,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe
PRC - [2012/12/24 23:31:28 | 000,251,896 | ---- | M] (PPLive Corporation) -- C:\Program Files (x86)\Common Files\PPLiveNetwork\PPAP.exe
PRC - [2012/12/21 20:39:35 | 000,295,072 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2012/12/18 09:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/12/11 03:52:44 | 003,147,384 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
PRC - [2012/11/29 20:31:04 | 000,038,608 | ---- | M] () -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
PRC - [2012/11/15 23:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
PRC - [2012/10/22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
PRC - [2012/09/28 09:25:56 | 000,586,904 | ---- | M] (PandoraTV) -- C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
PRC - [2012/09/28 09:25:54 | 000,625,304 | ---- | M] (Pandora.TV) -- C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
PRC - [2012/04/25 09:36:36 | 002,388,336 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Safari\Safari.exe
PRC - [2012/04/24 19:18:16 | 000,014,184 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
PRC - [2011/12/21 11:00:00 | 000,099,656 | ---- | M] (Sage) -- C:\Program Files (x86)\winsim\ConnectionManager\Simply.SystemTrayIcon.exe
PRC - [2011/12/21 11:00:00 | 000,021,320 | ---- | M] (Sage) -- C:\Program Files (x86)\winsim\ConnectionManager\SimplyConnectionManager.exe
PRC - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
PRC - [2011/02/21 22:19:12 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2011/02/21 22:19:08 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2011/02/03 13:44:00 | 000,057,344 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
PRC - [2011/01/27 15:30:20 | 000,059,240 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
PRC - [2011/01/27 15:30:18 | 000,041,320 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
PRC - [2011/01/27 15:29:32 | 000,040,808 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe
PRC - [2011/01/16 22:58:42 | 000,267,624 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
PRC - [2011/01/07 11:28:42 | 000,446,592 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\SysWOW64\SASrv.exe
PRC - [2010/12/27 05:56:16 | 000,361,832 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
PRC - [2010/12/27 05:56:04 | 000,431,464 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\ACTray.exe
PRC - [2010/12/27 05:56:00 | 000,263,528 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
PRC - [2010/12/27 05:55:58 | 000,124,264 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
PRC - [2010/12/16 21:36:18 | 000,281,448 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe
PRC - [2010/12/01 22:55:56 | 000,064,440 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
PRC - [2010/11/30 03:08:06 | 000,138,584 | ---- | M] () -- C:\Program Files (x86)\one2free Next G Connection Manager\UIExec.exe
PRC - [2010/11/25 11:51:34 | 000,028,672 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe
PRC - [2010/11/24 02:34:26 | 000,045,496 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe
PRC - [2010/11/20 07:17:00 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cmd.exe
PRC - [2010/09/30 10:47:44 | 000,093,360 | ---- | M] (OLYMPUS IMAGING CORP.) -- C:\Program Files (x86)\OLYMPUS\ib\olycamdetect.exe
PRC - [2010/05/06 13:09:52 | 000,140,288 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\NokiaInternetModem_AppStart.exe
PRC - [2010/04/07 00:37:40 | 000,093,032 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
PRC - [2010/04/01 00:50:46 | 000,043,960 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
PRC - [2010/02/23 22:25:30 | 000,214,408 | ---- | M] (PPStream Inc) -- C:\Program Files (x86)\PPStream\PPSAP.exe
PRC - [2010/01/24 22:25:14 | 000,024,576 | ---- | M] (Intuit) -- C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
PRC - [2009/05/28 00:09:36 | 000,049,976 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe


========== Modules (No Company Name) ==========

MOD - [2013/02/08 05:44:23 | 014,586,736 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll
MOD - [2013/02/07 16:10:34 | 000,444,816 | ---- | M] () -- C:\Program Files (x86)\Common Files\PPLiveNetwork\1.0.1.2908\tipsclient.dll
MOD - [2013/01/10 00:23:26 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\68f617caf670fefc0be769a294dc4ffd\System.ServiceProcess.ni.dll
MOD - [2013/01/10 00:23:08 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\90b89f6e8032310e9ac72a309fd49e83\System.Runtime.Remoting.ni.dll
MOD - [2013/01/10 00:22:37 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\865d2bf19a7af7fab8660a42d92550fe\System.Windows.Forms.ni.dll
MOD - [2013/01/10 00:22:30 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll
MOD - [2013/01/10 00:22:04 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll
MOD - [2013/01/10 00:21:59 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll
MOD - [2012/12/25 23:16:03 | 000,088,008 | ---- | M] () -- C:\Program Files (x86)\Common Files\PPLiveNetwork\1.0.1.2908\tipsdone.dll
MOD - [2012/12/24 23:31:20 | 000,570,848 | ---- | M] () -- C:\Program Files (x86)\Common Files\PPLiveNetwork\1.0.1.2908\MngModule.dll
MOD - [2012/03/20 18:01:12 | 000,062,792 | ---- | M] () -- C:\Windows\assembly\GAC_32\Simply.ConnectionManagerService\15.0.0.1__bfd98eaca3f932d5\Simply.ConnectionManagerService.dll
MOD - [2012/03/07 18:15:56 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Safari\Apple Application Support\zlib1.dll
MOD - [2012/03/07 18:15:36 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Safari\Apple Application Support\libxml2.dll
MOD - [2011/06/24 09:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 09:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/03/16 23:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/11/30 03:08:06 | 000,138,584 | ---- | M] () -- C:\Program Files (x86)\one2free Next G Connection Manager\UIExec.exe
MOD - [2010/05/06 13:10:06 | 000,026,112 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\ressources\plugins\DiscoveryGeneric.plugin
MOD - [2010/05/06 13:10:06 | 000,017,408 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\ressources\plugins\DiscoveryNdis.plugin
MOD - [2010/05/06 13:09:54 | 001,048,064 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\wxmsw28u_core_vc_custom.dll
MOD - [2010/05/06 13:09:54 | 000,726,528 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\wxbase28u_vc_custom.dll
MOD - [2010/05/06 13:09:52 | 000,635,904 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\UIToolkit.dll
MOD - [2010/05/06 13:09:52 | 000,472,576 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\Toolkit.dll
MOD - [2010/05/06 13:09:52 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\pcre3.dll
MOD - [2010/05/06 13:09:52 | 000,140,288 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\NokiaInternetModem_AppStart.exe
MOD - [2010/05/06 13:09:52 | 000,048,128 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\Preferences.dll
MOD - [2010/05/06 13:09:50 | 000,264,192 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\Device.dll
MOD - [2010/05/06 13:09:50 | 000,245,760 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\DB.dll
MOD - [2010/05/06 13:09:50 | 000,115,712 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\Discovery.dll
MOD - [2010/05/06 13:09:48 | 000,083,968 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Internet Modem\ComCore.dll
MOD - [2010/04/06 11:05:16 | 002,085,888 | ---- | M] () -- C:\Program Files\Lenovo\AutoLock\cv210.dll
MOD - [2010/04/06 11:04:06 | 002,201,088 | ---- | M] () -- C:\Program Files\Lenovo\AutoLock\cxcore210.dll
MOD - [2009/05/28 00:09:36 | 000,049,976 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe


========== Services (SafeList) ==========

SRV:64bit: - [2012/03/19 23:08:16 | 000,571,936 | ---- | M] (Soluto) [Auto | Stopped] -- C:\Program Files\Soluto\SolutoService.exe -- (SolutoService)
SRV:64bit: - [2011/01/27 15:30:20 | 000,059,240 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe -- (LENOVO.TPKNRSVC)
SRV:64bit: - [2011/01/27 15:29:32 | 000,040,808 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe -- (LENOVO.CAMMUTE)
SRV:64bit: - [2011/01/13 16:05:46 | 000,047,728 | ---- | M] (Lenovo.) [On_Demand | Stopped] -- C:\Windows\SysNative\TPHDEXLG64.exe -- (TPHDEXLGSVC)
SRV:64bit: - [2010/12/18 17:50:36 | 000,962,848 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:64bit: - [2010/12/17 06:18:08 | 000,198,784 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg)
SRV:64bit: - [2010/12/03 15:01:54 | 000,116,072 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe -- (HyperW7Svc)
SRV:64bit: - [2010/12/02 21:00:56 | 000,114,024 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD)
SRV:64bit: - [2010/12/01 22:55:56 | 000,064,440 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC)
SRV:64bit: - [2010/11/24 02:34:26 | 000,045,496 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE)
SRV:64bit: - [2010/11/12 04:48:50 | 000,045,928 | ---- | M] (Lenovo.) [Auto | Running] -- C:\Windows\SysNative\ibmpmsvc.exe -- (IBMPMSVC)
SRV:64bit: - [2010/11/02 15:49:46 | 001,515,792 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2010/11/02 15:39:08 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2010/11/02 15:34:14 | 000,836,880 | ---- | M] (Intel(R) Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2010/09/22 20:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/04/07 00:37:40 | 000,093,032 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe -- (Lenovo.VIRTSCRLSVC)
SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013/02/08 05:44:25 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/01/31 10:38:54 | 003,289,208 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2013/01/24 10:02:29 | 000,945,328 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe -- (vToolbarUpdater14.0.1)
SRV - [2012/12/24 23:31:52 | 000,505,312 | ---- | M] (PPTV) [Auto | Running] -- C:\Windows\SysWOW64\PPTVSvc.dll -- (PPTVService)
SRV - [2012/12/18 09:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/11/29 20:31:04 | 000,038,608 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2012/11/15 23:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/11/09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/10/22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe -- (avgwd)
SRV - [2012/09/28 09:25:54 | 000,625,304 | ---- | M] (Pandora.TV) [Auto | Running] -- C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe -- (PanService)
SRV - [2012/09/24 22:48:48 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)
SRV - [2012/09/12 22:14:58 | 000,088,080 | ---- | M] (ShenZhen Xunlei Networking Technologies,LTD) [Auto | Running] -- C:\Program Files (x86)\Common Files\Thunder Network\ServicePlatform\XLSP.dll -- (XLServicePlatform)
SRV - [2011/12/21 11:00:00 | 000,021,320 | ---- | M] (Sage) [Auto | Running] -- C:\Program Files (x86)\winsim\ConnectionManager\SimplyConnectionManager.exe -- (Simply Accounting Database Connection Manager)
SRV - [2011/11/10 08:17:31 | 000,167,264 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2011/02/24 02:10:24 | 000,212,944 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe -- (jhi_service)
SRV - [2011/02/21 22:19:12 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2011/02/21 22:19:08 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2011/02/03 13:44:00 | 000,079,208 | ---- | M] (Lenovo) [On_Demand | Stopped] -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service)
SRV - [2011/01/07 11:28:42 | 000,446,592 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\SASrv.exe -- (SAService)
SRV - [2010/12/27 05:56:00 | 000,263,528 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe -- (AcSvc)
SRV - [2010/12/27 05:55:58 | 000,124,264 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe -- (AcPrfMgrSvc)
SRV - [2010/11/30 03:05:30 | 000,252,784 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\one2free Next G Connection Manager\AssistantServices.exe -- (UI Assistant Service)
SRV - [2010/11/25 11:51:34 | 000,028,672 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe -- (SUService)
SRV - [2010/03/18 00:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/24 22:25:14 | 000,024,576 | ---- | M] (Intuit) [Auto | Running] -- C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe -- (QBCFMonitorService)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/11/18 15:45:28 | 000,061,440 | ---- | M] (Intuit Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe -- (QBFCService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/01/24 10:02:30 | 000,037,720 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:64bit: - [2012/11/15 23:33:24 | 000,111,968 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:64bit: - [2012/10/22 13:02:44 | 000,154,464 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
DRV:64bit: - [2012/10/15 03:48:50 | 000,063,328 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
DRV:64bit: - [2012/10/02 03:30:38 | 000,185,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:64bit: - [2012/09/28 10:32:56 | 000,053,760 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/09/21 03:46:04 | 000,200,032 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
DRV:64bit: - [2012/09/21 03:46:00 | 000,225,120 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
DRV:64bit: - [2012/09/14 03:05:18 | 000,040,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:64bit: - [2012/08/23 09:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 09:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/08/21 12:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/03/24 14:36:20 | 001,576,064 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/03/06 06:52:22 | 012,264,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/04 20:18:42 | 000,166,016 | ---- | M] (Ricoh co.,Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\5U877.sys -- (5U877)
DRV:64bit: - [2011/02/17 05:25:02 | 001,419,824 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2011/02/03 13:44:00 | 000,014,960 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\TPPWR64V.SYS -- (TPPWRIF)
DRV:64bit: - [2011/01/13 16:04:20 | 000,139,888 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsX64.sys -- (Shockprf)
DRV:64bit: - [2011/01/13 16:02:28 | 000,023,664 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsHM64.sys -- (TPDIGIMN)
DRV:64bit: - [2010/12/18 02:58:00 | 000,425,000 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (BTWAMPFL)
DRV:64bit: - [2010/12/18 02:57:34 | 000,039,464 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2010/12/18 02:57:34 | 000,021,416 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2010/12/18 02:57:32 | 000,162,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2010/12/18 02:57:32 | 000,145,960 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2010/12/14 21:12:00 | 000,098,816 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdxc64.sys -- (risdxc)
DRV:64bit: - [2010/12/07 06:06:42 | 000,412,776 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/12/03 15:01:58 | 000,031,592 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Program Files\Lenovo\RapidBoot\PHCORE64.sys -- (PHCORE)
DRV:64bit: - [2010/12/01 07:02:22 | 000,042,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WDKMD.sys -- (wdkmd)
DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 04:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/12 04:48:30 | 000,039,024 | ---- | M] (Lenovo.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ibmpmdrv.sys -- (IBMPMDRV)
DRV:64bit: - [2010/11/09 05:16:36 | 008,500,736 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:64bit: - [2010/11/05 09:45:48 | 000,438,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/10/19 02:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010/10/14 10:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2010/09/07 00:09:36 | 000,015,472 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\smiifx64.sys -- (lenovo.smi)
DRV:64bit: - [2010/04/22 14:07:26 | 000,098,304 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nokia_cs1x_cdc_acm.sys -- (nokia_cs1x_cdc_acm)
DRV:64bit: - [2010/04/22 14:07:26 | 000,097,280 | ---- | M] (Nokia) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nokia_cs1x_dc_enum.sys -- (nokia_cs1x_dc_enum)
DRV:64bit: - [2010/04/22 14:07:26 | 000,053,760 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nokia_cs1x_cdc_ecm.sys -- (nokia_cs1x_cdc_ecm)
DRV:64bit: - [2010/04/22 14:07:26 | 000,013,824 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nokia_cs1x_cpo.sys -- (nokia_cs1x_cpo)
DRV:64bit: - [2009/10/29 06:28:24 | 000,119,680 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV:64bit: - [2009/10/29 06:28:24 | 000,119,680 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV:64bit: - [2009/10/29 06:28:24 | 000,119,680 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV:64bit: - [2009/10/29 06:28:24 | 000,011,776 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter.sys -- (massfilter)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 18:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2009/07/01 21:16:02 | 000,040,512 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\psadd.sys -- (psadd)
DRV:64bit: - [2009/06/23 21:31:36 | 000,028,728 | ---- | M] (BUFFALO INC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btusb64h.sys -- (btusb64h)
DRV:64bit: - [2009/06/10 16:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009/06/10 16:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009/06/10 16:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009/06/10 15:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{53A92D71-782E-434C-A8A3-7081A4492AC7}: "URL" = http://www.bing.com/search?q={searchTerms}&form=LEMDF8&pc=MALC&src=IE-SearchBox
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{DFC8C767-4CE9-450C-8FC1-77B5F19C2B9C}: "URL" = http://www.bing.com/search?q={searchTerms}&form=LEMDF8&pc=MALC&src=IE-SearchBox


IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad [binary data]
IE - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003\..\SearchScopes\{A2E8FDB8-C194-4A01-9C84-D9B95F65D8DD}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_39: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pptv.com/plugin: C:\Program Files (x86)\Internet Explorer\PPLite\plugin\1.0.1.2908\npplugin2.dll (PPLive Corporation)
FF - HKLM\Software\MozillaPlugins\@qq.com/npqscall: C:\Program Files (x86)\Common Files\Tencent\NPQSCALL\npqscall.dll (Tencent)
FF - HKLM\Software\MozillaPlugins\@qq.com/npqscall,version=1.0.0: %commonprogramfiles%\tencent\NPQSCALL\npqscall.dll File not found
FF - HKLM\Software\MozillaPlugins\@qq.com/QQPhotoDrawEx: C:\Program Files (x86)\Tencent\Qzone\npQQPhotoDrawEx.dll File not found
FF - HKLM\Software\MozillaPlugins\@qq.com/QzoneMusic: C:\Program Files (x86)\Tencent\QQMusic\QzoneMusic\npQzoneMusic.dll File not found
FF - HKLM\Software\MozillaPlugins\@qq.com/TXSSO: C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.36\Bin\npSSOAxCtrlForPTLogin.dll ()
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@xunlei.com/DapCtrl: C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npDapCtrl.3.1.0.7.(401).dll (ShenZhen Thunder Networking Technologies Ltd.)
FF - HKLM\Software\MozillaPlugins\@xunlei.com/KKVA: C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npKKVA.1.0.0.6.(402).dll (ShenZhen Thunder Networking Technologies Ltd.)
FF - HKLM\Software\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2: C:\ProgramData\Thunder Network\Thunder\data\npxunlei1.0.0.2.dll ( )
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2: C:\ProgramData\Thunder Network\Thunder\data\npxunlei1.0.0.2.dll ( )

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2012/12/21 20:40:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2012/12/21 20:40:21 | 000,000,000 | ---D | M]

[2013/01/29 21:52:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kitty Tsang\AppData\Roaming\mozilla\Firefox\Profiles\extensions
[2013/01/29 21:52:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kitty Tsang\AppData\Roaming\mozilla\Firefox\Profiles\extensions\extensions
[2012/11/06 11:19:24 | 000,214,034 | ---- | M] () (No name found) -- C:\Users\Kitty Tsang\AppData\Roaming\mozilla\firefox\profiles\extensions\putlockerdownloader@putlockerdownloader.com.xpi
[2012/10/13 12:27:00 | 000,037,914 | ---- | M] () (No name found) -- C:\Users\Kitty Tsang\AppData\Roaming\mozilla\firefox\profiles\extensions\extensions\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
[2012/09/01 20:37:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

========== Chrome ==========

CHR - homepage: http://yahoo.com.hk/
CHR - default_search_provider: Yahoo! (Enabled)
CHR - default_search_provider: search_url = http://search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=937811&p={searchTerms}
CHR - default_search_provider: suggest_url = http://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms},
CHR - homepage: http://yahoo.com.hk/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.138\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: GoogleChromeRemotePlugin (Enabled) = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll
CHR - plugin: Injovo Extension Plugin (Enabled) = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.530_0\npbrowserext.dll
CHR - plugin: SweetIM GC Helper (Enabled) = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\mgHelperGCFB.dll
CHR - plugin: Perion plugin (Enabled) = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\Plugins/PerionNewTabChrome-32.dll
CHR - plugin: SweetIM GC Helper (Enabled) = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.0.0.1_0\mgHelperGC.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.0.1\\npsitesafety.dll
CHR - plugin: QQ2011 (Enabled) = C:\Program Files (x86)\Common Files\Tencent\NPQSCALL\npqscall.dll
CHR - plugin: Tencent SSO Platform (Enabled) = C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.42\Bin\npSSOAxCtrlForPTLogin.dll
CHR - plugin: Thunder DapCtrl NPAPI Plugin (Enabled) = C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npDapCtrl.3.1.0.7.(401).dll
CHR - plugin: Thunder KKVA NPAPI Plugin (Enabled) = C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npKKVA.1.0.0.6.(402).dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll
CHR - plugin: PPLive PPTV Plugin (Enabled) = C:\Program Files (x86)\Internet Explorer\PPLite\plugin\1.0.1.2908\npplugin2.dll
CHR - plugin: Java(TM) Platform SE 6 U37 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: QQMusic (Enabled) = C:\Program Files (x86)\Tencent\QQMusic\npQzoneMusic.dll
CHR - plugin: npQQPhotoDrawEx (Enabled) = C:\Program Files (x86)\Tencent\Qzone\npQQPhotoDrawEx.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
CHR - plugin: RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
CHR - plugin: RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
CHR - plugin: RealDownloader Plugin (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
CHR - plugin: XunLei Plugin (Enabled) = C:\ProgramData\Thunder Network\Thunder\data\npxunlei1.0.0.2.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll
CHR - plugin: Java Deployment Toolkit 6.0.370.6 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll
CHR - Extension: Google \u6587\u4EF6 = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google \u96F2\u7AEF\u786C\u789F = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: PutLockerDownloader = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apfdadfinodckpcehhdhjlgiphgnbfci\1.0_0\
CHR - Extension: YouTube = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Little Twin Stars = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgpokdpifggoblfpdfgnenejhdfcfnfl\1_0\
CHR - Extension: Google \u641C\u5C0B = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: RealDownloader = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0\
CHR - Extension: Unblock Youku = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnfnkhpgegpcingjbfihlkjeighnddk\2.6.1.4_0\
CHR - Extension: Gmail = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: Google \u6587\u4EF6 = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google \u96F2\u7AEF\u786C\u789F = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: PutLockerDownloader = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apfdadfinodckpcehhdhjlgiphgnbfci\1.0_0\
CHR - Extension: YouTube = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Little Twin Stars = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgpokdpifggoblfpdfgnenejhdfcfnfl\1_0\
CHR - Extension: Google \u641C\u5C0B = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: RealDownloader = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0\
CHR - Extension: Unblock Youku = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnfnkhpgegpcingjbfihlkjeighnddk\2.6.1.4_0\
CHR - Extension: Gmail = C:\Users\Kitty Tsang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2013/02/08 17:31:12 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (捃濘狟婥盓厥) - {004B0726-A010-4ABF-8556-FCDB7F1FCA1E} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO647.2.10.3694.dll (深圳市迅雷网络技术有限公司)
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll File not found
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (VideoUrlSniffer Class) - {00000ADA-7E0D-47C1-986C-F017D09C4304} - C:\Users\Public\Thunder Network\XMP4\Core\Program\VideoUrlSniffer.2.0.3.100.(401).dll (深圳市迅雷网络技术有限公司)
O2 - BHO: (捃濘FLV弝凊抻摯狟婥盓厥) - {0EA37B17-6B8B-4085-8257-F3A4AA69C27A} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XlBrowserAddin1.0.8.71.dll (ShenZhen Xunlei Networking Technologies,LTD)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll File not found
O2 - BHO: (BrowserHelper) - {4BF2CB0E-658A-442B-AC83-A64EC2150BFC} - C:\ProgramData\PPBrowserHelper\BHO\TipsBHO.dll (TODO: <Company name>)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (捃濘狟婥盓厥) - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.2.10.3694.dll (深圳市迅雷网络技术有限公司)
O2 - BHO: (ADA05D0E-4A32-6CD5-C5D8-CBAC01D8B468 Class) - {ADA05D0E-4A32-6CD5-C5D8-CBAC01D8B468} - C:\Program Files (x86)\QvodPlayer\AddIn\{ADA05D0E-4A32-6CD5-C5D8-CBAC01D8B468}\QvodAddr.dll File not found
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (smartdownloader Class) - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} - C:\Program Files (x86)\PutLockerDownloader\smarterdownloader.dll (TODO: <Company name>)
O4:64bit: - HKLM..\Run: [AcWin7Hlpr] C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe (Lenovo)
O4:64bit: - HKLM..\Run: [ALCKRESI.EXE] C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe (Lenovo Group Limited)
O4:64bit: - HKLM..\Run: [ForteConfig] C:\Program Files\CONEXANT\ForteConfig\fmapp.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Lenovo Group Limited)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe (Conexant Systems, Inc.)
O4:64bit: - HKLM..\Run: [Soluto] C:\Program Files\Soluto\soluto.exe (Soluto)
O4:64bit: - HKLM..\Run: [TpShocks] C:\Windows\SysNative\TpShocks.exe (Lenovo.)
O4 - HKLM..\Run: [ACTray] C:\Program Files (x86)\Lenovo\Access Connections\ACTray.exe (Lenovo)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ConnectionManager] C:\Program Files (x86)\winsim\ConnectionManager\Simply.SystemTrayIcon.exe (Sage)
O4 - HKLM..\Run: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe (Intuit Inc. All rights reserved.)
O4 - HKLM..\Run: [MDS_Menu] C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [NokiaInternetModem_AppStart.exe] C:\Program Files (x86)\Nokia\Nokia Internet Modem\NokiaInternetModem_AppStart.exe ()
O4 - HKLM..\Run: [Olympus ib] C:\Program Files (x86)\Olympus\ib\olycamdetect.exe (OLYMPUS IMAGING CORP.)
O4 - HKLM..\Run: [PWMTRV] C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL (Lenovo Group Limited)
O4 - HKLM..\Run: [RotateImage] C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Ricoh co.,Ltd.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UIExec] C:\Program Files (x86)\one2free Next G Connection Manager\UIExec.exe ()
O4 - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003..\Run: [PPAP] C:\Program Files (x86)\Common Files\PPLiveNetwork\PPAP.EXE (PPLive Corporation)
O4 - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003..\Run: [PPS Accelerator] C:\Program Files (x86)\PPStream\PPSAP.exe (PPStream Inc)
O4 - Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Kitty Tsang\AppData\Roaming\Dropbox\bin\Dropbox.exe ()
O4 - Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2354949678-1773501639-2422343938-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: &妏蚚&捃濘燭盄狟婥 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm ()
O8:64bit: - Extra context menu item: &使用&迅雷下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm ()
O8:64bit: - Extra context menu item: &使用&迅雷下载全部链接 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\getAllurl.htm ()
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: 使用迅雷看看播放器播放 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm ()
O8:64bit: - Extra context menu item: 添加当前页到迅雷看看播放器标签 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenuAddStoreTab.htm ()
O8:64bit: - Extra context menu item: 發送頁面至藍牙裝置(B)... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O8:64bit: - Extra context menu item: 發送圖像至藍牙裝置(B)... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: &妏蚚&捃濘燭盄狟婥 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm ()
O8 - Extra context menu item: &使用&迅雷下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm ()
O8 - Extra context menu item: &使用&迅雷下载全部链接 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\getAllurl.htm ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: 使用迅雷看看播放器播放 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm ()
O8 - Extra context menu item: 添加当前页到迅雷看看播放器标签 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenuAddStoreTab.htm ()
O8 - Extra context menu item: 發送頁面至藍牙裝置(B)... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: 發送圖像至藍牙裝置(B)... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9:64bit: - Extra Button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : 启动迅雷看看播放器 - {0000016b-c524-4050-81a0-243669a86b9f} - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEToolMenu.htm ()
O9 - Extra Button: 迅雷看看播放器 - {0000026b-c524-4050-81a0-243669a86b9f} - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEToolBar.htm ()
O9 - Extra Button: 迅雷看看 - {5D578929-E74E-46A2-A810-4F33D011DC52} - C:\Program Files (x86)\Common Files\Thunder Network\Kankan\XLStartKankan.exe ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: PPLive - {95B3F550-91C4-4627-BCC4-521288C52977} - C:\Program Files (x86)\PPLive\PPTV\PPLive.exe (PPLive Corporation)
O9 - Extra 'Tools' menuitem : PPLive - {95B3F550-91C4-4627-BCC4-521288C52977} - C:\Program Files (x86)\PPLive\PPTV\PPLive.exe (PPLive Corporation)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} http://support.lenovo.com/Resources/Lenovo/AutoDetect/Lenovo_AutoDetect2.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 204.197.191.194 38.117.85.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B5037CB4-5D75-4578-832C-3CC2AA2C729D}: DhcpNameServer = 204.197.191.194 38.117.85.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CC116FF0-8393-46DB-AC08-B5C8082FBD42}: DhcpNameServer = 64.71.255.198 64.71.255.253
O18:64bit: - Protocol\Handler\intu-help-qb2 - No CLSID value found
O18:64bit: - Protocol\Handler\KuGoo - No CLSID value found
O18:64bit: - Protocol\Handler\KuGoo3 - No CLSID value found
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll File not found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\intu-help-qb2 {84D77A00-41B5-4b8b-8ADF-86486D72E749} - C:\Program Files (x86)\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll (Intuit, Inc.)
O18 - Protocol\Handler\KuGoo {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\Program Files (x86)\KuGou\KGMusic\KuGoo3DownXControl.ocx (广州酷狗计算机科技有限公司)
O18 - Protocol\Handler\KuGoo3 {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\Program Files (x86)\KuGou\KGMusic\KuGoo3DownXControl.ocx (广州酷狗计算机科技有限公司)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (C:\Windows\Resources\Themes\XP萌化-伏八-乙荏製作\XP登入畫面-伏八.exe) - C:\Windows\Resources\Themes\XP萌化-伏八-乙荏製作\XP登入畫面-伏八.exe (水月萌化組)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/02/08 18:02:36 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2013/02/08 17:52:13 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013/02/08 17:05:30 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013/02/08 17:05:30 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013/02/08 17:05:30 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013/02/08 17:05:22 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013/02/08 17:04:18 | 005,030,592 | R--- | C] (Swearware) -- C:\Users\Kitty Tsang\Desktop\ComboFix.exe
[2013/02/08 16:28:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Kitty Tsang\Desktop\OTL.exe
[2013/02/08 16:25:40 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\Desktop\mbar
[2013/02/08 16:08:35 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\Desktop\RK_Quarantine
[2013/02/08 15:45:38 | 000,547,275 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Kitty Tsang\Desktop\JRT.exe
[2013/02/08 02:53:15 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Local\Bart_Ubing
[2013/02/08 02:52:29 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Local\CRE
[2013/02/08 02:47:49 | 000,661,504 | ---- | C] (Bart Ubing) -- C:\Users\Kitty Tsang\Desktop\Windows_7_Logon_screen_editor_by_bcubing.exe
[2013/02/07 17:33:09 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\Kitty Tsang\Desktop\dds.com
[2013/02/07 17:30:40 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\Desktop\SecurityCheck
[2013/02/07 00:20:39 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\騰訊軟體
[2013/02/06 23:58:56 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Local\{CE18F04E-3F8F-4FD8-A23C-70FB5DAD9580}
[2013/02/06 11:09:21 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013/02/06 10:35:44 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013/02/06 10:35:19 | 000,000,000 | ---D | C] -- C:\JRT
[2013/02/05 16:06:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013/02/02 15:45:47 | 000,000,000 | ---D | C] -- C:\Program Files\FreeFixer
[2013/02/01 12:19:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2013/01/29 21:54:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
[2013/01/29 21:54:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator
[2013/01/29 21:52:50 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Local\Updater21802
[2013/01/29 21:21:59 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Logon Loader
[2013/01/29 21:11:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logon Loader
[2013/01/29 21:11:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logon Loader
[2013/01/24 14:44:36 | 000,000,000 | ---D | C] -- C:\found.002
[2013/01/11 21:11:36 | 000,035,328 | ---- | C] (IncrediMail, Ltd.) -- C:\Windows\SysNative\ImHttpComm.dll
[2013/01/11 21:11:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ARFC
[2013/01/11 21:10:10 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Local\PutLockerDownloader
[2013/01/11 21:09:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PutLockerDownloader
[2013/01/11 21:09:54 | 000,000,000 | ---D | C] -- C:\Users\Kitty Tsang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com
[2013/01/11 21:09:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PutLockerDownloader.com
[1 C:\Users\Kitty Tsang\Desktop\*.tmp files -> C:\Users\Kitty Tsang\Desktop\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/02/08 18:23:17 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/02/08 18:23:17 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/02/08 18:22:00 | 000,000,466 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job
[2013/02/08 18:21:21 | 001,202,004 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/02/08 18:21:21 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/02/08 18:21:21 | 000,378,104 | ---- | M] () -- C:\Windows\SysNative\prfh0404.dat
[2013/02/08 18:21:21 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/02/08 18:21:21 | 000,099,568 | ---- | M] () -- C:\Windows\SysNative\prfc0404.dat
[2013/02/08 18:17:00 | 000,000,538 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/02/08 18:16:21 | 000,000,534 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/02/08 18:15:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/02/08 18:15:53 | 3151,417,344 | -HS- | M] () -- C:\hiberfil.sys
[2013/02/08 18:14:01 | 000,000,121 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013/02/08 17:44:00 | 000,000,526 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/02/08 17:31:12 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013/02/08 17:04:22 | 005,030,592 | R--- | M] (Swearware) -- C:\Users\Kitty Tsang\Desktop\ComboFix.exe
[2013/02/08 16:28:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kitty Tsang\Desktop\OTL.exe
[2013/02/08 16:22:36 | 013,711,621 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\mbar-1.01.0.1020.zip
[2013/02/08 16:15:01 | 000,782,336 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\RogueKiller.exe
[2013/02/08 15:45:42 | 000,547,275 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Kitty Tsang\Desktop\JRT.exe
[2013/02/08 15:45:27 | 000,582,209 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\adwcleaner.exe
[2013/02/08 02:51:54 | 000,002,360 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\ASELF.lang
[2013/02/08 02:47:50 | 000,661,504 | ---- | M] (Bart Ubing) -- C:\Users\Kitty Tsang\Desktop\Windows_7_Logon_screen_editor_by_bcubing.exe
[2013/02/07 17:33:10 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\Kitty Tsang\Desktop\dds.com
[2013/02/07 00:17:12 | 000,018,760 | ---- | M] () -- C:\Windows\SysWow64\QQVistaHelper.dll
[2013/02/06 22:31:13 | 000,000,047 | ---- | M] () -- C:\Users\Kitty Tsang\AppData\Roaming\CoreAVC.ini
[2013/02/06 15:58:00 | 000,000,460 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Kitty Tsang.job
[2013/02/05 16:06:57 | 000,002,230 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/02/03 16:21:26 | 000,002,192 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\迅雷7.lnk
[2013/02/02 16:15:18 | 000,001,046 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\PPStream.lnk
[2013/02/02 15:04:04 | 000,211,560 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[2013/01/30 22:15:20 | 000,002,951 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\Microsoft Excel 2010.lnk
[2013/01/30 22:15:14 | 000,002,937 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\Microsoft PowerPoint 2010.lnk
[2013/01/30 22:15:00 | 000,001,242 | ---- | M] () -- C:\Users\Kitty Tsang\Desktop\Paint.lnk
[2013/01/29 21:58:31 | 000,000,866 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013/01/29 21:41:02 | 000,000,528 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2013/01/24 10:02:30 | 000,037,720 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2013/01/11 22:04:40 | 000,000,000 | ---- | M] () -- C:\Users\Kitty Tsang\Documents\貝多芬第九號交響曲：貝多芬快樂頌.flv
[2013/01/11 02:36:14 | 000,000,000 | ---- | M] () -- C:\Users\Kitty Tsang\Documents\(HQ 192kb).flv
[2013/01/10 00:16:55 | 000,455,384 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[1 C:\Users\Kitty Tsang\Desktop\*.tmp files -> C:\Users\Kitty Tsang\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/02/08 18:13:52 | 000,000,121 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013/02/08 17:05:30 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/02/08 17:05:30 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/02/08 17:05:30 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/02/08 17:05:30 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/02/08 17:05:30 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013/02/08 16:22:24 | 013,711,621 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\mbar-1.01.0.1020.zip
[2013/02/08 16:15:00 | 000,782,336 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\RogueKiller.exe
[2013/02/08 15:45:26 | 000,582,209 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\adwcleaner.exe
[2013/02/08 02:51:53 | 000,002,360 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\ASELF.lang
[2013/02/05 16:06:57 | 000,002,230 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/02/02 16:15:18 | 000,001,046 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\PPStream.lnk
[2013/02/02 15:06:27 | 000,000,538 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/02/02 15:06:24 | 000,000,534 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/01/30 22:15:20 | 000,002,951 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\Microsoft Excel 2010.lnk
[2013/01/30 22:15:14 | 000,002,937 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\Microsoft PowerPoint 2010.lnk
[2013/01/30 22:15:00 | 000,001,242 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\Paint.lnk
[2013/01/30 22:14:37 | 000,002,192 | ---- | C] () -- C:\Users\Kitty Tsang\Desktop\迅雷7.lnk
[2013/01/29 21:54:55 | 000,087,040 | ---- | C] () -- C:\Windows\SysNative\pdfcmnnt.dll
[2013/01/29 00:41:04 | 000,000,866 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013/01/11 22:04:22 | 000,000,000 | ---- | C] () -- C:\Users\Kitty Tsang\Documents\貝多芬第九號交響曲：貝多芬快樂頌.flv
[2013/01/11 21:11:36 | 001,261,936 | ---- | C] () -- C:\Windows\SysNative\dmwu.exe
[2013/01/11 02:36:14 | 000,000,000 | ---- | C] () -- C:\Users\Kitty Tsang\Documents\(HQ 192kb).flv
[2012/12/24 23:31:42 | 002,299,360 | ---- | C] () -- C:\Windows\SysWow64\kindling.dll
[2012/09/24 22:49:21 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2012/06/14 20:15:44 | 000,000,033 | ---- | C] () -- C:\Users\Kitty Tsang\AppData\Roaming\turing_files.ini
[2012/04/28 12:03:54 | 000,211,560 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2012/04/01 13:29:46 | 000,000,091 | ---- | C] () -- C:\Windows\QBChanUtil_Trigger.ini
[2012/03/24 20:34:49 | 000,000,047 | ---- | C] () -- C:\Users\Kitty Tsang\AppData\Roaming\CoreAVC.ini
[2012/03/20 18:01:22 | 000,000,190 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2012/01/24 00:50:46 | 000,009,506 | ---- | C] () -- C:\Windows\UN070618.INI
[2011/08/13 01:05:36 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2011/07/28 11:52:17 | 000,000,020 | ---- | C] () -- C:\Windows\SysWow64\pub_store.dat
[2011/07/17 21:40:36 | 000,018,760 | ---- | C] () -- C:\Windows\SysWow64\QQVistaHelper.dll
[2011/07/15 10:17:49 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2011/07/15 10:17:49 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011/07/15 10:17:48 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011/07/15 10:17:48 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011/07/15 10:17:48 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011/07/15 05:25:24 | 001,220,378 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/04/17 05:21:03 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2011/04/17 05:15:22 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011/04/17 05:15:20 | 000,213,332 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011/04/17 05:15:17 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin

========== ZeroAccess Check ==========

[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 00:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012/11/08 17:18:21 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2012/11/08 17:18:21 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2012/06/10 18:35:50 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\Audacity
[2012/11/06 16:26:37 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\AVG2013
[2013/01/24 13:51:36 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\Dropbox
[2012/12/02 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\ExpressFiles
[2012/11/01 13:55:19 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\Kugou7
[2013/02/06 05:26:10 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\KuGou8
[2012/08/01 08:24:09 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\OpenOffice.org
[2012/05/04 15:50:22 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\PCDr
[2012/03/23 18:45:07 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\PPLive
[2013/02/08 14:00:35 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\PPStream
[2012/03/24 00:18:54 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\PwrMgr
[2012/04/07 15:19:54 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\QQMusicUpdate
[2012/04/12 17:08:43 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\SoftGrid Client
[2012/11/06 16:17:58 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\TuneUp Software
[2012/08/27 19:12:19 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\Youtube Downloader HD
[2012/07/23 22:15:26 | 000,000,000 | ---D | M] -- C:\Users\Kitty Tsang\AppData\Roaming\Youtube to MP3 Converter
[2012/08/08 19:05:21 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Application Data
[2012/04/20 15:51:20 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Auslogics
[2012/11/09 00:20:07 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\AVG2013
[2013/02/07 19:51:03 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Dropbox
[2012/05/04 22:15:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\duowan
[2013/02/02 15:45:59 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\FreeFixer
[2012/10/31 21:28:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\KuGou7
[2013/02/05 09:24:21 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\KuGou8
[2012/03/20 15:54:40 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\OpenOffice.org
[2011/08/23 22:01:06 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PCDr
[2012/08/08 19:07:27 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PPLive
[2012/11/25 19:25:13 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PPStream
[2011/07/15 05:32:22 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PwrMgr
[2012/10/06 00:53:59 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\QQMusicUpdate
[2012/04/01 14:34:29 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\SoftGrid Client
[2012/10/06 00:57:07 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Tencent
[2011/08/15 11:35:23 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Tific
[2011/07/15 05:25:53 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\TP
[2011/08/07 00:42:27 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Update
[2012/04/20 23:50:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Wise Disk Cleaner
[2012/04/20 23:50:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Wise Registry Cleaner
[2012/08/23 08:57:51 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Youtube Downloader HD
[2012/08/23 01:34:34 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Youtube to MP3 Converter

========== Purity Check ==========

========== Files - Unicode (All) ==========
[2013/02/05 10:35:12 | 000,000,162 | -H-- | M] ()(C:\Users\Kitty Tsang\Desktop\~$八婚后事件?.docx) -- C:\Users\Kitty Tsang\Desktop\~$八婚后事件录.docx
[2013/02/05 10:35:12 | 000,000,162 | -H-- | C] ()(C:\Users\Kitty Tsang\Desktop\~$八婚后事件?.docx) -- C:\Users\Kitty Tsang\Desktop\~$八婚后事件录.docx
[2012/09/16 22:54:47 | 035,273,178 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\永遠?幸????方法、見?????。 歌????＠????。_(360p).flv) -- C:\Users\Kitty Tsang\Documents\永遠に幸せになる方法、見つけました。 歌いました＠あまとぉ。_(360p).flv
[2012/09/16 22:51:00 | 035,273,178 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\永遠?幸????方法、見?????。 歌????＠????。_(360p).flv) -- C:\Users\Kitty Tsang\Documents\永遠に幸せになる方法、見つけました。 歌いました＠あまとぉ。_(360p).flv
[2012/08/25 20:00:36 | 015,143,289 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\Gumi - Eye Examination (???????)_(360p).flv) -- C:\Users\Kitty Tsang\Documents\Gumi - Eye Examination (シリョクケンサ)_(360p).flv
[2012/08/25 19:57:29 | 015,143,289 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\Gumi - Eye Examination (???????)_(360p).flv) -- C:\Users\Kitty Tsang\Documents\Gumi - Eye Examination (シリョクケンサ)_(360p).flv
[2012/08/25 18:29:48 | 026,959,563 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\【clear×96?×???】背??記憶～The Lost Memory～【歌????】_(360p).mp4) -- C:\Users\Kitty Tsang\Documents\【clear×96猫×ぽこた】背徳の記憶～The Lost Memory～【歌ってみた】_(360p).mp4
[2012/08/25 18:29:24 | 011,921,083 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\【clear】嗚呼、素晴??????生【???】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【clear】嗚呼、素晴らしきニャン生【リツカ】_(360p).flv
[2012/08/25 18:26:53 | 011,921,083 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\【clear】嗚呼、素晴??????生【???】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【clear】嗚呼、素晴らしきニャン生【リツカ】_(360p).flv
[2012/08/25 18:26:51 | 026,959,563 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\【clear×96?×???】背??記憶～The Lost Memory～【歌????】_(360p).mp4) -- C:\Users\Kitty Tsang\Documents\【clear×96猫×ぽこた】背徳の記憶～The Lost Memory～【歌ってみた】_(360p).mp4
[2012/08/25 18:08:01 | 016,279,320 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\??????　ver 96? with vip店長　※??? with 中文字幕 (Chinese Sub)_(360p).flv) -- C:\Users\Kitty Tsang\Documents\マトリョシカ　ver 96猫 with vip店長　※フリー with 中文字幕 (Chinese Sub)_(360p).flv
[2012/08/25 18:05:20 | 016,279,320 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\??????　ver 96? with vip店長　※??? with 中文字幕 (Chinese Sub)_(360p).flv) -- C:\Users\Kitty Tsang\Documents\マトリョシカ　ver 96猫 with vip店長　※フリー with 中文字幕 (Chinese Sub)_(360p).flv
[2012/08/24 22:54:14 | 018,107,222 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\【9人?歌?】合唱『初?????終??時』【?????、????】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【9人の歌姫】合唱『初めての恋が終わる時』【ありがとう、サヨナラ】_(360p).flv
[2012/08/24 22:53:48 | 016,577,957 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\合唱 『?????????』Girls Version【初音??曲】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\合唱 『ロミオとシンデレラ』Girls Version【初音ミク曲】_(360p).flv
[2012/08/24 22:50:38 | 016,577,957 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\合唱 『?????????』Girls Version【初音??曲】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\合唱 『ロミオとシンデレラ』Girls Version【初音ミク曲】_(360p).flv
[2012/08/24 22:50:23 | 018,107,222 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\【9人?歌?】合唱『初?????終??時』【?????、????】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【9人の歌姫】合唱『初めての恋が終わる時』【ありがとう、サヨナラ】_(360p).flv
[2012/08/24 22:40:58 | 027,020,438 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\【手描?PV】夢?【鏡音?????】ChineseSub_(360p).mp4) -- C:\Users\Kitty Tsang\Documents\【手描きPV】夢桜【鏡音リン・レン】ChineseSub_(360p).mp4
[2012/08/24 22:37:40 | 027,020,438 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\【手描?PV】夢?【鏡音?????】ChineseSub_(360p).mp4) -- C:\Users\Kitty Tsang\Documents\【手描きPV】夢桜【鏡音リン・レン】ChineseSub_(360p).mp4
[2012/08/24 22:31:07 | 027,927,454 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\「Kagamine Rin?Hatsune Miku」 Amayumero - (Sub. Espanol)_(360p).flv) -- C:\Users\Kitty Tsang\Documents\「Kagamine Rin・Hatsune Miku」 Amayumero - (Sub. Español)_(360p).flv
[2012/08/24 22:27:30 | 027,927,454 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\「Kagamine Rin?Hatsune Miku」 Amayumero - (Sub. Espanol)_(360p).flv) -- C:\Users\Kitty Tsang\Documents\「Kagamine Rin・Hatsune Miku」 Amayumero - (Sub. Español)_(360p).flv
[2012/08/14 23:17:38 | 015,250,706 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\【8 Vocaloids】Crazy ∞ nighT (English Sub)【?????】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【8 Vocaloids】Crazy ∞ nighT (English Sub)【オリジナル】_(360p).flv
[2012/08/14 23:15:23 | 015,250,706 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\【8 Vocaloids】Crazy ∞ nighT (English Sub)【?????】_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【8 Vocaloids】Crazy ∞ nighT (English Sub)【オリジナル】_(360p).flv
[2012/08/14 23:01:17 | 017,188,426 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\【GUMI×鏡音??】嗚呼、素晴??????生【?????曲】 中文字幕_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【GUMI×鏡音レン】嗚呼、素晴らしきニャン生【オリジナル曲】 中文字幕_(360p).flv
[2012/08/14 22:58:50 | 017,188,426 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\【GUMI×鏡音??】嗚呼、素晴??????生【?????曲】 中文字幕_(360p).flv) -- C:\Users\Kitty Tsang\Documents\【GUMI×鏡音レン】嗚呼、素晴らしきニャン生【オリジナル曲】 中文字幕_(360p).flv
[2012/08/14 22:58:02 | 023,611,462 | ---- | M] ()(C:\Users\Kitty Tsang\Documents\???、幸福安心委員???。歌???? ver96?　※??? 繁體中文字幕_(360p).flv) -- C:\Users\Kitty Tsang\Documents\こちら、幸福安心委員会です。歌ってみた ver96猫　※フリー 繁體中文字幕_(360p).flv
[2012/08/14 22:54:52 | 023,611,462 | ---- | C] ()(C:\Users\Kitty Tsang\Documents\???、幸福安心委員???。歌???? ver96?　※??? 繁體中文字幕_(360p).flv) -- C:\Users\Kitty Tsang\Documents\こちら、幸福安心委員会です。歌ってみた ver96猫　※フリー 繁體中文字幕_(360p).flv
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\迅雷?件) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\迅雷软件
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\快播?件) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\快播软件
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\百度工具?) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\百度工具栏
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\???件) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件
< End of report >

I might not immidately do what you ask me to later, my sister just wakes up and she yells at me that I screwed up her laptop and she needs to use it now for homework, I might just continue the clean proccess within the weekend. but I can continue with the HP clean up. thanks again

Yes I did, I am guility...
All processes killed
========== OTL ==========
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Add to Google Photos Screensa&ver\ deleted successfully.
Starting removal of ActiveX control {816BE035-1450-40D0-8A3B-BA7825A83A77}
C:\Windows\Downloaded Program Files\AcpIRExe.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{816BE035-1450-40D0-8A3B-BA7825A83A77}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{816BE035-1450-40D0-8A3B-BA7825A83A77}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{816BE035-1450-40D0-8A3B-BA7825A83A77}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{816BE035-1450-40D0-8A3B-BA7825A83A77}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}\ deleted successfully.
File {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll File not found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}\ deleted successfully.
File {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll File not found not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Kitty Tsang
->Temp folder emptied: 574356 bytes
->Temporary Internet Files folder emptied: 2183919 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 231080423 bytes
->Apple Safari cache emptied: 59760640 bytes
->Flash cache emptied: 2639 bytes

User: Public
->Temp folder emptied: 0 bytes

User: TEMP
->Temp folder emptied: 0 bytes

User: user
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 10726216 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 1014 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7140 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 143335 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 753 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 4353 bytes

Total Files Cleaned = 290.00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Kitty Tsang
->Java cache emptied: 0 bytes

User: Public

User: TEMP

User: user
->Java cache emptied: 0 bytes

Total Java Files Cleaned = 0.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Kitty Tsang
->Flash cache emptied: 0 bytes

User: Public

User: TEMP

User: user
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 02082013_190626

Files\Folders moved on Reboot...
C:\Users\Kitty Tsang\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Kitty Tsang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0000.doc not found!
File\Folder C:\Users\Kitty Tsang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{E488C5FB-BAF5-4B31-B5D6-6B9DD4E2DF3C}.tmp not found!
File\Folder C:\Users\Kitty Tsang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{07DB88ED-06D5-47EB-B3D2-67EEB50AADDD}.tmp not found!
File\Folder C:\Users\Kitty Tsang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F6DB3AB1-CA44-4E94-BC30-65971846E378}.tmp not found!

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Results of screen317's Security Check version 0.99.57
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
AVG Anti-Virus Free Edition 2013
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware 版本 1.70.0.1100
Duplicate Cleaner 2.0.6
Eusing Free Registry Cleaner
Java(TM) 6 Update 39
Java version out of Date!
Adobe Flash Player 11.5.502.149
Google Chrome 24.0.1312.57
````````Process Check: objlist.exe by Laurent````````
AVG avgwdsvc.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````

Farbar Service Scanner Version: 30-01-2013
Ran by Kitty Tsang (administrator) on 08-02-2013 at 19:19:40
Running from "C:\Users\Kitty Tsang\Desktop"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is offline
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1
Other Services:
==============
File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
**** End of log ****

ESet : No Threats is found...and should I uninstall ESET?

Verified Java Version

Congratulations!

You have the recommended Java installed (Version 6 Update 39).

that's what they said on my webpage that my java is always updated...I don't know why

Oh noooo I skipped this step
Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following:

Code:
:OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[emptyjava]
[CLEARALLRESTOREPOINTS]
[Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• Post resulting log.

what should I do now? I did this instead
2. Now, we'll remove all tools, we used during our cleaning process

Clean up with OTL:

• Double-click OTL.exe to start the program.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CLEANUP button
• Say Yes to the prompt and then allow the program to reboot your computer.

I wanted to tell you that I skipped that "run OTL fix." step and I did "Clean up with OTL" (I rolled too fast), what should I do now???

Hi , I did all the steps you told me, am I kind of done here? This is my sis's laptop and I don't want to get yell at again right on Chinese New Year (LOL) Thanks you so much!