Unwanted Ads (Continued)

[ramping]

1. Link back to initial thread: http://forums.spybot.info/showthread.php?69602-Unwanted-

Ads&p=446524#post446524





2. I ran Spybot, again, but this time, as administrator.

After 34:41 minutes, Spybot reported finding 24 "results".

So, I clicked on "Fix Selected".





3. DDS.txt:


DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16720
Run by Wheelsup Club at 11:34:46 on 2013-11-02
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5872.1861 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\atieclxx.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe
C:\Program Files (x86)\Linksys\Linksys Updater\bin\LinksysUpdater.exe
c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe
C:\Program Files (x86)\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\windows\SysWOW64\java.exe
C:\windows\system32\rundll32.exe
C:\windows\system32\rundll32.exe
C:\windows\SysWOW64\rundll32.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Eraser\Eraser.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files (x86)\SoftwareUpdater\UpdaterService.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\SaltarSmart\updateSaltarSmart.exe
C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
C:\Program Files (x86)\SaltarSmart\bin\utilSaltarSmart.exe
C:\Program Files (x86)\UltraVNC Addons\uvnc_service.exe
C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbarsvc.exe
C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
C:\windows\SysWOW64\vmnat.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
C:\windows\SysWOW64\vmnetdhcp.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\windows\system32\SearchIndexer.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Speech\Common\sapisvr.exe
C:\windows\System32\WUDFHost.exe
C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe
C:\Program Files\desksware\Desktop iCalendar Lite\Desktop iCalendar Lite.exe
C:\Program Files (x86)\Corel\WordPerfect Office 2000\Register\Remind32.exe
C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\VstaScan\VsAccess.exe
C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\alarm.exe
C:\Program Files (x86)\IBM\Lotus\Symphony\framework\rcp\eclipse\plugins

\com.ibm.rcp.base_6.2.3.20110915-1350\win32\x86\symphony.exe
C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\dad9.exe
C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
C:\Program Files (x86)\Gateway Photo Frame\ButtonMonitor.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files (x86)\Napster\napster.exe
C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Browny02\BrYNSvc.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins

\com.ibm.symphony.brand.win32_3.0.1.20120110-2000\program\soffice.bin
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
C:\windows\system32\notepad.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
c:\Program Files\Microsoft Security Client\MpCmdRun.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\SearchFilterHost.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uWindow Title = Internet Explorer, optimized for Bing and MSN
uSearch Bar = res://C:\Program Files (x86)\Copernic Agent

\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
uSearchURL,(Default) = hxxp://www.forumswatcher.com/search.htm
uURLSearchHooks: <No Name>: {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\Program Files (x86)\Copernic

Agent\CopernicAgentExt.dll
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program

Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
uURLSearchHooks: <No Name>: {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files

(x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll
uURLSearchHooks: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files

(x86)\freevideomaster\tbfree.dll
uURLSearchHooks: FCToolbarURLSearchHook Class: {cc376ed9-9e09-4b39-bad5-083d151eaa86} - C:\Program

Files (x86)\Pazera Toolbar\Helper.dll
uURLSearchHooks: <No Name>: - LocalServer32 - <no file>
uURLSearchHooks: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:\Program Files

(x86)\ytbyclick_B1\prxtbytby.dll
uURLSearchHooks: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:\Program Files

(x86)\MixiDJ_V44\prxtbMixi.dll
mURLSearchHooks: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files

(x86)\freevideomaster\tbfree.dll
mURLSearchHooks: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:\Program Files

(x86)\ytbyclick_B1\prxtbytby.dll
mURLSearchHooks: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:\Program Files

(x86)\MixiDJ_V44\prxtbMixi.dll
mWinlogon: Userinit = userinit.exe
BHO: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files

(x86)\freevideomaster\tbfree.dll
BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security

Scan\3.8.130\McAfeeMSS_IE.dll
BHO: SuperLyrics-16: {11111111-1111-1111-1111-110411411162} - C:\Program Files (x86)\SuperLyrics-

16\SuperLyrics-16-bho.dll
BHO: Pazera Toolbar BHO: {1B169632-4FA6-4BE0-B980-460B5BF7FD08} - C:\Program Files (x86)\Pazera

Toolbar\Toolbar.dll
BHO: Trellian BHO Impl: {24180B00-2EB6-11d7-BD6F-004854603DCE} - C:\Program Files (x86)\Trellian

\Toolbar\toolbar.dll
BHO: Toolbar BHO: {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files

(x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll
BHO: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:\Program Files

(x86)\ytbyclick_B1\prxtbytby.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin

\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files

(x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:\Program Files

(x86)\MixiDJ_V44\prxtbMixi.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google

\Google Toolbar\GoogleToolbar_32.dll
BHO: Freecorder extension: {B15BBE59-42F5-4206-B3F0-BE98F5DC4B93} - C:\Program Files

(x86)\Freecorder extension\ScriptHost.dll
BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee

\SiteAdvisor\McIEPlg.dll
BHO: Search Assistant BHO: {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files

(x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll
BHO: {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - <orphaned>
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -
BHO: SaltarSmart: {d99a4ec9-00bd-4fe4-85a5-4db018351265} - C:\Program Files (x86)\SaltarSmart

\SaltarSmartbho.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files

(x86)\Java\jre6\bin\jp2ssv.dll
BHO: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google

Toolbar\GoogleToolbar_32.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -
TB: Trellian &Toolbar: {71AAABE5-1F0F-11d7-BD6F-004854603DCE} - C:\Program Files (x86)\Trellian

\Toolbar\toolbar.dll
TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files

(x86)\McAfee\SiteAdvisor\McIEPlg.dll
TB: FireShot: {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} -
TB: VideoDownloadConverter: {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files

(x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll
TB: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files

(x86)\freevideomaster\tbfree.dll
TB: Pazera Toolbar: {093B3D46-0F87-44CF-B44B-79537F1597E5} - C:\Program Files (x86)\Pazera Toolbar

\Toolbar.dll
TB: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:\Program Files

(x86)\ytbyclick_B1\prxtbytby.dll
TB: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:\Program Files

(x86)\MixiDJ_V44\prxtbMixi.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google

Toolbar\GoogleToolbar_32.dll
EB: Developer Tools: {1A6FE369-F28C-4AD9-A3E6-2BCB50807CF1} - C:\Program Files (x86)\Internet

Explorer\iedvtool.dll
EB: Copernic Agent Results: {6F480F82-C3A6-4D35-96F7-B297AD49FBE8} - C:\Program Files (x86)\Copernic

Agent\CopernicAgentExt.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [Speech Recognition] "C:\windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [Update Service] "C:\Program Files (x86)\Common Files\Teknum Systems\update.exe" /startup
uRun: [BIBLauncher] C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe
uRun: [VerControl] C:\Users\WHEELS~1\AppData\Local\TempImg\VerControl.exe
uRun: [SymphonyPreLoad] "C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins

\com.ibm.symphony.standard.launcher.win32.x86_3.0.1.20120110-2000\IBM Lotus Symphony" -nogui -

nosplash
uRun: [Desktop iCalendar Lite.exe] "C:\Program Files\desksware\Desktop iCalendar Lite\Desktop

iCalendar Lite.exe"
uRunOnce: [Uninstall C:\Users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64]

C:\windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Wheelsup Club\AppData\Local\Microsoft

\SkyDrive\16.4.6013.0910\amd64"
uRunOnce: [Uninstall C:\Users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910] C:

\windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Wheelsup Club\AppData\Local\Microsoft

\SkyDrive\16.4.6013.0910"
mRun: [Hotkey Utility] C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
mRun: [OOTag] C:\Program Files (x86)\Gateway\OOBEOffer\OOTag.exe
mRun: [Gateway Photo Frame] C:\Program Files (x86)\Gateway Photo Frame\ButtonMonitor.exe -A
mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
mRun: [nmctxth] "C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
mRun: [NapsterShell] C:\Program Files (x86)\Napster\napster.exe /systray
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support

\APSDaemon.exe"
mRun: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:

\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
mRun: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper

Compact\ASHelper.exe
mRun: [VideoDownloadConverter Search Scope Monitor] "C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zsrchmn.exe"

/m=2 /w /h
mRun: [VideoDownloadConverter_4z Browser Plugin Loader] C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbrmon.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
mRun: "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
dRun: [SearchProtect] \SearchProtect\bin\cltmng.exe
StartupFolder: C:\Users\WHEELS~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup

\CORELC~1.LNK - C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\alarm.exe
StartupFolder: C:\Users\WHEELS~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup

\DESKTO~1.LNK - C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\dad9.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\CORELR~1.LNK - C:\Program

Files (x86)\Corel\WordPerfect Office 2000\Register\Remind32.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program

Files\McAfee Security Scan\3.8.130\SSScheduler.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SERVIC~1.LNK - C:\Program

Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\VISTAA~1.LNK - C:\VstaScan

\VsAccess.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Download current page with FreshWebSuction - C:\Program Files (x86)\FreshWebmaster

\FreshWebSuction\obiectx_all.htm
IE: Download using FreshWebSuction - C:\Program Files (x86)\FreshWebmaster\FreshWebSuction

\obiectx.htm
IE: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins

\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins

\freeytmp3downloader.htm
IE: Search Using Copernic Agent - C:\Program Files (x86)\Copernic Agent

\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
IE: {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~2\COPERN~1\COPERN~1.EXE
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program

Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~2\COPERN~1\COPERN~1.EXE
IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
LSP: %SystemRoot%\system32\vsocklib.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10

-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-

windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-

windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-

windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-

windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} -

hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
TCP: NameServer = 64.71.255.204 64.71.255.198
TCP: Interfaces\{16C6E4AB-95AE-44B4-B300-BF7F85B75A16} : DHCPNameServer = 64.71.255.204

64.71.255.198
TCP: Interfaces\{7A83BCC7-06FE-4C29-BFF1-A71A0A9D6DB9} : DHCPNameServer = 64.71.255.204

64.71.255.198
Handler: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:\Program Files (x86)\Copernic

Agent\CopernicAgentExt.dll
Handler: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:\Program Files

(x86)\Copernic Agent\CopernicAgentExt.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee

\SiteAdvisor\McIEPlg.dll
Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure

Networks Shared\Platform\puresp4.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee

\SiteAdvisor\McIEPlg.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo

Gallery\AlbumDownloadProtocolHandler.dll
Notify: SDWinLogon - SDWinLogon.dll
AppInit_DLLs= c:\progra~3\browse~1\25986~1.67\{c16c1~1\browse~1.dll
SSODL: WebCheck - <orphaned>
x64-BHO: SuperLyrics-16: {11111111-1111-1111-1111-110411411162} - C:\Program Files

(x86)\SuperLyrics-16\SuperLyrics-16-bho64.dll
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files

\Java\jre7\bin\ssv.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files

\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files

(x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-BHO: Freecorder extension x64: {B15BBE59-42F5-4206-B3F0-BE98F5DC4B93} - C:\Program Files

\Freecorder extension x64\ScriptHost.dll
x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files

(x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-BHO: {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - <orphaned>
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files

\Java\jre7\bin\jp2ssv.dll
x64-BHO: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files

(x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-TB: FireShot: {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} -
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google

\Google Toolbar\GoogleToolbar_64.dll
x64-Run: [OOTag] C:\Program Files (x86)\Gateway\OOBEOffer\ootag.exe
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [Eraser] "C:\PROGRA~1\Eraser\Eraser.exe" --atRestart
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - <orphaned>
x64-IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
.
INFO: x64-HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-Handler: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - <orphaned>
x64-Handler: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - <orphaned>
x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee

\SiteAdvisor\x64\McIEPlg.dll
x64-Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files

\Pure Networks Shared\Platform\amd64\puresp4.dll
x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee

\SiteAdvisor\x64\McIEPlg.dll
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles

\51iipmx9.default-1368301715119\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?

ctid=CT3298580&CUI=UN41812124047612243&UM=2&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?

ctid=CT3298580&SearchSource=2&CUI=UN41812124047612243&UM=2&q=
FF - prefs.js: network.proxy.ftp - 202.147.204.125
FF - prefs.js: network.proxy.ftp_port - 8888
FF - prefs.js: network.proxy.gopher - 202.147.204.125
FF - prefs.js: network.proxy.gopher_port - 8888
FF - prefs.js: network.proxy.http - 202.147.204.125
FF - prefs.js: network.proxy.http_port - 8888
FF - prefs.js: network.proxy.socks - 202.147.204.125
FF - prefs.js: network.proxy.socks_port - 8888
FF - prefs.js: network.proxy.ssl - 202.147.204.125
FF - prefs.js: network.proxy.ssl_port - 8888
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\McAfee\SiteAdvisor\NPMcFFPlg32.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Virtual Earth 3D\npVE3D.dll
FF - plugin: C:\Program Files (x86)\Winamp Detect\npwachk.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMSS.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll
FF - ExtSQL: 2013-09-16 14:56; {90a1b331-c2b4-4933-9f63-ba7b84d60d58}; C:\Users\Wheelsup Club

\AppData\Roaming\Mozilla\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\{90a1b331-c2b4-

4933-9f63-ba7b84d60d58}
FF - ExtSQL: 2013-10-03 15:24; jid0-KMOFrRnd6cHkSQEU5WJxd4Vz7SA@jetpack; C:\Users\Wheelsup Club

\AppData\Roaming\Mozilla\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\jid0-

KMOFrRnd6cHkSQEU5WJxd4Vz7SA@jetpack.xpi
FF - ExtSQL: 2013-10-03 15:24; arpit3@techraga.in; C:\Users\Wheelsup Club\AppData\Roaming\Mozilla

\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\arpit3@techraga.in.xpi
FF - ExtSQL: 2013-10-03 15:25; proxytool@proxylist.co; C:\Users\Wheelsup Club\AppData\Roaming

\Mozilla\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\proxytool@proxylist.co.xpi
FF - ExtSQL: 2013-10-03 16:59; firefox@saltarsmart.biz; C:\Users\Wheelsup Club\AppData\Roaming

\Mozilla\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\firefox@saltarsmart.biz.xpi
FF - ExtSQL: 2013-10-15 09:40; jid0-XXocAsQYPfKHSY8ebTi0VcX8eNQ@jetpack; C:\Users\Wheelsup Club

\AppData\Roaming\Mozilla\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\jid0-

XXocAsQYPfKHSY8ebTi0VcX8eNQ@jetpack.xpi
FF - ExtSQL: 2013-10-23 14:10; {e8f509f0-b677-11de-8a39-0800200c9a66}; C:\Users\Wheelsup Club

\AppData\Roaming\Mozilla\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\{e8f509f0-b677-

11de-8a39-0800200c9a66}.xpi
FF - ExtSQL: 2013-10-23 14:10; save-as-pdf-ff@pdfcrowd.com; C:\Users\Wheelsup Club\AppData\Roaming

\Mozilla\Firefox\Profiles\51iipmx9.default-1368301715119\extensions\save-as-pdf-ff@pdfcrowd.com.xpi
.
============= SERVICES / DRIVERS ===============
.
R0 ahcix64s;ahcix64s;C:\windows\System32\drivers\ahcix64s.sys [2010-5-31 235312]
R0 MpFilter;Microsoft Malware Protection Driver;C:\windows\System32\drivers\MpFilter.sys [2013-6-18

247216]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/12/15 09:45:12];C:\Program Files

(x86)\CyberLink\PowerDVD9\000.fcl [2010-2-8 146928]
R2 AMD External Events Utility;AMD External Events Utility;C:\windows\System32\atiesrxx.exe [2012-7

-4 238080]
R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

[2012-7-4 361984]
R2 AODDriver4.1;AODDriver4.1;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys

[2012-3-5 53888]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared

\Virtualization Handler\CVHSVC.EXE [2013-4-22 822504]
R2 Greg_Service;GRegService;C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe [2009-8-28

1150496]
R2 LinksysUpdater;Linksys Updater;C:\Program Files (x86)\Linksys\Linksys Updater\bin

\LinksysUpdater.exe [2008-11-13 204800]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe

[2013-10-3 121616]
R2 NisDrv;Microsoft Network Inspection System;C:\windows\System32\drivers\NisDrvWFP.sys [2011-4-27

139616]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;C:\Program Files (x86)\Spybot - Search & Destroy

2\SDFSSvc.exe [2013-10-30 3921880]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;C:\Program Files (x86)\Spybot - Search & Destroy

2\SDUpdSvc.exe [2013-10-30 1042272]
R2 SDWSCService;Spybot-S&D 2 Security Center Service;C:\Program Files (x86)\Spybot - Search &

Destroy 2\SDWSCSvc.exe [2013-10-30 171416]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application

Virtualization Client\sftlist.exe [2013-6-26 523944]
R2 SrvUpdater;Software Updater;C:\Program Files (x86)\SoftwareUpdater\UpdaterService.exe [2013-2-18

31744]
R2 Update SaltarSmart;Update SaltarSmart;C:\Program Files (x86)\SaltarSmart\updateSaltarSmart.exe

[2013-10-3 65312]
R2 Updater Service;Updater Service;C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe

[2010-5-31 243232]
R2 Util SaltarSmart;Util SaltarSmart;C:\Program Files (x86)\SaltarSmart\bin\utilSaltarSmart.exe

[2013-10-30 65312]
R2 Uvnc_service;Uvnc_service;C:\Program Files (x86)\UltraVNC Addons\uvnc_service.exe [2013-3-22

63296]
R2 VideoDownloadConverter_4zService;VideoDownloadConverterService;C:\PROGRA~2\VIDEOD~2\bar\1.bin

\4zbarsvc.exe [2013-3-18 42504]
R2 VMUSBArbService;VMware USB Arbitration Service;C:\Program Files (x86)\Common Files\VMware\USB

\vmware-usbarbitrator64.exe [2011-8-29 846448]
R3 amdiox64;AMD IO Driver;C:\windows\System32\drivers\amdiox64.sys [2012-7-12 46136]
R3 anvsnddrv;AnvSoft Virtual Sound Device;C:\windows\System32\drivers\anvsnddrv.sys [2013-3-19

33872]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\windows\System32\drivers

\AtihdW76.sys [2012-2-23 95760]
R3 AVer7231_x64;AVerMedia 7231 capture service;C:\windows\System32\drivers\AVer7231_x64.sys [2010-7

-26 1799808]
R3 bbcap;bb_capture_driver;C:\windows\System32\drivers\bbcap.sys [2013-3-22 4608]
R3 BrYNSvc;BrYNSvc;C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-3-14 245760]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-

8-12 366600]
R3 RTL8167;Realtek 8167 NT Driver;C:\windows\System32\drivers\Rt64win7.sys [2010-5-31 346144]
R3 rtl819xpn64;Realtek RTL8190/RTL8192E 802.11n Wireless LAN (Mini-)PCI NIC NT Driver;C:\windows

\System32\drivers\rtl819xp.sys [2010-2-1 622624]
R3 Sftfs;Sftfs;C:\windows\System32\drivers\Sftfslh.sys [2013-6-26 767144]
R3 Sftplay;Sftplay;C:\windows\System32\drivers\Sftplaylh.sys [2013-6-26 273576]
R3 Sftredir;Sftredir;C:\windows\System32\drivers\Sftredirlh.sys [2013-6-26 28840]
R3 Sftvol;Sftvol;C:\windows\System32\drivers\Sftvollh.sys [2013-6-26 23208]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application

Virtualization Client\sftvsa.exe [2013-6-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows

\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows

\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 CltMngSvc;Search Protect by Conduit Updater;C:\Program Files (x86)\SearchProtect\bin

\CltMngSvc.exe --> C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe [?]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-4-1

183560]
S3 debutfilter;Debut Filter Driver v6.20.00;C:\windows\System32\drivers\debutfilterx64.sys [2013-3-

23 33488]
S3 fssfltr;fssfltr;C:\windows\System32\drivers\fssfltr.sys [2013-8-14 57840]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety

\fsssvc.exe [2013-2-5 1512448]
S3 GSService;GSService;C:\Windows\SysWOW64\GSService.exe [2013-3-17 448736]
S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files\McAfee

Security Scan\3.8.130\McCHSvc.exe [2013-9-6 288776]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\windows\System32\drivers

\rdpvideominiport.sys [2013-3-19 19456]
S3 SndTAudio;SndTAudio;C:\windows\System32\drivers\SndTAudio.sys [2013-3-17 34528]
S3 SWDUMon;SWDUMon;C:\windows\System32\drivers\SWDUMon.sys [2012-3-30 15672]
S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2013-3-19 57856]
S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe

[2011-10-27 1255736]
S3 WsAudio_Device(1);WsAudio_Device(1);C:\windows\System32\drivers\VirtualAudio1.sys [2013-3-17

31080]
S3 WsAudio_Device(2);WsAudio_Device(2);C:\windows\System32\drivers\VirtualAudio2.sys [2013-3-17

31080]
S3 WsAudio_Device(3);WsAudio_Device(3);C:\windows\System32\drivers\VirtualAudio3.sys [2013-3-17

31080]
S3 WsAudio_Device(4);WsAudio_Device(4);C:\windows\System32\drivers\VirtualAudio4.sys [2013-3-17

31080]
S3 WsAudio_Device(5);WsAudio_Device(5);C:\windows\System32\drivers\VirtualAudio5.sys [2013-3-17

31080]
.
=============== Created Last 30 ================
.
2013-11-01 20:11:08 10280728 ----a-w- C:\ProgramData\Microsoft\Microsoft

Antimalware\Definition Updates\{01E01A6A-BC83-4FE0-A01C-372922FD9866}\mpengine.dll
2013-11-01 16:05:53 10280728 ------w- C:\ProgramData\Microsoft\Microsoft

Antimalware\Definition Updates\Backup\mpengine.dll
2013-10-31 13:22:17 71048 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-10-31 13:22:17 692616 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe
2013-10-30 13:51:03 21040 ----a-w- C:\windows\System32\sdnclean64.exe
2013-10-30 13:50:45 -------- d-----w- C:\Program Files (x86)\Spybot - Search &

Destroy 2
2013-10-29 18:41:37 -------- d-----w- C:\Program Files\Uninstaller
2013-10-29 18:39:47 -------- d-----w- C:\Program Files (x86)\SaltarSmart
2013-10-29 18:37:13 -------- d-----w- C:\Program Files (x86)\SuperLyrics-16
2013-10-27 12:54:40 -------- d-----w- C:\Program Files\iPod
2013-10-27 12:54:39 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-

52C6199EBF69
2013-10-27 12:54:39 -------- d-----w- C:\Program Files\iTunes
2013-10-27 12:54:39 -------- d-----w- C:\Program Files (x86)\iTunes
2013-10-24 20:31:13 -------- d-----w- C:\Users\Wheelsup Club\AppData\Local

\FreeFileViewer
2013-10-19 14:18:58 965000 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware

\Definition Updates\{09992E5C-E36E-42A4-BEC1-C9B59B97F77E}\gapaengine.dll
2013-10-17 15:44:01 -------- d-----w- C:\Program Files\McAfee Security Scan
2013-10-16 12:57:03 17813896 ----a-w- C:\windows\SysWow64\FlashPlayerInstaller.exe
2013-10-15 20:28:53 -------- d-----w- C:\Program Files (x86)\Flash Movie Player
2013-10-15 14:26:46 163504 ----a-w- C:\ProgramData\Microsoft\Windows\Sqm\Manifest

\Sqm10145.bin
2013-10-09 17:41:57 -------- d-----w- C:\Users\Wheelsup Club\AppData\Roaming

\DonationCoder
2013-10-09 17:41:44 -------- d-----w- C:\ProgramData\DonationCoder
2013-10-09 17:41:44 -------- d-----w- C:\Program Files (x86)\ScreenshotCaptor
2013-10-09 15:34:28 -------- d-----w- C:\FFOutput
2013-10-09 15:33:33 -------- d-----w- C:\Program Files (x86)\FreeTime
2013-10-09 15:14:36 -------- d-----w- C:\Program Files (x86)\Free All to Image

Jpg-Jpeg Bmp Tiff Png Converter
2013-10-09 14:14:32 -------- d-----w- C:\Users\Wheelsup Club\AppData\Roaming

\Free-backup.info
2013-10-06 02:54:17 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack
2013-10-04 20:51:52 -------- d-----w- C:\Program Files (x86)\MPC-HC
.
==================== Find3M ====================
.
2013-09-22 23:28:06 1767936 ----a-w- C:\windows\SysWow64\wininet.dll
2013-09-22 23:27:49 2876928 ----a-w- C:\windows\SysWow64\jscript9.dll
2013-09-22 23:27:48 61440 ----a-w- C:\windows\SysWow64\iesetup.dll
2013-09-22 23:27:48 109056 ----a-w- C:\windows\SysWow64\iesysprep.dll
2013-09-22 22:55:10 2241024 ----a-w- C:\windows\System32\wininet.dll
2013-09-22 22:54:51 3959296 ----a-w- C:\windows\System32\jscript9.dll
2013-09-22 22:54:50 67072 ----a-w- C:\windows\System32\iesetup.dll
2013-09-22 22:54:50 136704 ----a-w- C:\windows\System32\iesysprep.dll
2013-09-21 03:38:39 2706432 ----a-w- C:\windows\System32\mshtml.tlb
2013-09-21 03:30:24 2706432 ----a-w- C:\windows\SysWow64\mshtml.tlb
2013-09-21 02:48:36 89600 ----a-w- C:\windows\System32\RegisterIEPKEYs.exe
2013-09-21 02:39:47 71680 ----a-w- C:\windows\SysWow64\RegisterIEPKEYs.exe
2013-09-14 01:10:19 497152 ----a-w- C:\windows\System32\drivers\afd.sys
2013-09-08 02:30:37 1903552 ----a-w- C:\windows\System32\drivers\tcpip.sys
2013-09-08 02:27:14 327168 ----a-w- C:\windows\System32\mswsock.dll
2013-09-08 02:03:58 231424 ----a-w- C:\windows\SysWow64\mswsock.dll
2013-09-04 12:12:11 343040 ----a-w- C:\windows\System32\drivers\usbhub.sys
2013-09-04 12:11:51 325120 ----a-w- C:\windows\System32\drivers\usbport.sys
2013-09-04 12:11:49 99840 ----a-w- C:\windows\System32\drivers\usbccgp.sys
2013-09-04 12:11:43 52736 ----a-w- C:\windows\System32\drivers\usbehci.sys
2013-09-04 12:11:43 30720 ----a-w- C:\windows\System32\drivers\usbuhci.sys
2013-09-04 12:11:42 25600 ----a-w- C:\windows\System32\drivers\usbohci.sys
2013-09-04 12:11:40 7808 ----a-w- C:\windows\System32\drivers\usbd.sys
2013-08-29 02:17:48 5549504 ----a-w- C:\windows\System32\ntoskrnl.exe
2013-08-29 02:16:35 1732032 ----a-w- C:\windows\System32\ntdll.dll
2013-08-29 02:16:28 243712 ----a-w- C:\windows\System32\wow64.dll
2013-08-29 02:16:14 859648 ----a-w- C:\windows\System32\tdh.dll
2013-08-29 02:13:28 878080 ----a-w- C:\windows\System32\advapi32.dll
2013-08-29 01:51:45 3969472 ----a-w- C:\windows\SysWow64\ntkrnlpa.exe
2013-08-29 01:51:45 3914176 ----a-w- C:\windows\SysWow64\ntoskrnl.exe
2013-08-29 01:50:31 5120 ----a-w- C:\windows\SysWow64\wow32.dll
2013-08-29 01:50:30 1292192 ----a-w- C:\windows\SysWow64\ntdll.dll
2013-08-29 01:50:16 619520 ----a-w- C:\windows\SysWow64\tdh.dll
2013-08-29 01:48:17 640512 ----a-w- C:\windows\SysWow64\advapi32.dll
2013-08-29 01:48:15 44032 ----a-w- C:\windows\apppatch\acwow64.dll
2013-08-29 00:49:53 25600 ----a-w- C:\windows\SysWow64\setup16.exe
2013-08-29 00:49:52 7680 ----a-w- C:\windows\SysWow64\instnm.exe
2013-08-29 00:49:52 14336 ----a-w- C:\windows\SysWow64\ntvdm64.dll
2013-08-29 00:49:49 2048 ----a-w- C:\windows\SysWow64\user.exe
2013-08-28 01:21:06 3155968 ----a-w- C:\windows\System32\win32k.sys
2013-08-28 01:12:33 461312 ----a-w- C:\windows\System32\scavengeui.dll
2013-08-21 01:12:32 4812567 ----a-w- C:\Users\Wheelsup Club\FileZilla_3.7.3_win32-

setup.exe
2013-08-18 03:08:39 106496 ----a-w- C:\windows\SysWow64\ATL71.DLL
2013-08-14 01:39:44 1169609 ----a-w- C:\windows\unins001.exe
2013-08-13 17:51:58 4817275 ----a-w- C:\Users\Wheelsup Club\FileZilla_3.7.2_win32-

setup.exe
2013-08-05 02:25:45 155584 ----a-w- C:\windows\System32\drivers\ataport.sys
.
============= FINISH: 11:36:34.80 ===============





4. When I launched Firefox to get back to this post, one of the bothersome ads popped up, in a new

tab, again.





5. aswMBR Log:



aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-11-02 11:46:31
-----------------------------
11:46:31.670 OS Version: Windows x64 6.1.7601 Service Pack 1
11:46:31.670 Number of processors: 4 586 0x402
11:46:31.680 ComputerName: WHEELSUPCLUB-PC UserName: Wheelsup Club
11:46:36.503 Initialize success
11:49:32.473 AVAST engine defs: 13110200
11:52:53.826 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000074
11:52:53.826 Disk 0 Vendor: WDC_____ 01.0 Size: 953805MB BusType: 8
11:52:53.976 Disk 0 MBR read successfully
11:52:53.976 Disk 0 MBR scan
11:52:54.056 Disk 0 unknown MBR code
11:52:54.066 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 16000 MB offset 2048
11:52:54.116 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 32770048
11:52:54.156 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 937703 MB offset 32974848
11:52:54.236 Disk 0 scanning C:\windows\system32\drivers
11:53:12.308 Service scanning
11:53:52.652 Modules scanning
11:53:52.652 Disk 0 trace - called modules:
11:53:52.672 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll ahcix64s.sys
11:53:52.682 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80067c8060]
11:53:52.682 3 CLASSPNP.SYS[fffff880018a443f] -> nt!IofCallDriver -> \Device\00000074

[0xfffffa8005e389c0]
11:53:55.783 AVAST engine scan C:\windows
11:54:05.724 AVAST engine scan C:\windows\system32
11:59:10.902 AVAST engine scan C:\windows\system32\drivers
11:59:40.715 AVAST engine scan C:\Users\Wheelsup Club
01:47:13.742 AVAST engine scan C:\ProgramData
01:10:57.966 Scan finished successfully
06:43:12.596 Disk 0 MBR has been saved successfully to "C:\Users\Wheelsup Club\Desktop\MBR.dat"
06:43:12.636 The log file has been saved successfully to "C:\Users\Wheelsup Club\Desktop

\aswMBR.txt"




6. I think I successfully uploaded the [I]"attached.zip" file, in the "Managed Attachments" facility.

Kindly let me know, though, if I did something wrong and need to try uploading the file, again.




- r

[ken545]

Hi,

Your DDS log is a bit difficult to read, any further logs when they open in Notepad, go up to the top and click on Format and make sure Wordwrap is checked.

Lets do a few things

Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1 (http://jpshortstuff.247fixes.com/GooredFix.exe)
Download Mirror #2 (http://downloads.securitycadets.com/GooredFix.exe)
Ensure all Firefox windows are closed.
To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
When prompted to run the scan, click Yes.
GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).




Please download AdwCleaner (http://www.bleepingcomputer.com/download/adwcleaner/) by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator (http://windows.microsoft.com/en-US/windows7/How-do-I-run-an-application-once-with-a-full-administrator-access-token).

Double click on AdwCleaner.exe to run the tool

Click on the Scan button.
AdwCleaner will begin to scan your computer
After the scan has finished...
click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.








http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool (http://thisisudax.org/downloads/JRT.exe) to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.




Run these programs in order please and post the log from each, they may not all fit into one reply so take as many replies as you need to post them all

[ramping]

1. GooredFix.txt:



GooredFix by jpshortstuff (03.07.10.1)
Log created at 21:51 on 04/11/2013 (Wheelsup Club)
Firefox version 25.0 (en-US)

========== GooredScan ==========

Removing Orphan:
"{ACAA314B-EEBA-48e4-AD47-84E31C44796C}"="C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\" -> Success!
Removing registry item: "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\sysldtray" -> Failed [5]
Removing registry item: "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\sysftray2" -> Failed [5]
Removing registry item: "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\sysmstray" -> Failed [5]
Removing registry item: "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\pp" -> Failed [5]

========== GooredLog ==========

C:\Program Files (x86)\Mozilla Firefox\extensions\
(none)

C:\Users\Wheelsup Club\Application Data\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\
donottrackplus@abine.com [11:37 27/03/2013]
netvideohunter@netvideohunter.com [21:47 23/02/2013]
staged [17:28 20/06/2013]
{49c53dce-afa0-49a1-a08b-2eb8e8444128} [17:18 24/04/2013]

C:\Users\Wheelsup Club\Application Data\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\
netvideohunter@netvideohunter.com [02:41 05/11/2013]
{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [02:41 05/11/2013]
{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [02:41 05/11/2013]

C:\Users\Wheelsup Club\Application Data\Mozilla\Firefox\Profiles\slvcv7hg.default-1353510380055\extensions\
staged [19:29 22/03/2013]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [18:51 05/07/2012]
"fmconverter@gmail.com"="C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\" [01:02 12/03/2013]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [12:16 03/11/2013]

-=E.O.F=-


- r

[ramping]

# AdwCleaner v3.011 - Report created 04/11/2013 at 21:56:36
# Updated 03/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Wheelsup Club - WHEELSUPCLUB-PC
# Running from : C:\Users\Wheelsup Club\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : SrvUpdater
[#] Service Deleted : Update SaltarSmart

***** [ Files / Folders ] *****

Folder Deleted : C:\Searchprotect
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\Conduit
Folder Deleted : C:\ProgramData\Partner
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\VisualBee
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Freecorder extension
Folder Deleted : C:\Program Files (x86)\Pazera Toolbar
Folder Deleted : C:\Program Files (x86)\SaltarSmart
Folder Deleted : C:\Program Files (x86)\Searchprotect
Folder Deleted : C:\Program Files (x86)\SoftwareUpdater
Folder Deleted : C:\Program Files (x86)\VideoDownloadConverter_4z
Folder Deleted : C:\Program Files (x86)\SuperLyrics-16
Folder Deleted : C:\Program Files (x86)\freevideomaster
Folder Deleted : C:\Program Files (x86)\MixiDJ_V44
Folder Deleted : C:\Program Files (x86)\ytbyclick_B1
Folder Deleted : C:\windows\SysWOW64\TempDir
Folder Deleted : C:\Users\Wheelsup Club\AppData\Local\Coupon Companion Plugin
Folder Deleted : C:\Users\Wheelsup Club\AppData\Local\iac
Folder Deleted : C:\Users\Wheelsup Club\AppData\Local\PackageAware
Folder Deleted : C:\Users\Wheelsup Club\AppData\Local\VideoDownloadConverter_4z
Folder Deleted : C:\Users\Wheelsup Club\AppData\Local\visualbeeexe
Folder Deleted : C:\Users\WHEELS~1\AppData\Local\Temp\AirInstaller
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\iac
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\VideoDownloadConverter_4z
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\SuperLyrics-16
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\freevideomaster
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\MixiDJ_V44
Folder Deleted : C:\Users\Wheelsup Club\AppData\LocalLow\ytbyclick_B1
Folder Deleted : C:\Users\Wheelsup Club\AppData\Roaming\DealPly
Folder Deleted : C:\Users\Wheelsup Club\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\Wheelsup Club\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Wheelsup Club\AppData\Roaming\Yontoo
Folder Deleted : C:\Users\Wheelsup Club\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video downloader
Folder Deleted : C:\Users\Wheelsup Club\AppData\Local\Google\Chrome\User Data\Default\Extensions\incpbbmbclbkhjphicahojidkcabaajc
File Deleted : C:\Users\Public\Desktop\eBay.lnk
File Deleted : C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\user.js
File Deleted : C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\slvcv7hg.default-1353510380055\user.js
File Deleted : C:\windows\System32\Tasks\Dealply
File Deleted : C:\windows\System32\Tasks\DealPlyUpdate
File Deleted : C:\windows\Tasks\SuperLyrics-16-chromeinstaller.job
File Deleted : C:\windows\System32\Tasks\SuperLyrics-16-chromeinstaller
File Deleted : C:\windows\Tasks\SuperLyrics-16-codedownloader.job
File Deleted : C:\windows\System32\Tasks\SuperLyrics-16-codedownloader
File Deleted : C:\windows\Tasks\SuperLyrics-16-enabler.job
File Deleted : C:\windows\System32\Tasks\SuperLyrics-16-enabler
File Deleted : C:\windows\Tasks\SuperLyrics-16-firefoxinstaller.job
File Deleted : C:\windows\System32\Tasks\SuperLyrics-16-firefoxinstaller
File Deleted : C:\windows\Tasks\SuperLyrics-16-updater.job
File Deleted : C:\windows\System32\Tasks\SuperLyrics-16-updater

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com
Key Deleted : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\RegistryHelper.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHost.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0044162.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0044162.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0044162.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0044162.Sandbox.1
Key Deleted : HKCU\Software\58e8d8fb33fbe12
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3283791
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298580
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_4free-video-converter(1)_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_4free-video-converter(1)_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_cookie-viewer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_cookie-viewer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_kigo-m4v-converter-for-win_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_kigo-m4v-converter-for-win_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_oxelon-media-converter_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_oxelon-media-converter_RASMANCS
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter_4z Browser Plugin Loader]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{544C2426-48FD-4C40-AE3B-31257FF334D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1917AB4C-E2E9-42AE-A51E-B5750F160BFB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2A1260C1-2964-453F-B0BA-FA429472EB5F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{363D5C92-10DC-4287-93E5-1832EECC48EC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B41BE90-F731-4137-AFF3-2CA951E7F0D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66292684-B2C2-4C7C-B3D2-BF446E30744C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69407823-3494-4400-8D49-612549E8F4EE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6BFF4BCB-7A73-45A7-AC4C-389A34E1D1EF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6C65F1F0-8088-414B-828C-813207ADE75A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8FCA5302-6D6D-4645-BF99-D43CF76CE474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4341726-E922-47BB-86A6-23F4F4F67342}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B15BBE59-42F5-4206-B3F0-BE98F5DC4B93}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C9B4F046-2A8C-46BD-B1A1-CF0EAE5EA521}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D99A4EC9-00BD-4FE4-85A5-4DB018351265}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DCA1528D-A3C0-4A9F-AA6E-DCE643F91495}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED345812-2722-4DCA-9976-D01832DB44EE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4CAD2539-4AFA-4DDD-86F5-338D7A10E81C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411411162}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422412262}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F2CF666-0EC7-418E-B86A-459AD43BCAB1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B887CA3B-D82B-4A01-AD29-E97444D01CE6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415562}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416662}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444414462}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B15BBE59-42F5-4206-B3F0-BE98F5DC4B93}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D99A4EC9-00BD-4FE4-85A5-4DB018351265}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01DFD24D-73EB-497F-8DFD-7EA79365AF4A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90A1B331-C2B4-4933-9F63-BA7B84D60D58}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{49C53DCE-AFA0-49A1-A08B-2EB8E8444128}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411411162}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1B169632-4FA6-4BE0-B980-460B5BF7FD08}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B15BBE59-42F5-4206-B3F0-BE98F5DC4B93}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D99A4EC9-00BD-4FE4-85A5-4DB018351265}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01DFD24D-73EB-497F-8DFD-7EA79365AF4A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{90A1B331-C2B4-4933-9F63-BA7B84D60D58}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{49C53DCE-AFA0-49A1-A08B-2EB8E8444128}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411411162}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1B169632-4FA6-4BE0-B980-460B5BF7FD08}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B15BBE59-42F5-4206-B3F0-BE98F5DC4B93}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{42F31723-A883-4252-AFD0-C90AA9104698}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{90A1B331-C2B4-4933-9F63-BA7B84D60D58}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CEF5A3EF-2F71-468B-A2E5-777F09EFA4F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4CAD2539-4AFA-4DDD-86F5-338D7A10E81C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411411162}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFB904C4-C255-4540-B97E-A75A34F1FFB0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37a6afaa-95b5-49dc-930c-e95a1a495c1a}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3b7f92b5-2a74-49bc-bf13-1c09f7283586}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44f378dd-98a2-4202-9598-87fba45f9c98}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68c1b7ae-7be9-4e18-a72a-b3ead73a75b0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8af34c02-3760-4a77-9baf-63bd031da1b3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48896DD8-018C-470A-86D7-C6E52E2D171C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D10F8B6D-96F3-45C4-A87C-3697704950E1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9838DFCB-27DF-47AB-99DE-7CF68C519109}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8922D192-0D3C-4E63-855E-739CBBE43DD2}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A5B9C0F5-5616-47CD-A95F-E43B488FACCF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A5B9C0F5-5616-47CD-A95F-E43B488FACCF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{01DFD24D-73EB-497F-8DFD-7EA79365AF4A}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{90A1B331-C2B4-4933-9F63-BA7B84D60D58}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{49C53DCE-AFA0-49A1-A08B-2EB8E8444128}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{93A3111F-4F74-4ED8-895E-D9708497629E}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{01DFD24D-73EB-497F-8DFD-7EA79365AF4A}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{90A1B331-C2B4-4933-9F63-BA7B84D60D58}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{49C53DCE-AFA0-49A1-A08B-2EB8E8444128}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{01DFD24D-73EB-497F-8DFD-7EA79365AF4A}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{90A1B331-C2B4-4933-9F63-BA7B84D60D58}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{49C53DCE-AFA0-49A1-A08B-2EB8E8444128}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{1917AB4C-E2E9-42AE-A51E-B5750F160BFB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{6C65F1F0-8088-414B-828C-813207ADE75A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A4341726-E922-47BB-86A6-23F4F4F67342}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{B15BBE59-42F5-4206-B3F0-BE98F5DC4B93}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{C9B4F046-2A8C-46BD-B1A1-CF0EAE5EA521}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{DCA1528D-A3C0-4A9F-AA6E-DCE643F91495}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411411162}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422412262}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F2CF666-0EC7-418E-B86A-459AD43BCAB1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B887CA3B-D82B-4A01-AD29-E97444D01CE6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415562}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416662}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B15BBE59-42F5-4206-B3F0-BE98F5DC4B93}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411411162}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37a6afaa-95b5-49dc-930c-e95a1a495c1a}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3b7f92b5-2a74-49bc-bf13-1c09f7283586}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44f378dd-98a2-4202-9598-87fba45f9c98}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68c1b7ae-7be9-4e18-a72a-b3ead73a75b0}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8af34c02-3760-4a77-9baf-63bd031da1b3}
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\InstalledThirdPartyPrograms
Key Deleted : HKCU\Software\SaltarSmart
Key Deleted : HKCU\Software\SearchProtect
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Compete
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Freecause
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\smartbar
Key Deleted : HKCU\Software\AppDataLow\Software\SuperLyrics-16
Key Deleted : HKCU\Software\AppDataLow\Software\freevideomaster
Key Deleted : HKCU\Software\AppDataLow\Software\MixiDJ_V44
Key Deleted : HKCU\Software\AppDataLow\Software\ytbyclick_B1
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\Software\SaltarSmart
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\Software\SoftwareUpdater
Key Deleted : HKLM\Software\Vittalia
Key Deleted : HKLM\Software\SuperLyrics-16
Key Deleted : HKLM\Software\freevideomaster
Key Deleted : HKLM\Software\MixiDJ_V44
Key Deleted : HKLM\Software\ytbyclick_B1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Freecorder extension
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Video downloader
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SuperLyrics-16
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\freevideomaster Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ytbyclick_B1 Toolbar
Key Deleted : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaltarSmart

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16720


-\\ Mozilla Firefox v25.0 (en-US)

[ File : C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\prefs.js ]


[ File : C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\prefs.js ]

Line Deleted : user_pref("extensions.crossrider.bic", "1422614f7378f84961e35da5936eca9a");

[ File : C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\slvcv7hg.default-1353510380055\prefs.js ]


*************************

AdwCleaner[R0].txt - [32106 octets] - [04/11/2013 21:55:34]
AdwCleaner[S0].txt - [29681 octets] - [04/11/2013 21:56:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [29742 octets] ##########


- r

[ramping]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Home Premium x64
Ran by Wheelsup Club on Tue 11/05/2013 at 9:17:49.71
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{5B725BC8-C263-4783-BE79-D3A812FBB42B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smarttweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2354175475-3584804694-207632515-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2354175475-3584804694-207632515-1000\Software\Wajam
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181104}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211181104}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{526872DF-89AB-4959-90C8-ED922254F4F3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5D913573-E349-4928-BF39-E6AC669C5186}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{90209E90-AE24-48D3-9066-ACD4B7CEB7FE}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Wheelsup Club\appdata\local\filetypeassistant"
Successfully deleted: [Folder] "C:\Program Files (x86)\bearshare applications"
Successfully deleted: [Folder] "C:\Program Files (x86)\video download converter"
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{002DC165-E964-47CF-80F8-D1A9EF303928}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{004448BD-EF54-4CC9-99C4-54CC410EDA5B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{00A3E0AD-60DB-450E-AEA5-1F973D8BFD80}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{00C5EAFA-751A-4885-AFF4-2019B6411D04}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{00E347C1-4682-4C1A-8F8C-08949E1575D9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{01080DF7-01C9-458B-BA11-F37FE6DA480A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0198F7D9-704F-4830-949C-68FDD845F693}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{02459655-3CD3-4417-A35E-F5D5EEDA76B4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{02BDEB1B-D054-4FEE-8996-076DECD58FC0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{034F28EA-B843-40BA-BB4A-78C935CDDC47}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{03664C5A-DE72-4910-B3A4-09E94AF9A5BE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{03668DD9-AB8E-4C10-AF8C-2D7A44C8AB64}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0467D540-F98C-4BBF-9BEA-4214C8BDD78D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{048BE66A-B76F-41C2-91B3-09496BCFBADF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{048FA132-8E5D-49A7-A6BB-BA5EEA69B69D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{04DD68DD-7A7B-4A1E-A17A-12F4DF37D250}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{05465D6F-BA5E-4F26-B197-B29920DF54B7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{05584DEC-F5D4-4432-83A9-36996A86EB8C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0585A987-853D-4947-898E-F218C0DB536D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{05A39A37-191F-46BD-A5B7-D7F4D329FF07}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{05A74226-AE67-40BA-A46D-957A3B83021B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{05E11A1E-365A-47B2-ADCA-7E355BF0D28B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{05F0D9BC-9B2D-4858-BEAD-786FDA567149}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0646CF93-585C-40FE-871D-B047DF104DA4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{06794643-367D-4D3B-9F83-57746DEAD90F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0704D572-DF42-4104-BF0D-FA281CC78807}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{070D85F6-EEF1-4B33-9782-4DE529D65EEC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{071CE5AE-22EB-4A59-8DBA-ED3E2D8C488B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{07277CB6-C60F-4625-8E2D-5C794EEC1E33}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{075A4040-A9C6-486D-B00A-C5DA72B60DBF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{07D8792D-A73F-4162-93CF-B757E64AC2A4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{084640AE-FEB8-4C61-9310-F56AED4234C5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{08811135-5094-4DA6-AC74-5C6058F961DF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{093AAFDB-C833-4806-BDB2-6E12C11E4203}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{097DCA23-DF71-45EC-8169-97415628E63A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{09E78BB0-E9DB-4FAA-BC54-CC3D78E8D146}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0A29EB40-74DB-4E63-BA3F-7857E9E1C327}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0A54F476-F0BE-4CFF-AFD7-613DB682F263}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0A77DD29-E1A8-4FA1-A9FD-FB0CFD0F5F69}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0A83B400-DA43-47CC-BEBC-E837DD48B4C4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0AA9D30B-0106-4507-BAD7-9C587C08B507}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0AAF5E73-2803-4414-9B07-3BB17BE5D380}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0ACBA1EF-6003-471A-88D7-236DC071F0A7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0ADAE315-602C-4CB4-8123-50C6C5D5A84C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0AF9A85A-C68A-40AA-A6BD-82B27D6D7DBD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0B1CCFF4-7BFF-442C-A0A7-FEAB69AC1060}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0B5F33CA-3CAE-4785-B032-A6FE2AE77D8C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0C19A5D5-5C74-41B2-AE05-5897E3927FBF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0C354EA6-ED62-45F5-8944-D0FEEAAC4C6F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0C3CC6AF-EFB0-4EDA-937F-BC7B1BCD31E9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0C8A2121-C85D-4A7D-B0E4-AE5466AE525E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0C8A74EA-FFCB-40B4-82B1-B2A94865CD61}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0C9DE3AA-7ABF-4487-B239-C8F3BF24E2AD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0CD16A2E-CCE2-4979-86D1-6E5C48B1810A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0CEC2F1C-9AEA-4F4C-B7BD-0B3F97176A59}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0CF5D389-F36A-4273-B86A-5A3E75B094DD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0D07A299-8A4B-4A08-A9A4-64FC582E57C4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0D2E71CF-51B8-4ED8-90BE-296D750FE8DF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0D3E3D89-4AAC-4AB7-A948-20EBA6751A2C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0D496881-6AD3-4E3A-A629-3FCFD7F34771}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0D53FBBD-CF74-46E7-A072-19696FB73668}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0D750FE3-2D4E-441E-95AF-AA05A34BC099}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0DE58D74-D09E-4277-B1B9-6D8D54A41B9E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0DF647CB-748D-4B64-A9C9-8F246D29DED0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0E002AD3-766B-4E77-867B-BDE4401AA7A6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0E072181-B251-4DF0-AF60-DE3EAC53CD02}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0E20CBD9-F51A-4AFC-B8E2-D9CEBC288915}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0E89A92D-46BE-4E57-8615-FA339390A77B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0E9D7B3C-889D-4F62-9108-2036D5F21B96}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0EE13447-5AC5-43F8-83F5-323BF217A60B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0EF06F14-8F44-4222-A01D-29BCB2E056B7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0F5DA54E-520A-4B45-931C-A9056EEA2B8C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0F602E77-98AD-4F92-A896-A9DCC5C6DAA2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0F6135CA-4161-4650-8DD9-14E087324EBD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0F8C4D31-8D5D-4304-A098-A1EF2C5706AB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{0FACB2DF-F11B-4DD1-A83F-4DAD7301D800}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{100EDD9F-3033-4BF6-9FEB-5645F6A41278}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{101EE7FB-0F2A-43E8-9450-50989C052075}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{101F7D9B-4796-41E1-ACE0-EB934581DE69}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{102223F9-18A2-41AE-8003-8767C34460D7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{10313732-8FDB-49A4-A4BE-CE406B2B0CD8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{10390119-2C72-4949-A7FD-3ACB365DA5D8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{104296B4-CA22-4DAE-8C02-62043BC0967C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{10818D18-BD83-4FCE-B224-5D584EF296E8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{10F9D958-9C54-4090-9D0D-BF97F3A60EDE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{111CE98F-562F-4FDB-B357-4F7C1D5498C2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{114EEF88-7B0F-45B7-AF38-80F40AC47B2E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{115FD924-E494-4FBF-AD14-42DAA81E47BE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{11626332-B228-41B0-8215-CEF913F9263B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{117CBCC6-EE17-46E1-9DD6-78C3046367AA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{11B7E1A1-8A08-4D5D-9DCF-13F8BB0FDF83}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{11C26267-64EC-4862-8FF0-15025A654895}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1242A27A-6581-4BBD-A0DE-DCB66634FF77}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{126C3E1C-5195-4BA6-B622-77A936CE5B16}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1276EA95-9590-428A-A0C7-98BED1EB80B0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{127AC0EC-97F0-4B86-A99A-B63E71EE5742}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1280C112-C50F-4438-8A9E-0EBE69CD4E34}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{12ADF472-CF6A-4341-B121-CA3B12656A2C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{12F7F2D1-3F64-4379-8353-3EE762200742}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{13081405-8DB7-4F53-A822-AF541D55863B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{13375B81-ADC2-40C7-8672-662E08437DDC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{13B2F139-A83F-4BAC-BAED-0C05588E429F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{13D46F54-76D5-44FD-A971-392B08B787CA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{13EA1C12-A8A0-4CD0-B6AD-CA84AE254396}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{140B1EF2-C8E9-4B3B-858D-A766698E363D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1462C1BE-A257-43E7-900A-5B703BA0AEAE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{146B6079-AF7C-4101-917E-530291669123}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{146E8EB4-BFCB-4484-B5CE-5C7FC749E7DF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{152FCE42-C75C-4ABC-9FCC-A9854249BF99}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{154BEB78-4DED-4B72-8DAB-B4A35162718F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1563D9D4-F202-47D9-8264-CF95FBBF4122}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1587FA97-CA2F-4DBB-AAF8-D88E8BFE9BD5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{15DF019A-ED88-41E4-B53F-E6639BFDC5CB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1607326C-3674-44AC-8661-BDBF66924F31}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1636A017-6E3C-4126-A62D-1EC9D4D36BC0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1656B906-B04B-4C94-BAF4-0D283AEE5F06}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{16613E3A-BB26-46B4-8A0B-2B2F5230175C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{166D2B8F-1855-4FB8-912A-9D6BC59073AA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{16A49A36-D9C9-432A-AB5D-F1DD020DEF47}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{16ABD9A2-2CDE-4B4B-A1D8-997BDB791160}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{16AC314C-8D70-4E05-B59D-E8747EC7F69A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{16B347BB-244B-4E9C-96CC-2F880AF2DA1C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{16D59378-7573-4B6A-ACE1-BACA86C0C737}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{171BFFC1-E184-4509-81BD-A8B3D8DE6761}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1749CEE2-1E3E-4872-924A-9D053BEF7765}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{179A27DE-BD6F-4D21-80B5-A54528782001}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{17E6D721-B554-4BD8-AF17-5594A6B51B7E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{181DC049-C8A4-4BC9-9587-3C06BF3AF60D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{18C1CE2E-C7EF-4E61-9B4A-4A0FA23BE134}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{18C4E064-99F5-4DF9-BEC6-BBAECAD526E8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{19044059-CFF5-4539-87D7-157EF237E813}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{194E9757-D92E-4D0C-B2EB-85D020738513}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{196CA041-76A4-4782-9AEC-D45B15D914CB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{19CBDDFD-23F0-4DF3-BB86-E9D6431488D7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{19D1501A-7D39-4ED1-A479-FD41843A1C79}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{19E00D65-82C5-4F53-8780-99B060F129D5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1A1FBAC3-A758-4B39-8731-EE9F243033FA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1A251BE0-3DE1-480A-B8A8-7D6B632FE230}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1A3B071E-3288-4C63-926C-060CEF85F80C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1A3B5AE1-DCB8-40E6-86A8-70C9617769B3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1A916997-880B-4DE4-A494-3E497DEEF767}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1ADD938B-CD41-41E8-A0AC-998F7CED813F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1AE04ED9-0963-4FAD-BF55-35CA77CB3509}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1B09D824-3F5F-4D53-844A-4FA07D9B2FA6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1B17EEBB-D6D2-4DD0-9CCA-5E3FEEBF6708}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1BA19A2A-6434-428A-972C-2F95814062A0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1BCBEE22-B2A6-4690-A6D6-833DE6BDD7FD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1BCCE806-4BFB-47EF-B9C5-1CA1803AB0FE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1BE6253B-B0E3-4F87-B1DF-138F6EBF0454}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1BF5F321-8EBC-4A69-893C-051285CBA632}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1BFE7D43-FDB5-4DAF-BF64-CA4D0506F5A7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1C10889C-6CA6-49C2-8BE1-E64B2786E7DB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1C52E557-E133-4086-B5E5-AF64C1CB6F41}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1C6DEAC6-84D9-4F3D-96F8-EBAC64AA9C3C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1D176297-38EC-4153-BEE2-81AA5ABA39AF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1D212C0B-CC63-47E9-8056-ABF81D3D689A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1D6EEE6D-CB7C-4CBB-BFA6-A28F4B2A7C87}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1DB1BE5D-5CD5-443B-98F5-12959278518A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1DC07749-A666-4D7F-8221-EC8417214076}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1DD846F3-3E04-4D93-BE74-9F5FBE782BD6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1DE9CB6D-00A5-4111-B2E1-8FBE49C80E5F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1E3D62D0-1522-4082-BF50-34508EA76C0F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1E668594-BBD1-4BC4-AEEE-E16E1D4F8712}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1ECBCD3B-0C05-4F8A-AF1A-72D1436CBBE1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1EE70644-7F3C-40A7-AF00-9C8CE8EF9C2F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1F8AC69B-FADB-417A-AF65-E09C4DB0754C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1FE78259-EDD2-4F7D-B0EF-46A70555D358}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{1FF49A7E-0CBD-4388-AB76-AD1B5BCD30DD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{20323315-4440-450E-AA4C-BAE9B2F534E6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{203D2E4D-CE28-4D0C-A6AA-00978F8BC70F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2073D86F-D5FA-4260-9233-66A858E7EDA6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{20B1CFEC-817B-43EA-8BBA-4C001FECFDD8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{20EFC0D7-C1D2-409C-B251-FCD4540DF23B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{20F94FA3-4F1D-4B90-AC6E-948320D2F832}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{217497AC-6D0E-4E60-8B2D-9B5C1D105EA7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2196D9DC-8EDD-459B-B068-D27F956F2730}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{21CFB50F-9CDE-4E6D-AFDD-D8233026D395}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{21DAE62C-821E-40D4-9D98-0FFABA03901E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{21FD958A-DF22-4243-9010-8BD88841B33B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{232A985E-B831-4515-A854-58021BADE10D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2366C24A-4479-4E2B-B29F-3AD54D7146C9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2393020B-F0C6-41F3-9843-264450B05847}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{23D49201-23AF-4AB0-AEF7-96EB587A94BB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{246F8019-A998-4CA1-B7A6-A8A9480586CA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{252C853B-EEBA-456A-AA7C-62BCAE74FAD0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{255A23E7-72FB-476D-A427-7BB52B45347A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{255A6313-ED9F-4CFC-83DA-B4FE0A381CFB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{256EFDC8-BA49-4F9D-B0B0-0E6A0B4C0770}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{258BC57B-A103-4097-BC0E-0E40A96E4608}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{25A56CFF-65A5-4ECE-AFF7-6BA42D752C9A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{25C901B2-08DF-4F94-AC3B-3B467AB8C361}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{25CD8412-7E60-454F-877C-941E91797403}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{25DBDFC9-ECCB-4DA8-8F4B-162FF426B7C5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{25DD08D1-9DF9-4A57-8323-C43B5FC0BEF2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{25E18F41-49C0-4812-A307-572BDDC5D009}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{266A8B42-F815-4452-99C1-96AE5F47C285}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{26D11FFF-2D98-43A9-8724-5CB88B794A5A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{27220FC1-4DF5-4468-83AA-B1B811F240A6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2728D5E8-5925-4867-AE5A-9B113B5EAF74}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{277BC1A2-16EB-45AB-BF58-5658F7FA471D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{27994DE0-AA45-4931-A783-E0527A63CB02}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{27C80CF8-418C-4846-862D-4671189EEB04}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{28291E45-ADB0-496D-8266-1C0D4157B92A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{282EF276-1CAF-4364-936C-17BAA6D23737}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{28621FE4-3B66-432D-93AB-E84D1603894A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2880746D-B99C-4BB7-8021-72C2A8F49CF7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{28C5952E-8676-48D4-AE2A-734C4A810CEC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{28FB2277-F704-43E5-8A95-F7CAA9DC24B2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2941520F-E0E6-4369-B67B-FB6BCD079282}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{294CCFD1-4515-4F09-BE5C-5BB267878F2B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{29D66CA3-5D4E-45C1-B93D-9ABACFDBDBC2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2A45B994-D64E-4EAD-98D3-CFB043146DE8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2A5528E9-6F6C-4F84-909C-7D5222E760A0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2AF6761D-3A1E-4FFD-9269-CD7AE4EABA29}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2B0150FA-3297-4E68-A595-39CAB1311068}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2B0795E7-E9F8-42D4-9D61-1A84C2581FC5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2B3CF83D-F696-4FC3-8A48-F496233343D3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2B52494F-DC8D-49D4-A21B-39B91670EE37}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2B72DC55-BE8A-4075-A59C-3677E7B2D5F9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2B7933CB-5951-4D45-A040-041CE8AC1C9C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2BD64DE1-AFFB-4252-85EA-AF15F56703E0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2C2A9CB7-92C3-4F18-8875-E10E4A975226}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2C4EA6D3-7115-4C0A-88C9-6B578A7388C0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2DCE2CC9-A40D-4349-900A-488033022AA8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2E0150AC-C311-4B1A-ADBC-4D9B47046835}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2E3DD9DC-5C3B-47D5-8C9F-B77AFB150FEB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2E48B55B-CDC0-4CA2-B752-6A8BEEC63AB1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2E7DD6E9-5F7F-4BBE-9CDD-9C1E78993426}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2EA03211-D0AC-4E0C-8F39-D9D50E7CFFFC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2EC8A77F-AD91-4999-8DDF-A0D03EED008F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2F0F3965-EDCA-401F-AD11-AAB769AEF82A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2F12107D-0D30-4159-8240-53DDA9ABB298}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2F221AD3-FE15-42B4-87F5-94D17CB5E6AE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2F2B9D4A-356B-4C4D-B7FA-AA888B08E637}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2F6560F4-5EA9-4C58-9DD5-871CCCCDD51C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{2FE0B274-55D1-422E-83C6-658972CE9B73}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{30108117-3FCB-4321-AB79-BAD85C7C1835}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3017BE84-13F1-49BF-BF64-26AF62F193B6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{30644BC4-FA3E-4706-B962-55130F28ED16}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{307E49AF-B58A-49CC-9C0E-F8C6C9083D19}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{30A34A59-B556-4B49-B8D6-AFD6DADB0F46}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{30D809BC-7300-4F5F-BC36-16ABE32301AA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{310DF816-92C7-4426-8298-D8BFC5A6855E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{31157492-D106-43A0-ACA7-F14C2F5097B4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{316D867C-53EB-4546-AFD8-EDF35B51BBE7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{31710F01-4ED9-45F9-AD19-440A5166E464}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{317474AA-2422-4FC2-BDCE-282976973BF9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3174761C-B4B3-4FE8-9647-F3C04E716790}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{330EF8EE-A762-48E6-8CBD-8DC3819B2CB6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{33A579B3-E62F-4A8C-991D-D73362D04070}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{33A7A8EE-436F-4061-8FBC-09C73462E899}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{33F95F64-FCE8-4C15-BD8E-D9C4704CE4E5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{34043483-A4EA-4128-9005-BE0D1183A3B7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3468DB93-D5BC-4725-8366-25F3958F30B0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{34AE1AC8-EE64-445E-A048-7CB2E4B7A8CB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{34D824AB-28DE-4C64-BF4D-3B4EF8F2413D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{34EC26FA-EFE4-4926-AA44-7D9F21B2F99A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{352DEFB1-DB79-42D0-9FDD-024F18F4BAAC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{35E7A3F2-CA0A-4321-A8D9-E82594B0D633}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{362C1222-3EBC-4698-9155-3FAEC6288FCB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{36AF0FA5-B804-45C6-BA80-7C3D818AF668}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{36D38D26-A31D-45D8-94E7-28ABA0319E1B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{372478AC-10F6-4D17-8961-3189CAD7B4F2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{37355639-2261-4B2E-ACC5-571B48835BB5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3740EF86-86EB-4C7C-971E-508E3BC4EE73}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{37EFA714-E671-4799-9480-A717230AB9DD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{37F982EA-9FA1-4D5A-A6F1-54840D802658}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3813562D-02F1-458D-9795-B0182B06DAA2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3855A3C0-87A3-432B-B7FF-737ED10B4DD2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{38A368D2-EA65-4660-A65A-62C7436F3BAD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{391818C4-10D8-4A77-90CD-ABC62719928A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{39292929-A93C-46EB-B261-487C80C66983}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{395ABA02-9C18-446D-8A26-E336E02251E3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3973E14F-59AE-4D04-AC4A-9CDBE672D4BC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{397A39BD-E11E-41D8-92FB-7A27E4144511}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3994EAA6-582F-48CA-9F12-B12A51783F43}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{39B8EA45-45CD-4A6F-824C-FF89613D5E03}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{39D09658-4B35-4E3F-B362-F6E53215F3FB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{39D53DB4-2917-4F26-99E8-4E0AE0A749EB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3A1818CF-8A58-4BC5-AAF4-BC86B5DF0F5C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3A7B35ED-AFD6-4542-B8F5-6D36F28B9F58}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3ACFF28F-390E-44DC-BA96-C1EE561E4B98}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3B189AE3-9760-455C-A66C-1A0819D80132}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3B268FDF-372E-400E-B67F-882769B75ED5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3B3975D5-E563-4CE0-90CF-62393B7D75C0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3B920681-BD85-4D45-A545-0AA2A356C85A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3BD1EFEA-1565-483B-B6B8-1FAD1327DD69}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3C2E3568-07C0-4DBC-A46D-9D1DDA6F8567}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3C69241A-33F7-4A35-810F-6ECAC2684CFF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3C9C9CC5-206C-4552-BFE5-634F8C48589C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3D19DC53-4177-4B4F-A5F0-6E459E46CD9A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3DFF087D-F6DC-4621-BAB9-6F501EBD12EF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3E3B6B40-CAA3-4E5B-8725-938879FBBAF4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3E3D5490-6DDA-4C37-8807-32AFA379AFA6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3E9CCB97-7D6C-44B1-87E6-61A18B8F2D83}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3EA4C557-34C8-44C4-85A8-492CDFB2525A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3EB791E1-65DF-4A90-BD8F-4086818EFD1C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3F33F918-241C-42D6-9DB1-B07082DF11C9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3F725F84-867C-4BA5-A6A2-E91B112C1D4C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3FB71410-801D-4F62-87EF-E8868358F514}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3FBAB4AD-A70B-4A88-B06F-DFCC1B2B1848}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3FBCBE76-E59D-452F-A839-72279144D54E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{3FEC707B-B2AA-4A04-BF3C-BD3444DAD1A6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4014152D-3CD3-4B16-A396-20D2FE732D3B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{401D0DDC-05BB-465E-93AE-F9117B94D59C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{40250F2F-25F6-47F8-B61C-8F0931B463E4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{405C8ED3-6DA6-4199-8C83-CF69FD544267}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{40715E3E-CD10-49B2-B58E-AE486CEE66C1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{40AD735E-8814-45DC-920C-4ECC6E6BD98D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{40DF58B6-79EC-42BF-84B0-E63611111B5D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{41A0B510-F8DA-411D-A83F-31CC01FBBBEC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{41C2FD20-1B57-4F5C-BBE8-DCF2D97379E0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4248BB88-2CB4-428F-ADE2-3AE8644F1DC3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4262CFA0-1E20-4965-B402-876E88560D1C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4289FCCF-0D23-4E4D-B093-440FD098CDEA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{42D1CEAE-511A-4053-B81C-C7CD5D2A5F53}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{430F3603-39A7-48D4-BF4D-2E15C2519369}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{43342E16-8087-40FF-98EC-237D0EB196FD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{433BDF41-5E53-48A6-8690-94AEF8A5EACD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{434BDCCF-0AD8-4A79-B375-21327BD97671}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4372CB3C-C946-4BFC-8C0D-0A4548E34AA5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{439298B6-C242-47B0-B124-9DF72CCBEC4E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{43BB4E56-AFD0-4F1F-A272-F7470CEC0536}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{43F615AA-B3B6-4D6A-9C9C-5670D36CBA7F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{44229BFF-96D1-4CD1-B063-55DE1BE6FFF2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{44643640-C57C-43CA-A6ED-135060A023AE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{446AB482-CD92-4BCC-9C62-93BAC6572F51}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{447764F0-981F-4E30-9808-01B637DC7683}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{44CBDAAF-D045-4D31-BE4D-7CE70676DFEC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{45095C75-BF14-46D1-A576-FB527C1FD782}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4523FBE3-0625-49FA-B5C1-E78EC41795E0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4528C30B-4B19-423D-A0E2-D70DA660A070}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{45345AFE-CD3F-44AC-91ED-0F1BF149DC96}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{453D16FE-827F-4CEE-89FA-9AD494DA8957}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{45AC0EC3-C63D-4E80-AE94-303969B217B9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{461377D9-5B15-4644-939F-C70CDE9E975B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{46734BF0-C7C3-4E21-9C48-9E2E8B1DE4CF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{46B5C4D0-5929-43F6-A209-0530794F69BE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4704CB6C-03D0-4966-A199-A999186D9936}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{47107B06-D0A4-4894-8A17-56B6BBC4712D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4732499D-9767-43B4-9922-6AD72E270D4B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{47D91577-29D1-46E9-9C06-DE2665993215}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{47E35D9F-BE46-4609-9F02-DADF36C90D99}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{47FFABDC-F3AA-4849-AF57-2A71A40DA042}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{48063624-8C7D-437B-B10A-C3B503B9889F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{484F9939-3FE5-4753-B786-8F82739F6B50}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4865946D-789E-483F-AD10-A9970BDB7041}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4867397C-6260-4217-AFD9-7DFCDB86E8D8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{486F6749-E283-4FA6-8716-EE631F933340}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{491B05BD-121E-4FC7-A943-1F74A1BB78F9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{49251E45-91B5-4F87-B2D1-85F86990A14A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{492B037E-259C-4DB7-A0BB-45A3A15B1A0B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{492F5E31-383E-4C69-A179-0C1D18B4A630}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{49B505A5-7755-4CD4-9724-12DE9B6A8AF4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{49BB225C-5B32-482B-904E-274043C0F777}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{49F1B5A9-EBA6-4D7F-B977-148B0800A8D8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{49FE83B2-679A-4F86-82B0-CB69619B1C2A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4A34E835-F1A4-4EC3-B5BB-8F7DBF9A8332}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4A45E9C1-8238-40BF-9065-C305C96A3950}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4A731987-D0F9-428B-832A-BF140AF855BF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4A9AA609-5D88-4A4A-891E-7251586C4408}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4ACF1591-09BE-4BCB-9CE8-CA9495C8C3FF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4AD2A60A-BBD9-4050-9116-9BC547467B04}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4AE65F68-37EC-4383-B034-76C1C97E6F3D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4B059369-E1FD-4F3C-B48D-6E29796ED411}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4B158166-D889-46CA-BE1A-F86F70883768}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4B2F2665-C189-4A9A-96DC-9BDBD58B5944}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4B774ECC-25F1-4CDE-A54D-608C32FA3DE4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4B8F76D7-559B-448D-8A0F-35FA3714D030}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4B939597-62C4-4BD0-AF26-B7FEFE898E76}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4BC81567-1419-472B-A2BE-D98EE05F9CF4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4BEF996C-44A2-4388-A875-57F21953072F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4C29A11E-A862-45CA-8D61-DBEC8DBE90F6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4C398DC2-64DF-47F2-8617-6D657A3DA0BB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4C4F44D1-7CAB-4808-B239-B0A572369529}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4C61CBC6-91A9-4922-847C-4C51A16265F2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4C8EEB96-74BE-4F5E-8609-5241B364258F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4CC6934D-F5D0-4466-97E8-7C420E9471E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4CD8F7E6-2A45-482F-BFFB-8A94DEDA9B37}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4CF24596-FBD1-4092-B23C-997728D2A952}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4D431D03-4476-427A-B5B6-74032B3C2FB1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4D5E107B-124D-426D-B0D9-6D4B929BB886}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4DB63B6D-236B-43BD-A04D-B20EE45FED4B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4DC34035-718C-4A3C-9215-DCB11EA6513C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4DE32E2C-F622-4CEC-ABEA-CB82032FD0DC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4DE71DBB-A30F-49C5-91AE-CA2625B43331}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4DE9776E-4FD7-41AD-AFAD-8232845C1266}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4E66884F-EA61-4196-83DF-DA9D5BC17A7D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4E7CA6E0-DDEB-4F4B-8FBF-B1B25AEC0E7A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4E88BCB1-FC57-44CF-BA59-3E1B350D9750}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4E8B4948-7CA5-4F45-9621-F897D9C30EBC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4EA8B83C-EAE8-41A6-B818-84EFA1FAD89F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4EB3C4CA-7FFD-47DC-B0C0-8A8D465A68E3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4F55FE80-7FC8-4DFE-B417-19B57CCCB529}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4F658B2E-18DC-4CC3-8313-CD61FF679719}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{4F6A11DA-BDE0-4164-965B-8D61DC6121B3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5000D351-3B8D-41FB-9517-B46B3D1D9B18}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{501AEC89-9AF0-4DD1-8A51-12BB63789D05}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{50484D7A-CBF5-48B7-B85E-15AA163B480A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{50856456-7272-44BC-8489-C5BDE3ADC2CD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5093D70D-EDC0-4635-8A15-D7E960AFF4CB}

[ramping]

Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{50C0C4AD-B152-4BDA-9988-AF6595DA54ED}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{50F9372C-79C9-4F43-AAA1-75A046889AEC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5176841E-94B5-4520-B313-C275A4FF0542}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{51CB293B-E8E9-4CB1-A49E-5278C756660B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{52164379-A804-4764-96E4-51A19B0770AC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{521EC211-E48B-44F4-951C-48D04FB1FB43}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5236A4BF-64F7-41B0-98E0-07E872DBE538}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{523AF641-156C-438C-B725-C29B5212C682}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5257E0B6-226D-424C-987E-B9C196D64F5E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{52759D22-FC7A-4E7E-8DC0-7DFA1F0C22EE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{52875FDB-6ADD-44D3-8E89-FD7C06E73AC3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{52BBB531-D446-4EDC-A12D-F9E5C6CBF60D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{53289BFC-30DB-4B9C-8ACA-59AEB5BE464A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{53C0027B-8CC1-40D1-9903-D3F4BE0166D3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{53D9067E-5343-4F50-A209-44037D51DC54}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{53FCDB10-C59F-42F1-89B4-B5AEFA983E51}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{544A0037-AD79-495A-B76B-43EAEE9D1D7B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{54E1E5C3-A243-4D66-BB6D-3FE6EA0A34FC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{557046DF-741B-4C67-BBAA-13AD5D7033A7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5582C45F-906C-4FD9-A67E-2142063C91FE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{55CFBEEF-EF76-4B67-966F-A784ED36FC85}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{561F57D9-098C-4B38-91BD-B3649D042652}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{567ACCEC-E2E1-45E9-A366-EDEC45625C8D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{56BA1C77-088F-4E92-AAD2-4A0C81108D1E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{56C4348C-A636-45A5-8798-0CDA4E191277}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{56CBBF44-70D4-48F3-BA27-79BED97B8B1D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{56D0C65D-9403-421A-B7A7-97A8AE6C4A9B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{56EDA4E4-DEE0-4096-BEEB-36062031E8D6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5711D553-B0EC-4AC7-A17C-35E572158BFD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5728FEA7-1C05-48E6-B9EB-7FB7048C0BDD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{576D224D-98DE-4B82-A234-9B121959AE01}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5787D8CB-9764-4B49-9F06-ECD48BAB3E54}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5797DE1A-1E57-4028-8A45-635C731543EF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{57A61319-FDBB-45F8-A2DE-972EC1464C51}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{57D39D77-5DEE-4798-AE01-4C28F908E686}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{580D11A4-2D28-40A0-A0A7-96DEF67B27CA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{584149CB-4191-4D75-843C-6EF0FC252722}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{58A55B1A-700E-440C-B8F9-888F0AECA8E4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{58EA83BC-1A3F-492D-8B8A-D55F398C5B27}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{594DEF5D-7747-4718-AC84-4BF5375DB677}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{596735C1-3EC3-462D-B593-9F3969C58DCE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{59E40F82-AF50-4E97-B8D5-7DAC9784ABFB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{59F682C4-29C2-47D8-BF1A-E44037FA5641}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5A17BA0E-DD48-4295-96DC-E0EFA981D38D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5A579CCE-7701-438B-BDE2-90450C8BF62B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5A58A85A-9445-462A-BAD5-52909CE2837C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5A5990EA-18AA-4DF7-8477-92119D3B7073}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5A9944CD-D26F-42CA-9D43-A4E4D77138B9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5A9D4833-0FE1-4E36-BF1E-B25A638D4B01}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5A9D5144-3F7E-454B-BD81-C4CB050018D3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5AC96089-39AD-48DF-88A3-9621AB4D88D8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5B36CC6B-4DFD-41E3-9258-6B4B85B07CB5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5B4960C6-0304-4008-B259-2A3BB5DB8130}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5BEACD7D-7CCF-456C-B190-2C5B431A000E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5C010A0D-1006-4B44-8CDE-DD4084542B8D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5C0CD4F0-3D09-47E4-B6A5-935FE19653E0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5C9F024C-9189-4F33-8035-5E8662F03788}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5CD34C73-4644-409C-B53A-76B9A5D7039F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5CE9AB3A-895A-4A18-A292-5AF834CBDF5B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5D1FBF71-7DB8-4190-8F46-033EB0B394A3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5D798C12-50D4-4B5B-96E9-4B17077963B9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5D8604B1-3726-41B2-84A0-D4DF05909391}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5DA2D753-3908-445C-BCB5-4E866F1B7B75}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5DBB56EE-C670-47A8-93D2-955280365183}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5E2A7F1F-AB23-417C-B96F-707AD1F8859C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5E355940-C722-4BF0-9278-C912AF72F89E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5E7893DF-2B83-4B8F-99D9-21CE9CEB095F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5E9CB3C3-44D1-4B29-AD69-451EFD4DB8B8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5EA853F0-BCAE-4F6E-8126-6988696C71B7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5F4DC7E5-29F3-4563-B4C9-0BDDC91E5BEF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5F82E64D-B350-4BD2-BC47-C89FE8AD335E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{5F9B1817-961A-4BD6-AD40-130722FC87D9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{60109C5D-0D96-4D54-BD41-91ECAC8DD8DD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{605A6A03-2378-4279-8A03-46EDC2A0B57A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{609F8366-BE7C-44BA-A484-6393CFF122D6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{60B21717-F69E-45D3-AF37-D46AFE4976A1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{610C7143-5DFD-40D1-83FE-C5F411F64048}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{61CC363B-5FFA-462A-BA42-FFCF4A586F0D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6263F4F1-DAFD-4F2B-9016-82619BF9270D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{629B9389-6B5A-4FFE-A70B-3FF1C71D754B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{62A2A001-F8A2-478A-AA8F-CE0749F17B4D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{63178C3A-0330-4569-9892-4201D664E451}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{632F8491-320C-4B93-BC57-B80E5EFFC194}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{634C5893-8C53-4C67-BC61-9E2451DCB5B9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6364A1CD-32BD-48CF-8859-53A404B5CEF4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{63DFB801-137C-47A4-9EC7-DB256A2057C5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{641F57BB-A557-4E0F-8D48-92B6077CF738}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{647F0FFD-8DC4-499A-9FED-0C6E55149CA5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{65C82D16-0C85-4D7C-9081-4D31012111F6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{660A2D16-F5AC-46BC-A857-1635436C2B58}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{66197719-F6B8-4BD9-99AD-369FFDD59E7B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{673875D5-F148-48C6-AF2F-A168782C9455}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{673B2929-E7D2-41E4-B237-F07474AF36E8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{67DDF0D2-E758-4F4A-B534-B11A1F2979DC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6837DA93-00C5-4F06-8842-D08FA954C52A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6848FF47-4312-4BE4-9794-72B4B722B4DC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6889D32E-89C2-4EDE-BA96-E3116DD41B3D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{689B7FF7-CB82-4432-9B07-21E1BD9E8036}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{68BF12A3-CC40-4B5E-A149-121B4808B510}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{68F0C36E-4B84-4E38-BBEC-F2D37986F6CD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{69454EDB-824B-48C0-BACB-8B66F5FA419E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{69A30DF9-9B22-4537-9369-C897D851B348}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{69C7EC2B-DF4C-4BCC-8EDF-E98648E3D199}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{69CB910A-9CFF-445E-805E-734BA2CCB381}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{69D2E023-DF7C-40FE-8085-7E09893DBA79}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6A3FE9B4-7506-4F51-9A5C-AA48670BEA5F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6A49D5F7-4635-4758-9640-74B45037F8F5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6AD36D83-481F-4EFA-8930-977019635B14}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6AF83CA2-FA53-4691-9E0A-622F9D40E6B9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6B0CF1E0-4847-4BAD-9072-68AEB742799E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6B2FBDBE-19AE-4C19-A6AA-DBEAE18A16E7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6B7CF025-9C00-41E4-97E1-9E932A5E453F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6BBB8F68-B27A-4B7A-955C-2A4B4FD1020C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6BD258C5-B178-43B9-A60E-D3283504E55F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6C1841FA-D813-4E12-9BBD-8B2E060E1247}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6C47FAB7-32F4-4574-8CE6-411B4430CFB4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6C4B8BF5-D9B2-43FD-AC9D-423B649DA70F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6CD1C8D4-01A5-422C-A364-64E8E5A67692}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6CD56E2F-5DFA-4DF1-9CF1-58A7007D54F6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6CDAB282-ED0A-4CFD-97BF-2FAEB0786491}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6D62C414-6F52-4324-BFD2-97251C082002}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6D890D75-A7AC-4684-9077-D68D5FC52FAC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6DF245A2-971D-4C69-9411-C4E35AC63C7D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6E1DE2D7-3711-4415-B4AE-301A0ABF31E6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6E2B3FA6-C4F4-43CA-9A76-9C083B740527}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6F1DAFD6-791D-4C60-9F81-68C4472D2224}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6F26362F-EC41-4846-913D-2FF7419CEF94}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6F427DB1-3FFD-469C-A8C5-016EC75AF77E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6F63FECC-4B05-423A-A86E-6C22F0E29F18}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6F8E97B4-5C2F-4ED2-A16C-6798AFC59BF5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{6FE5BC7C-6202-4F36-A914-4DCD0D0F45E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7016C39D-D262-4D8A-BCC1-F413C5CBF5B8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{702FE264-834A-420B-8E3C-5581E585BB78}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{703B05F1-F5CD-42AD-9976-B63B07F004FC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{707964DB-223F-423D-865E-CD4DA370B9E8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{70F1C62C-AE90-4FE9-86AD-C04B8D650727}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{71088A26-6D33-4E03-9BC8-972A42B3B1E6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{715586F3-B500-4F5E-8D14-C473E87EDA3D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{717204A7-EE70-4436-883B-0E09E3287455}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{717ADC76-E19B-4E3A-B0D8-E1E7D13D80FD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{71D78353-674C-4358-AEE7-B16794E496E4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7244C13A-1E5E-43E6-85E4-934D52708022}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{72790D69-7CFE-498F-B9B0-F06331E12D41}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{728BD066-0CC9-4B3D-86EE-4621425A1B4B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{72A8688A-FB87-48D7-8635-73D59BBC37F6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{72B89C62-E0EF-4917-A5AA-249E1602EDAD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{731067D0-0C8A-48EC-A21C-7B33E6F29D03}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{731C74CB-0C51-46E4-ACD6-C0066F868EAC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{736CC247-A5D4-4AAC-9518-C8CCC62DD605}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{73954E9B-43A6-4318-93E0-7610EDCFAEE1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{73A3A37D-30D0-44B6-BD0F-7C640C3623E9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{73CE8901-68BE-46F5-9A6D-743FC2A22E35}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{73FE879F-6B5B-4AEA-B4C5-3F7A261FC10F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7401931A-7C19-4202-BBEA-F35C730ACE6C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{741820ED-9F82-4D5C-8CC4-2E75E9028790}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7457CB4C-E213-4B18-90D8-F6C4C6C3DCA0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{74669211-8EC7-49E8-9695-543D5F01D172}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{747776C4-5C6D-4C6B-84EF-5E1F909BEBA3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{74855651-2EAE-4124-90EC-13E2727F9A30}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{74894E10-9388-4C03-B011-D9CE665FD3EC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{749AC777-58C5-4F19-ACC7-56AE49D0A289}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{74AD6D3C-64FA-440C-89D0-41146804D9C6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{74B80016-A138-4B0C-9658-BFF28DB59FC1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{74C5F08C-C543-46A1-8208-C3B533B54360}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{74CBC8E4-5E9A-4396-A607-E154B03D2EFF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{752BB3B1-F60B-4F0F-A805-B71AF7D6E0A9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7562423F-16C7-4CEB-9B9E-DFA7554DCA34}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{75BB77E2-0DD8-4035-9E7F-0286895C7CAF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{75BFDD1B-F72E-4F2E-89DF-03ED5FBFD7D4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{75E197A0-7DD3-4177-A3A1-B04C1B09AC75}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7608418D-4762-4BD1-B032-E2261FBA7DB5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{760F8ACF-C86E-4D52-AFC4-3EEEDAB6D1A2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{76429AF6-045E-4E6D-A522-031DBB356A46}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{765EDDA4-3510-4F34-BD3A-21DB5B35D34F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{76D639A9-3EE8-4B61-896D-1FB19C92189E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{76E2624B-8597-4557-9E78-E043F28E809D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{76E93FD6-B36E-4A2A-8EE2-27F34195399A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{76F9BCF4-C09D-4D5F-A6D8-EA6DDA8A995A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7713D83F-2554-4CA1-ACB1-5B3E5F5CA6E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{77273C6A-08E4-4F05-B8A6-161E8CF051B0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{77A1AED9-D6CF-44A4-A332-D7C903E441AD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7824F8B4-F410-48D9-B6B2-E302CD3A93F4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{782FF4F1-BC8B-4D86-8EDA-4E8C631775DB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{78A0070D-EDDA-494A-8077-0E5B30F1E678}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{78B70C65-0A40-47C4-9657-C712C8B3C2F3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{797DF474-1897-4A12-90AE-6724DCEBD6E4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{79A52D61-E17A-4F56-B020-6A364016A7E7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{79BBE8F9-A7F9-4928-AF3A-2CF04F17965B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{79C8A51A-D69C-457B-B2EB-D977195AE330}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{79D4CBFF-C5BC-4C56-9237-3A1B2030FB95}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{79D5366F-6BCD-4AF9-928F-704DEB8FE8DD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7A273334-89E3-4A75-BF79-BDC874638816}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7AA2BE77-A739-43C9-8153-A321B8F010F0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7AB8A132-60EF-4221-BAE1-F66F3EE10E0D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7ACAD90A-4AB0-4FA9-BEDC-E496698B1DCB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7B149233-B888-47AD-8FCB-14BBC9C056A7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7B1FF167-B626-4DB3-92B9-E09261E5E78E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7B7EA692-A435-4455-92F2-D8F70C54F58D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7BBA55E7-89E9-4A79-88AD-F8ADF1FCE8AF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7C11FE06-5B59-4AF5-8D74-F8730D4809F9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7C54EC4F-900A-44FC-8470-07A6972E6C2B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7D87C499-897C-4B29-8F7A-8599ECE3A27D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7D8DFF48-4A67-4F44-8A19-DA3BD845DE77}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7D9E645A-FD83-4EF7-B88A-47C5C6D3CF29}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7DA47DCB-F9C7-4CDC-8FBF-56EBD639BE6B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7DB1B097-32E0-4F08-8800-A6D935887447}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7DC5C6B8-FA6B-4E7D-847E-14FBF76307F3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7DC71DAD-2E27-4DEC-BED9-8E6CE0DB62F8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7DCC7212-FD78-4F1A-B5DA-1A5D791C68EA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7DED97C3-5571-4F36-B033-BA0B4D03CD27}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7E52B841-B5A4-43AF-9753-80E86243AD2F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7E76DA00-C1E3-4AAA-848F-AD3367538EC6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7E96D16A-2F66-466F-AAD5-C44B0640A542}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7EAA7F23-DA48-44D4-831D-53A46B8E6179}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7ED470F7-AE9A-49E7-B6CB-F08016EF949D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7EE56584-0208-493F-81B4-B595239DDC71}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7F3E92FB-20FC-49D7-A2D8-44AFF25FB082}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7F83400B-DA40-47BC-84A6-5D2E3AD14605}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7F849329-4B18-46A5-B4F0-98D51DDBA9E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{7F8CD662-D95B-49FD-9BC8-DD260D289163}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{803F5222-F849-4A89-8DC0-0BBC12AD4107}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{80834526-E50D-4429-B1EA-0FF07D5A7101}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{809FA6DF-F298-4A5E-B194-79B3A5C1C938}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{80D9131A-AE61-4E52-AA5C-A1D1816EF2D4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{810977D9-96C2-465E-BE29-BDE732E07E81}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{812F0C82-72F6-4554-9597-A563F861EEF2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{814539F2-256D-4DF6-B2C8-EE626BBFCC96}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8161C0B9-87FC-4470-AB19-4D3DC43D840E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{817A1FDA-9AFA-4A5E-9F09-4D6BD1DB3238}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{81ABBB5D-896F-4079-A5F3-231245A64188}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{81F5FEAB-614B-44A2-ACB3-AEE988658139}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{823F0C2E-C8EC-45AF-A0C7-DDC0271434C9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{82916B2D-96C8-4F47-81A0-9BB268889C20}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8309B81E-84CC-43E7-8C6A-E4101EA38A37}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{83123357-34D7-44C4-A16F-A62D372BC6BE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{837F3DE1-86E1-424C-B1AF-74BF66F4A73F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{841191FD-A6C5-4F7B-8D2D-9F1D57680881}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{846BC48C-8003-49BE-906A-ED2D5BF497FA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{84A16A3E-19AD-4C22-B4F0-5936967D3A49}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{84B542AA-9064-4E40-B760-05867378FBB2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{84C373F6-F79F-4B84-9F23-DB3527330185}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{84DCD228-0578-43FA-85E7-A28DD19AA770}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{85208786-B069-4BEA-8666-E405E642AEA5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{85672D14-619C-4373-8421-C391D824A1BD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{856C58A8-1A6A-4917-A64D-D4F706B3F5BE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{856CCB17-79EC-4B2A-B94A-9C92008C79B0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8574E501-9EA5-4FA3-8E7F-AB8740BF85BD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{85A2E0D9-C5AC-4FDF-BAE8-ACF6F079AD3C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{85B2461E-42B2-4CD9-94D7-8ECF26E9ECF6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{85C7EA8E-10D3-44D4-B334-8132384DF720}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{86643001-5803-4BC6-BF03-8D3B540FBD49}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{866E8820-8E98-4A05-8027-63F64C82850F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{86757780-8FA1-4F04-BEF7-0D1648D2051B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{86941FE5-F157-433F-9FF8-29E99B676BD0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{869F2CF7-2D06-4029-8105-7E10ECA66B57}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{86B1A7F1-A7E4-46E6-89BD-BAF6F8B73E6E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{872578CC-2DFF-48DA-A29E-B2DE4BD640C4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{87366BE4-5514-4284-843F-B03E45DAC290}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{873A00B9-2D16-4142-9900-B6A3CBEA5669}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{87EAFF98-1822-4D62-9914-CD6238F29214}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{882B2222-4BFA-4198-9B80-86D2000F2F55}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{884CAAD9-22EA-4FA2-9D9B-763B9FDFFB7C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{884DF6C9-AE9F-4CB7-9F1E-F62ABA0DE647}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{887C5DF2-D748-4BC7-A8F5-A41D5204DCCE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8896905C-C165-4C4D-9C9A-A34958FE1C99}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{88F3646D-8D45-4B45-A76F-03D5D01E6D8A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{88FE8ACD-7568-4BDA-A9FC-A7942EE81BB9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{89CF1EC6-767E-4D0E-B622-F9435A97AB1A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{89E168BB-7D1B-43D3-8D2E-42B1FC17938F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8A1750BA-AA01-487A-8179-EF8C7552B475}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8A434A2C-7ED6-46DC-94D3-C7DE3E2E5BDE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8AA2A83E-BC4C-467B-8853-A6804F286EA7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8AA2EAE3-9150-495C-BC96-BF65E62E81AA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8B838B8F-00C1-4712-BB11-5D77CECDF971}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8BEECEC0-7F49-40AC-ADB4-51414BBC329C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8C9C6AE7-B92B-4FC5-85AA-E5EEC5331733}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8CD46982-F064-4D91-B673-59B34D33F653}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8CED74D0-99CF-4119-9593-DBA2E75AD8F1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8CF8B3A3-AF66-4920-A45F-53B62158484B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8CFE5606-14F1-46B4-AB59-0E9317BB4BEB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8D138BAE-3B65-47BA-97F5-0CFCE9859DE3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8D60E464-079C-4946-9EDC-B6A35397E0F8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8D7FF06E-2D0B-49B4-B2D2-C8238D5E591C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8DAE2CC5-1DEF-4416-97D5-55D1E32ADD87}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8E1106DA-AC32-4097-9F12-FF775664D4C8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8F3295DB-D9B4-46B6-8091-7269C6D66D04}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8F5BE336-6B0D-4718-92B1-EE80232FB5E5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8F7412A0-B098-49A7-BEC9-577DB51B5108}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8F8891ED-4514-4E22-A3D9-F52C0712F978}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8F9E7F1C-1218-49E1-A692-3C253B7DDD36}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{8FDFB016-C5DF-48CA-B2C6-F031F3AEE66E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{90EB4CD8-B2AF-4AFF-A9FE-4E956185B13E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{911FA640-E6FC-4B05-9039-19102BBFC224}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{913D3B15-6C68-487D-B858-DE2FF5F500C6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{918C943A-BD65-4777-9D74-3D7E64BD7E4B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{91D6C8B3-8285-4C5D-9321-4BD36BFF8E4D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9279A35C-EFF5-4CDF-A09A-400F16D45492}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{92850D82-B4C7-4B2C-B291-74940576A34C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9287ECC8-D42E-483D-97FB-E1C1A12162F4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9292AEC6-EDA6-43AA-B40A-21F30C053831}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{92D45840-9776-4199-9987-1301D620C951}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9318DC48-CD74-47AB-8DE9-8CE4CD6647E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{93253132-159F-47D0-BF72-1295429C4B13}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9339FDDD-D684-4703-A73F-35E1500C480B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{93545A83-D686-41C8-BDDB-6029859C17C9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{938609FF-C9A1-491F-A729-F9450656C9F3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{93C402DC-E90C-4550-A373-06E52EF43984}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{93C76642-D9E2-4E64-BBA4-1CBACA65E629}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{940EB64A-CAF6-4B6A-8123-A970B4CD3D24}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9467C23F-C752-4482-AB39-848697EEE9C8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{946D9520-5EA6-4EB7-9194-8F707030B6C7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{94CBAD03-66D9-4D59-ACAE-02F6AF82790A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{94E64A2C-6085-45E6-85B5-CD1485D4F921}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{954C8999-FD3A-44DC-B3B0-E2C46E85609A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{954D9B6F-630B-449F-825C-6121B175D009}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{959D6A35-87F0-470F-BB35-116FEA72F22B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{95C4F463-D95F-425D-AA8D-FC9B0F855E81}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9656ADE9-3283-4E05-9ACF-0504F688355E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9665185A-C4A0-4858-9F1C-C98541D552EC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9667627C-EBA6-4EFD-BAC4-E0C0D0A63D00}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{96B6089A-ABC9-4B74-8BFB-70CF43586533}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{97100B13-A9AD-4F8F-8FDB-FE07887D6B42}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{97E167A3-1DC3-4127-BE2C-544A147F9BF6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9842AFC6-FF39-4C80-BC6A-F730A5F60212}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9866551E-1F50-45A0-A8EE-972964CD575A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{987E7C60-E591-4DA4-A790-5BEC2BC5F19C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{98A50872-469F-45B4-B8A8-3ACBA6AB7B15}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{98C36EA3-F29D-4B39-8A24-34EA776E1515}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{98C8C2C4-4A00-4A11-8D8D-34B45B930F23}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{98D9440E-7411-4844-A04A-240F358CA8C1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{99061896-40C3-4EB5-BEA3-8D21AE658B80}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{990C68BE-49CF-4D05-89EE-4730DB061938}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9965327E-85D2-45F5-B5FB-FDB8CB26DC79}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9A022B39-DD52-4B59-A1B5-27505DA27EFA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9A53AF0C-581D-41F8-8F27-7511EDFD31C3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9A7553BF-49CE-43B7-B757-8F0CC8A524F8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9AFD0F24-B3D9-46F3-845F-E7A9C66A654B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9B21C285-1EE2-44E8-8E40-F3C867240E9E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9B2D045A-4117-4B07-8F36-2C2809E1C4C1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9B424791-FA5A-4A2B-B58D-24D737153820}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9BA98CB0-FB68-4E68-A443-98EEA67E71D9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9BFABE58-E7B6-4480-B4C8-7F1BD521F525}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9C1FA376-E5AD-4E31-9E66-F2B1D68F156D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9C8B18D1-86E3-4B32-9E94-1D8F1C59FBA2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9CAD0D04-2848-42A5-BCE3-088187B7384F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9CB7051F-F592-4609-91D9-4EB1788577B9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9CF057E3-A906-4337-B290-F9C1C4385B7B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9CF90ED5-12E0-422C-A681-FC27CAAD9321}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9D2D8129-B7A8-45DE-8EA9-97907BF6637B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9E81B3EC-2FBE-4B74-BC61-A77F480287E0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9E885C6D-2BC4-4B99-8744-CB0B98E5747B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9EB2BC61-7774-499C-A84F-E32AB1F6AD57}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9EFC342B-F876-496B-B154-ED38AD86BF90}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9F4FA9DA-5EC1-4E56-9DCB-6D4E8FB799F4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{9F8A57B1-E972-42DF-BD71-26FCCC668006}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A009CEA6-A347-46CC-A167-62D22E101524}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A026CB62-E592-4B19-A5DB-FF4D23375CF5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A0E7FE85-DE33-4565-97FE-F005D3E49023}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A0F2015A-9BA1-4A3F-83D3-43E87D125731}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A10D8D22-A4FE-492B-9255-8C0395094DD5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A1184436-682C-4A3F-98F7-3A79813694FF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A133B0E9-86A5-4F90-AF80-3A7AC89B696B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A1448187-516A-406F-A2D9-1EB87E24609D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A14524C4-8121-495B-814D-AF960416C38A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A1836EB3-343C-4633-BD09-123AC61C4542}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A1F060D3-30DD-4E99-BDDB-4529A69B8E7C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A250C44E-187C-440B-8D73-2DCB4B13E2C9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A2BD753F-8721-4E88-8476-43E33CBC3C74}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A2C223DC-05BD-44CA-86E0-7F6978A5BA82}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A309907E-F35B-47DF-BDD9-1D8A236FC6FC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A35142A2-D529-41B1-A3A9-BEF4EB907FEB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A3641027-ED71-4D5A-A3BD-EA259EC57D9B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A390B2C9-7407-4FAB-9C69-771E5D78F20C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A3EC1C0C-6DC9-4496-A9E6-B950B805CCA0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A44BC272-3A25-4C2A-867D-028A250CD0F6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A45B2604-892E-4E35-BE60-3EA6AFAECBBB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A4CD0869-125E-4081-8053-B245605662EB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A51A52D0-7B36-423E-9029-C1656A8F7893}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A5277698-3AD2-45D3-80AE-C1C550DF6054}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A58F6F5F-1AC4-434C-B9EA-00F8F3A0716A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A5F15511-820E-4D3A-816A-4DD4D40F3322}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A65134DD-AAE9-4E04-8A14-86301ECE855F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A6796A2A-639B-4A3F-AB6C-82FA57EAC73F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A694A977-0BDC-4CAB-A0B4-B35171769A78}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A6E8D2F9-BC71-47C8-9C80-BBF648E6B0D2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A734CAE7-84B2-4524-A024-A695581C3443}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A750EF11-4998-4A5B-9189-0F113DFCF6A6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A7743364-BD13-49E5-BA60-957663CBABAA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A7A036F1-8911-45E6-8962-6C3F2508352A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A7A5CF18-8A2C-45C0-9493-BF20067E225E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A7C6C209-79C3-433C-9698-716C3DBF9D94}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A81754F5-096F-4D10-A6DD-E4FBAFCC3BC4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A84CC7E9-B849-41C4-ACBF-933EBEE3E95A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A8A12771-211E-4191-91DC-98A0E2F2D1ED}

[ramping]

Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A8BBB203-E2E8-4357-8DE0-79326E5DCC0B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A909E5D0-1411-4672-89E0-430B94255F81}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A9162155-F022-4D75-B8EE-E1386A28A587}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A92919C6-9984-4D28-9323-F62A68372B24}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A97BFEF1-6E73-4083-AFA6-2E90E33C39EC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A9C19303-EE1B-497D-A7B2-FD584B9105DC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{A9FEAE1D-5550-465A-9371-01FC55512B12}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AAD503B1-71D1-491C-BF87-D81D8A2C4463}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AB1350A0-D9EC-404C-9156-CFD43660F8AF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AB466791-907D-4E99-BB91-B49FF35F5B14}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ABC319C8-B837-42F5-9D9A-BC44B2AA395F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ABD715E1-5F29-4B7A-8D0D-5FB15E4DD754}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ABE2318E-8A2B-48E8-86CC-C8F84D382268}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ABE672D7-F204-43E0-8C18-967405CE205D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ACB97234-3250-4853-BD85-8E7A43497469}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ACC435BD-D827-40A9-B0A4-FB613BD8EE00}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ACE3DB78-C4EB-40C1-B918-6AB2C43DA728}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AD70E8C9-5080-4261-9863-624E3C838B24}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AD88075C-8E8C-4FAC-A781-1686AA625F88}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ADE75382-8A9B-4E5C-B296-7DA32D8E800E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ADEDAB71-7FDC-43DD-B7C0-38087E4BCA0C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ADF7E6C2-0336-47C5-9A0E-C3E39DFD5B0F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AE24C65B-2EA7-41EB-B4F1-D436584DF10E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AE620999-5027-49E1-A044-08FD48C79BBE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AE642FA7-84D8-499D-B2F3-600725A62D9C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AEBE45B9-BAEC-4F93-8997-52F27A4D9B7E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AEF806F3-BDDB-46C4-8DBB-59078865343D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AF0065B0-41AB-4B4E-8323-C34119ECA140}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AF23C393-A754-458B-AEF4-74505EAEAA2A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{AF4E65B0-64C1-4856-A064-360E94C866BA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B057CC62-9F7B-44C6-B9B4-C1640A6D0A06}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B0C1ACAA-7691-4B6B-87D1-4D15591460BF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B0F28B03-D65E-48F2-AC7B-99A134A8FFE9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B14225CC-5092-46F5-B848-72C68FF87C30}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B1C1141F-AAEC-4074-A042-1F6D3F53529C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B1E7C213-4291-4A3C-B5FF-DA70782C6156}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B1E9D8FE-2FFA-455A-B94F-F5D50A4BC82C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B23616AC-1EDA-4C7B-BAC3-27D8F43E8E79}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B238FFB5-9AFD-4EF7-9D37-158C34349C1C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B2A2A3D8-06DC-4CAE-88D1-ED2CCC5DCA36}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B2EC46A9-76A6-476B-9F3A-85BECD585230}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B2ECA52E-A7C0-4AE5-9AF2-E517A9248EAD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B2EEC5C4-C4FE-4A62-8D72-E1643C02ABD2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B312C2D8-60D2-43C6-BC38-F9D84FCBF16B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B31A9992-2885-4EAC-924C-C81F3A9640A8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B37372D5-D010-427A-9CFC-167F0EE7BF26}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B3A99A9D-BD11-4589-912A-F3EA997A40D8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B3C968CB-FCA5-4562-ADE6-92A1CC944140}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B3DBEE9D-F694-436E-B908-DB2334909BE4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B3E95F8C-B36C-4015-A48F-75A741CEF6CB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B3EE0090-6275-4BCB-99A6-A290F95A9341}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B41A8D63-2307-40C1-BE30-A95324F6747F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B4D474B1-6287-40D2-A205-8403240E9206}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B4EB72D9-1DFA-4FE9-8B68-ED818752A51E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B53CFF33-969E-4CAC-AFB4-CF27B79DFF19}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B6BA2A03-59B2-4336-A745-8ACD648D6A5E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B6CFC893-E492-48DA-9D70-9D1639EF9464}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B73D95AD-523B-4B26-B381-C8C772225694}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B76BA0C4-978A-4EB0-AA51-5A98074E632F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B7BCAE65-B54C-4318-8F41-F687D533DC36}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B8968F42-0828-45B2-9EC3-446B46D259DA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B8A09FB2-8B6D-44A4-A8FA-8E5C4AC9F02B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B8E1DC0C-E3D9-498C-8BC9-B9B35F793F19}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B8E58704-0FE9-46A1-BAA1-30E2CBE755EE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B8ED14FA-9D62-43B7-9BF3-3A4E2A4F2D12}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B8FFA591-601C-44EB-91FD-57F4922D1D62}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B96238FD-2231-4100-B31D-E7339B2A7315}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B9642D81-B9F9-4992-AE34-54030BBD3B40}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{B9644C57-B72F-41C0-B8AC-80BFE90FED5B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BA03D389-EBE8-481C-A14F-C1BA5CC87AC2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BA168BA7-E3CE-45C5-99D3-BD821080A7B4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BA7BA6E4-2E60-4FB1-8E85-1E99FE142728}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BB2F2E05-2288-46A7-B42B-641EFF8ACAAB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BB393022-1E36-4633-8FF6-2215AB4C107E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BB7ECFD8-0D94-41B8-9E31-D15606A7C864}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BBAE37EC-C7FE-44B5-83A2-35F5CC23A577}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BC51B6A0-928A-4D1F-8A85-51DC5B1BE898}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BCFB9799-6ADC-4ED1-8D61-A316E97AD8FB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BD257D38-E039-413F-A6B4-88798000CD84}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BD4EAF2A-ABDF-4A5C-B91C-30F9E57F65A4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BD709C6E-96BB-4ABA-86A0-A69A3588E7B4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BE5C6B8F-E444-4C60-9588-E32410F28D1B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BE63C7AF-5F46-4897-A846-5C64D550F8A6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BE73DBA9-6BA3-4C3D-BD78-35F1B8AA63DC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BE9A6F13-901E-4EB6-AAB7-DDCA3C21C5BC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BEDF63EC-58B3-4904-9E33-18BC8C069DA9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BF04D3FF-6A85-42D8-B865-08BDF3EC9841}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BF306EF9-4C8A-4D5C-9FF1-EF971337AC2E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BF33801E-EA40-43A1-996B-B98C46027702}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{BFE18766-5ADB-48A0-92F5-0BF493034594}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C0110000-5ACD-426B-8BA9-51B2F714D943}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C04BDA70-1B5A-47F2-9567-649637D3979E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C0886715-8AE5-4BB6-91A3-CBFB8A133434}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C0A28D94-29BA-4A95-8272-127D3E5C6EDC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C0BD6F97-8B4C-4815-A515-8F8795D1F615}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C0E854DB-0193-40AE-8730-0BA30CE31FE4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C106AF40-B0B8-4A37-A4DD-6560D87C70DE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C195888F-B3AC-4410-A514-D09E39C58463}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C1C66AE2-C1B7-4281-9A56-8995DBE53929}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C1D06A87-662C-4707-94A8-D956A34A0A13}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C1F40942-F8A2-4B3F-BDDA-8945316DC639}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C23E13EE-0AAC-4796-B58E-BF3FCBA42DD8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C2BD0F64-48F6-4F2C-BA7F-B28B53A2D837}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C2CA1767-1D00-4EB0-A63E-A1B11A012310}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C35BC370-5663-42CA-94F5-145750E58E4B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C38CF010-5C2B-4DE6-A189-C0ACFFDBFFB3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C407D54F-C5EB-487E-82A6-6879CE9EDCA0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C408D286-6A44-42C5-B1FD-0F00AE872469}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C42FC2FA-4868-49B5-A110-8A821C37BC16}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C4695FFC-F5DD-4381-ADC0-A068EC478FCD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C4C03EC8-F2BC-495E-80AF-EE7430F0084C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C4E4E52C-3A92-4D1F-9B15-A234967235BA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C508E471-5280-4EF9-8AB2-799734493A59}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C54C8426-0CC4-44B9-B4E5-B31821F910F1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C5C67280-98E6-4517-B83D-1F0C7B80F51C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C63A6AAB-BA62-48E9-8FF8-FE003F626909}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C64411B1-7C9A-4682-B501-89B77160C0F8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C64FF276-B8C5-4E4C-AA67-9572A7CEC54E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C6B0D34B-6A2B-4834-875F-A7F945039071}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C7174AD3-FF9F-4F3D-932C-B8F66B2BECEC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C75A4B19-F508-4B0F-8EAE-7EA13D1AF947}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C7927537-5940-4AA4-8710-8AAE263222FA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C7A41E25-1B2F-4E07-9615-400946AB997F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C819C04E-C5BE-42EC-A31E-C00FA7495051}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C835F414-C2DA-410F-8362-CCB02E384ED0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C870546F-9737-4A29-A40D-BF72BFDDE552}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C875A3AA-E51D-4F4C-A547-6446065217F3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C8B7DAEF-FFF2-45E5-8232-991928CA1119}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C8C82E3C-5016-4C75-86EA-74DED2121BDB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C907117A-46BE-4585-9068-8534196F472E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C9614181-D3D2-41D4-BB0B-98861CE415D5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C973A081-E296-449F-8FE7-591D256C37AB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C983921A-6F39-46C4-BC8F-25EB046578C5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C9B823D0-3B50-4946-B6CC-E7E30A44EB6E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{C9BD62E5-6022-4339-B76B-19DEE84D15E1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CA2C579F-A8F8-4174-8A56-D9D390F36EB1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CA48707F-FC52-40A7-9766-17B9457CE238}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CA6484FF-719A-4EDD-8800-4C0D0B59679B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CB3B4FE4-1FAC-49D3-BB5D-6DC857233E75}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CB46178C-CC9C-44D1-B2C7-7CF502D0EC23}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CB77ED30-A141-4CBE-AF91-7107B4BB0745}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CBA19299-DE8A-4E1F-A3B2-EA2F710C19D1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CBC01338-0925-4FF4-8181-98F2E3C8F60C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CC3389CB-3277-4250-8513-9ADA22408533}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CC628C5E-3724-4C58-9765-9C95674727A3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CC7A7482-89C5-4E74-99AE-26044D7B708C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CCE0C8A2-3865-4C07-868D-647161ECF53D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CD31C68A-AC5E-4AA1-BE50-A5D750B46BDD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CDA1AC97-74E9-45CC-994B-5758CFB7E704}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CDA74A70-523A-4DB4-AF72-D580BCEA85B0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CE37B407-827C-47D2-A14E-A7F11FBD0E3C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CE7D5B46-3D24-49A8-84E3-AAB91472901E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CE7F6E3A-5253-454A-A857-458FF0491B4B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CF2D3F0C-1C70-42B7-BA9F-5FF99E859181}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CF471905-9469-4E6A-A0B4-6CE22A56E124}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CF832362-EABB-4979-93DA-771387526756}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CF871E18-5C04-4F57-BF1D-E24D7EEC84AA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CF8EF10F-F094-4688-B913-6441D4A8765A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{CFF8C441-0FAD-4A2D-8E31-F93C2E1136E3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D035F71C-9BA7-4723-91A0-8F614BB89D18}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D0386A68-9506-488F-9666-DAFA39BC00CA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D03BF0CD-B4B1-412B-BAFF-2E8C4D6F6813}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D0408229-745F-4700-9A38-4EF3B173B254}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D047AE1E-F648-4D1C-8139-794444C2C895}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D0930485-12AA-4D4E-BD3D-F26ADB8AC4E1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D12AF48C-24EA-4864-98ED-478E41719DAA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D1304BA9-4DA6-4D1D-B44B-489F9FA0E564}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D19DDE38-B9B6-419E-87CE-92E0FC77560B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D200A654-4AB4-4544-89DA-38F8459E8675}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D208019E-2187-40E7-93AD-47A6BAA0851E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D21F2736-495A-4815-9241-DF47CB108913}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D230D2FD-DA01-45DD-ABDC-50D5187FF6A9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D25BEDC1-B88B-43A7-AD7B-43EC6FD8DB23}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D267D775-210E-4767-BB3E-5D06053E77E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D272CEF4-0CD8-4F35-8C5A-DA1728B2253E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D30A2D9A-FD9E-49F9-BD0B-A430D92F4CD5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D35C46CB-436A-4574-A5AF-5764EE71171B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D35FE6C0-82FA-4EC3-8814-4C61938619DF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D377D9A3-BC2D-432C-9A80-812D98909D25}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D45BBA97-3D97-43F7-AA48-1CF341D5DF6B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D47AC829-4EB0-4448-874A-DB62C3026C20}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D4A9E714-EAB5-43D8-B1AA-4E4734919FC5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D4D5C9C2-A960-4858-86E7-93C69DAE0591}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D5590B8F-AB44-41E0-93EE-6E0778203F8C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D5B350B6-D9CD-44D9-A4EB-FA17211D59D1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D6213442-2DFC-4423-994D-B8D63E52ECB5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D6EA1C8F-76AB-4E3B-B615-CAF404CB4A2E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D7049BC4-6149-43D0-98F1-B6CB8D6118DE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D707D0A0-8C5A-4681-AA14-0ABE1987FBEB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D7DB164C-AF5C-4BF9-B87D-D600BDAEE551}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D8299585-E890-4604-A151-34B69E802E26}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D84E4969-3C4A-490B-9854-9260EA371062}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D892134C-F7B3-4264-96C4-E50CBEB1E115}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D8943DA0-D290-47BA-8194-1C7BEA62F8CD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D895BB33-194C-473E-8FCA-A4CD7DBA478A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D89B99FD-A7DA-4134-8840-782D10A0A81B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D89E0B13-140E-46EB-92CB-AF4A8ED0E7EB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D8AFA413-D2F6-4ED9-BD3F-203BFB15BC25}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D8B495FA-4A69-456E-B8C6-AD70210E6E27}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D9A757C8-FDE5-4E8D-9E45-8D30FC2AEC66}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D9B2E519-BBDC-4F3C-8019-4C148B8E2FFE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D9C55149-066C-4A27-86F3-59E5EB2FD3C4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{D9E476DD-D6AC-41A1-A871-B435A91C496E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DA8B6FE2-8B31-42E6-A385-64FDDE8052C9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DB0D14CD-E40E-4D80-80DF-542A70E11A38}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DB129F70-9615-478F-AAE1-53F39749341E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DBD20413-D840-4C47-8171-B02961093A14}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DC0E0ABE-CD6A-4122-8B85-C1F81AF72EFE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DD04DE98-792D-4A80-98CC-B1EE8CAFD8B9}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DD35916C-2268-4349-A6E2-8B0709055B11}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DD4C3796-8820-4B9A-AC9F-45F75ACF387C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DD50CCF6-BAEB-4EEA-AFC6-33714D3528AF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DD629A2A-A8C8-4CFE-942E-4C247290DF01}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DD9B0022-8F1F-4228-9330-8FD19863EA92}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DDB91F6A-9C63-4304-8656-563BCA4133C0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DE2C9A87-579E-4533-B474-780F11C8CE14}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DE3EE475-071C-4EE3-8D52-4C47550F6D14}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DE8B8B94-F825-49E0-8E74-EECF372EE417}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DE9BB19F-D71E-447E-90D8-61229E14C3AD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DEFE83AE-3697-43F5-9DBF-3510B9E30FAD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DF0C35F8-C3EA-414D-B6C5-0932B74356F7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DF1689F8-DE99-4F01-BA36-2E999E0E9634}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DF2640EA-5AEE-4075-B2B9-0442F5B19159}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DF525A42-C36E-4DAE-BB05-BC3E92615EAD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DFAD4818-CFC3-448E-B0AB-25D8D677936B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DFBADB5E-64C3-48B9-8BDE-72635AAA5CAD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{DFE869CA-FE15-4F6F-9D09-986C7054FAE2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E06248F5-BCFB-40F1-BEE6-B3F5379F489D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E08DCD6F-8F4D-46FE-899A-88078236AA28}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E09E0B10-368C-493A-9080-B818FA370E73}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E11013E2-8D56-458E-93AF-68EBFE42960F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E158ADF0-AA39-4CBB-BC86-E79E68250716}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E15AB56D-693F-45C9-84D9-E291A48038DD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E16841AC-15BE-49F3-BC85-27306F98A857}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E1ACD3AD-0912-47F5-9EEB-12A72BD82372}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E1B6FF94-8FAD-45C1-A695-3D630B004B49}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E1C3460E-40A9-42D6-B648-519A4FB8ED6B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E1D8F317-1CBD-4CA8-A4C4-6FE97DB81FF6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E29474FC-D104-4FE2-B914-3B8311CFDE02}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E2A28A3E-DB7B-4D3A-8635-4A4E695DF662}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E2ED0CC2-F348-47AF-AF76-D47DF55138C3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E3156BF3-790A-4894-BE97-CC52FC013D70}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E328B715-575B-470A-AD1E-7BC9CD104770}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E3358941-B0C1-43AA-84BA-D706561B4B3D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E362A7C8-7613-40E9-B37E-BA3DAB8941AD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E3AC57F2-2173-4D23-9639-528100BC1799}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E3F1629B-F39A-492B-8857-7D773F95D1E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E3FD3A21-38A9-4D14-9EAB-6B873FE346EC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E4058077-CBD4-4194-967F-37D1C775D985}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E41ED50A-6DD4-4C18-8BDA-5BC0247E2439}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E42DC4FA-DA28-4446-B869-02AD3530CFEF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E4356B7A-FCC1-4621-B726-1A9AD918CEC4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E455A622-2402-4023-8EF4-DF2D1B65A289}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E4732C3C-B1FE-47EF-8AF2-BA534F6F0D80}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E475C870-6C86-449A-ACC6-C03EBD5586E3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E481A433-13C1-404F-94EA-F735B33F6A52}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E4B73569-29C9-4C13-AA6F-5BD9DD1DACA2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E55F107F-7DD2-4320-B533-52A1A88D86D0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E5775624-2824-4DE8-B460-F087CE57D683}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E60BC5D2-BA4D-486D-B1BC-A64F50820AAD}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E62E6DF4-C191-477A-862C-CD7EBCA2EDA5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E6BC86F8-2207-4199-8ABB-214D01D2A131}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E6BD4907-6DE2-4166-BBD4-A5476C357549}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E6F272E3-FECA-415D-8902-E4A8E81DB916}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E7076E52-F545-4560-9645-38FC11274435}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E762C27F-889E-4657-B28E-1223A99057B4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E7842E53-EA85-49D2-A826-99190525E63E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E79714BA-6F5D-456D-BD6F-714FF98A7DC4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E7C5B02C-56B2-4E95-BEC9-68DC1B6E1890}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E7FBE6B6-3036-437F-AAB1-D0FB65EEACB4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E8127392-5824-4D3F-A547-414DA3BE98C2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E84B6F70-DE5B-4B70-B519-55E9716DEA83}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E8E8C845-3591-4E9D-AEA4-9045B9A84F7E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E8F07095-B3F5-4A2C-AE7B-25E757B3F747}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E9085550-E2A0-416C-975F-CBB038D7F54B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E9136AB6-27DF-4330-AEC7-F22E3CCD8578}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E945B8F9-4E7C-484B-B331-5544C27E2924}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E976EE80-AF25-47A4-AA07-6AFBBB037081}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E9C2C797-82E9-46D6-94CB-C0C2E9E5AB40}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{E9E59E7C-C1C8-4A4B-A9FB-59F1A1BDAFE8}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EA0700D3-3F91-4380-AF65-C26E11D822DF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EA0EAB37-5658-44A8-8BDA-2C213BC80048}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EA139C61-092A-405D-929D-6A1131DD8015}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EA284AE2-3E45-4B85-B7AB-1C2700F2B147}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EAA61BFB-C9E8-40DA-8BCC-FF47EB8B374D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EAF5B327-6FD7-4674-8A1F-CE7A2139C6DF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EB04C150-9589-4409-AFE6-5D319495E3A5}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EB0F0803-4DF1-48CB-8A67-D552ECB10894}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EB212C10-08A9-4677-8BD1-33AF28B6783B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EBFE01A2-1814-4E1E-99AA-25BC2B6C9B8E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EC56D578-F7B5-4D6E-A83B-B1EC72A014C7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EC6D8BE0-8100-4B6F-9D14-8DC4F3FF5B32}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ECB6D13E-165E-4B59-9B66-EECD32915F1A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ECD2BA01-6BDD-4FE7-82DA-06942128C65E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ECE96F49-5459-4DB0-9AA7-013BD244E227}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{ED69746F-0AAD-4207-A79D-269E4E7B969D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EDA005EF-243F-45EC-8788-D73E02AD9E62}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EDBAAB87-A13E-44FA-B584-1064E625C30D}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EEA6A4B4-F90A-4069-A3FF-2D4347307B43}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EEAC5352-0BA4-48F0-9207-3872B51F1F78}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EEE3C552-42E9-4800-9377-8D20D78726DC}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{EFF60BEC-BEEA-47E5-A3CC-E62A074B1063}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F0141F85-F8CD-49FB-9A0D-5D6CE66A224E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F0B4CF8A-852D-4C61-978B-97EE69E39B33}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F0D97B5F-05DC-4D15-9D5F-A3FE0F4C265E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F0E35838-4AAB-4457-A8FF-458A376111FE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F19A66EE-792E-429A-9D89-AF89DA16F21E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F19ECF49-135C-4AA0-B9C9-A2B3F96733E0}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F1AFA4CF-1D67-4DAC-B649-3F19BDEB0908}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F1DABF42-9FAF-4E73-B336-4C1408BB9702}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F2145634-1D5B-4082-BCD9-CEC018F2BDA1}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F259B341-FF10-43E8-BD99-7860629D8D8B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F2842306-8F86-42B3-8964-FE0C29A018EB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F28D4F9F-78A1-43B5-9772-86E93F44FE55}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F2F1B2B6-5E31-48A8-B8CD-72A6FFD089CA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F313085C-7AC1-4307-B45F-A5361242D55E}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F3373EE3-D0FF-4532-9ECE-FB3402E4659C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F3400413-588A-49F3-8241-27B0A1004B86}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F38CA740-2615-4A58-A3EC-E2CE37FCDA03}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F4118F2A-4A68-43F8-9E9C-14FC7A894E1C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F4A1217D-965C-4544-94F8-12078D893134}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F4D67D2D-6A3A-4BE3-B27A-E3197C99FF21}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F50434DA-7049-4F65-9D4E-EF1C9BD90679}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F523C1DB-7341-4F86-84A5-7CAD762BC20C}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F5653100-57DF-49E5-ADD6-9D3FA63DD5DE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F58600FF-05A6-4F3B-9EB1-28E7787F6825}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F5EE7C16-511B-4966-9FFC-EF8A6F3FF9C6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F6146D4C-2B91-4054-A68A-779AF03860E2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F691B264-BD0E-493C-8002-7062BAE70554}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F6D47B77-745A-4764-8853-AFBBE3B12957}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F6F4B07F-2FC9-4C6B-9442-4ECBA3870DAE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F7102612-A9A7-43BD-8279-A17F717B46B3}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F714D80A-BF2B-4BE8-948A-D9D77BF2E599}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F71AE3FA-E26E-412C-ACD7-D4D5B6D694C6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F732F2EC-745C-4508-9558-5A9CA211B226}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F7E8C937-4218-4840-A492-016BCBB2E4BE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F916FE03-5EFE-4554-B65C-AA3106C077E7}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F926BB10-1D06-4B24-8301-802A8A4848D4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F946C956-DBCF-4E63-A690-D5B90E131516}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F99527F8-043A-44E1-92B0-86F081F8B5C2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{F9D9A753-FCD9-4365-8D9D-8C9E6F4B24B2}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FA38E986-3BA2-41FB-905B-0D7A854C7A4F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FA7B9327-9C2B-4741-8BF3-A4CBE5E3F3DE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FABC8EA5-E821-435D-B0B3-3262C4FB5CC6}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FABE87F2-E8C4-4863-9147-6E705AB6474B}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FB206D62-430C-4A28-A161-04C4F1FA34FB}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FB4B66B0-13EB-4CB5-A867-90C4AD478431}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FB547D65-B5B6-4EA0-8F30-37A5E10379C4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FBD007BB-F567-49A6-A659-8707B9868883}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FBD74633-4A6A-450D-9B63-A6A56BC36276}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FC74D0BB-64D9-40F7-B8AC-AE0F55CC324F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FC791843-8EFC-4376-8948-2BD39BFE54BE}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FC87582C-6FF0-4537-9487-EB5BD7FD1567}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FCB39E12-FB33-4A99-9CE5-7C35BC587963}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FD280143-2048-4959-9D79-9A7A00BCA249}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FD420CBD-E166-4425-B455-8957D6A241DF}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FD96E89B-AE15-4D1C-B3A6-B3D3520DC06F}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FDF6516A-C500-447F-A925-086ABF13AB26}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FE0499F4-8E00-4EC2-8282-084F10EF0DAA}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FE388E55-9CD3-4478-B37F-E1B1B71EBC55}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FE3BC4FD-3BAC-4F32-BDB1-D5233E37A04A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FE789D05-9914-4260-88D3-2198B50BB334}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FEAFE8E5-9861-4AE5-8F05-2D9174CC5942}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FF6C8403-A41B-40A8-A36F-DAF70B2F7AD4}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FF6EA3A4-6331-4620-AE37-EA018B8B5067}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FFAF60A4-E43D-45A5-9BDC-73108B34C999}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FFC19321-AE43-4B7F-91AB-4D247CBB726A}
Successfully deleted: [Empty Folder] C:\Users\Wheelsup Club\appdata\local\{FFC54CBE-8172-4C91-81E4-4C42C38BDE43}



~~~ FireFox

Emptied folder: C:\Users\Wheelsup Club\AppData\Roaming\mozilla\firefox\profiles\ra2bxp65.default-1383529527463\minidumps [1 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 11/05/2013 at 9:25:43.39
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


- r

[ken545]

Thanks for the logs, things with the popups any better ?

Please download Malwarebytes from Here (http://www.malwarebytes.org/mbam-download.php) or Here (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html)


Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
http://i24.photobucket.com/albums/c30/ken545/MBAMCapture.jpg
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Post the report please

[ramping]

1. I added the Adblock Plus Pop-up Addon 0.9.1 extension to my firefox. So, the pop-ups appear to have stopped.

I also re-set my firefox and discovered that it had the SuperLyrics virus installed, as an extension. So, I disabled it. Apparently, I installed it, as another firefox extension, and then forgot about it. Yet, many of the annoying ads which kept appearing had "SuperLyrics" written under them.

I'm surprised by all the malware that has been found, on my machine!





2. mbam-log-2013-11-05 (14-13-33).txt:



Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.11.05.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
Wheelsup Club :: WHEELSUPCLUB-PC [administrator]

11/5/2013 2:13:33 PM
mbam-log-2013-11-05 (14-13-33).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 279534
Time elapsed: 39 minute(s), 10 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 4
C:\Users\Wheelsup Club\AppData\Local\Temp\ct3298580 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\AppData\Local\Temp\ct3298580\xpi (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\AppData\Local\Temp\ct3298580\xpi\defaults (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\AppData\Local\Temp\ct3298580\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

Files Detected: 54
C:\Users\Wheelsup Club\Downloads\7-ZipSetup(1).exe (PUP.Optional.Installcore) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\7-ZipSetup.exe (PUP.Optional.Installcore) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\applianflv.exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\avidemux_2.6.0_win32.exe (PUP.Optional.DownloadSponsor.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\AxCrypt-1.7.2976.0-Setup.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\Babylon9_setup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\BearShareSetup-r1116-n-bf(1).exe (PUP.Optional.MusicToolbar.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\BearShareSetup-r1116-n-bf.exe (PUP.Optional.MusicToolbar.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\Cookie Editor.exe (Adware.Solimba) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\EZVID_Setup(1).exe (PUP.Optional.Ibryte) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\FlashPlayerPro.exe (PUP.Optional.AirInstaller) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\freecorder7-setup.exe (PUP.DownloadAdmin) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\FreeFileViewer2011Setup.exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\FreeFileViewerSetup.exe (PUP.Optional.InstallCore) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\freefileviewer_730(1).exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\freefileviewer_730.exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\FreemakeVideoConverterSetup.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\FreeStudioSetup.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\FreeWebMVideoConverter(4).exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\fvdplayer.exe (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\gimpshop_gimpshop_google_7760614.exe (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\HC2Setup.exe (PUP.Optional.Somoto) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\installer_copernic_desktop_search_3_5_1_build_10_English.exe (PUP.Optional.VIT) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\installer_file_splitter_and_joiner_3_3_English.exe999DA391C895FB3E01624649 (Adware.Downware) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\installer_torrent_searcher_torrentsearcher-9_0rc1-setup_English.exe (PUP.Optional.VIT) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\InternationalPrimoPDF(1).exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\InternationalPrimoPDF.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\Java(1).exe (PUP.Optional.BundleInstaller.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\Java.exe (PUP.Optional.BundleInstaller.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\Java.zip (PUP.Optional.BundleInstaller.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\oi_CookieMonsterSetupexe.exe (PUP.BundleInstaller.OI) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\PDFConverterSetup (1).exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\PDFConverterSetup.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\rcsetup146-fdu.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\Setup(2).exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\setup(7).exe (PUP.Optional.Bundlelore.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\Setup(8).exe (PUP.Optional.IBryte) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_4free-video-converter(1).exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_4free-video-converter.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_cookie-viewer.exe (PUP.Optional.Softonic.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_format-factory.exe (PUP.Optional.Softonic.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_free-audio-editor.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_ibm-lotus-symphony(1).exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_ibm-lotus-symphony(2).exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_ibm-lotus-symphony.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_kigo-m4v-converter-for-win.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_oxelon-media-converter.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_for_the-fastest-file-splitter-and-joiner.exe (PUP.Optional.Softonic.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\SoftonicDownloader_para_jasp-just-another-file-split-program.exe (PUP.Optional.Softonic.A) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\splitter-bi(1).exe (PUP.Optional.Somoto) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\splitter-bi.exe (PUP.Optional.Somoto) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\video_downloader.exe (PUP.Optional.Bundlore) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\vlcmediaplayer-setup.exe (PUP.DownloadAdmin) -> Quarantined and deleted successfully.
C:\Users\Wheelsup Club\Downloads\WinampSetup.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

(end)


- r

[ken545]

Sometimes you get this garbage by not reading what your installing and just clicking next. I find a lot of people have all this installed when they have other people also using there computer. A good example is when updating Java, if you do not read what your installing and uncheck Ask Toolbar it will install it and make it your default search engine, its really not malware but just an inferior search engine.

Hang on a sec, be right back

[ken545]

Go ahead and run this program, with the amount of garbage found so far there may be more to remove

Download ComboFix from one of these locations:

Link 1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)


* IMPORTANT !!! Save ComboFix.exe to your Desktop


Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
See this Link (http://www.bleepingcomputer.com/forums/topic114351.html) for programs that need to be disabled and instruction on how to disable them.
Remember to re-enable them when we're done.


Double click on ComboFix.exe & follow the prompts.


As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.


Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.



http://img.photobucket.com/albums/v706/ried7/RC1.png


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

http://img.photobucket.com/albums/v706/ried7/RC2-1.png

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.

[ramping]

Unfortunately, I was unable to run ComboFix, because the instructions for temporarily-disabling Spybot were apparently outdated.

I use:

Spybot

version: 2.2.21.0
Start Center: 2.2.21.129

As a result, I did not know how to temporarily disable my Spybot.

- r

[ken545]

Have you tried it this way
http://www.safer-networking.org/faq/how-to-disable-spybot-sd-temporarily/

[ramping]

1. I appear to have been able to find the proper Spybot disable instructions, for v. 2.




2. I notice that, under: "Other Running Processes" (below), there is a reference to "c:\windows\SysWOW64\java.exe".

Yet, I thought "java.exe" was a bogus program, because after I tried installing it a few days ago, it took me to a page which said: "Oops. The program did not do what you were expecting." Or something like that. After which, 171 problem programs where found on my machine and it was incurring many difficulties.

I notice that "java.exe" is no longer in my "Downloads" directory.




3. Acting on advice, from Avast!, this morning, I updated "java", from v. 6 to v. 7. After which, I checked the version via my control panel and it said Oracle plus v. 7. So, I'm assuming that the process, this time, was legit.




4. ComboFix:


ComboFix 13-11-04.01 - Wheelsup Club 11/07/2013 10:58:00.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5872.2640 [GMT -5:00]
Running from: c:\users\Wheelsup Club\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\downloader.exe
c:\users\Wheelsup Club\Documents\QPW0001.TMP
c:\users\Wheelsup Club\Documents\QPW0002.TMP
c:\users\Wheelsup Club\Documents\QPW0003.TMP
c:\users\Wheelsup Club\Documents\QPW0004.TMP
c:\users\Wheelsup Club\Documents\QPW0005.TMP
c:\users\Wheelsup Club\Documents\QPW0006.TMP
c:\users\Wheelsup Club\Documents\QPW0007.TMP
c:\users\Wheelsup Club\Documents\QPW0008.TMP
c:\users\Wheelsup Club\Documents\QPW0009.TMP
c:\users\Wheelsup Club\Documents\QPW0010.TMP
c:\users\Wheelsup Club\Documents\QPW0011.TMP
c:\users\Wheelsup Club\Documents\QPW0012.TMP
c:\users\Wheelsup Club\Documents\QPW0013.TMP
c:\users\Wheelsup Club\Documents\QPW0014.TMP
c:\users\Wheelsup Club\Documents\QPW0015.TMP
c:\users\Wheelsup Club\Documents\QPW0016.TMP
c:\users\Wheelsup Club\Documents\QPW0017.TMP
c:\users\Wheelsup Club\Documents\QPW0018.TMP
c:\users\Wheelsup Club\Documents\QPW0019.TMP
c:\users\Wheelsup Club\Documents\QPW0020.TMP
c:\users\Wheelsup Club\Documents\QPW0021.TMP
c:\users\Wheelsup Club\Documents\QPW0022.TMP
c:\users\Wheelsup Club\Documents\QPW0023.TMP
c:\users\Wheelsup Club\Documents\QPW0024.TMP
c:\users\Wheelsup Club\Documents\QPW0025.TMP
c:\users\Wheelsup Club\Documents\QPW0026.TMP
c:\users\Wheelsup Club\Documents\QPW0027.TMP
c:\users\Wheelsup Club\Documents\QPW0028.TMP
c:\users\Wheelsup Club\Documents\QPW0029.TMP
c:\users\Wheelsup Club\Documents\QPW0030.TMP
c:\users\Wheelsup Club\Documents\QPW0031.TMP
c:\users\Wheelsup Club\Documents\QPW0032.TMP
c:\users\Wheelsup Club\Documents\QPW0033.TMP
c:\users\Wheelsup Club\Documents\QPW0034.TMP
c:\users\Wheelsup Club\Documents\QPW0035.TMP
c:\users\Wheelsup Club\Documents\QPW0036.TMP
c:\users\Wheelsup Club\Documents\QPW0037.TMP
c:\users\Wheelsup Club\Documents\QPW0038.TMP
c:\users\Wheelsup Club\Documents\QPW0039.TMP
c:\users\Wheelsup Club\Documents\QPW0040.TMP
c:\users\Wheelsup Club\Documents\QPW0041.TMP
c:\users\Wheelsup Club\Documents\QPW0042.TMP
c:\users\Wheelsup Club\Documents\QPW0043.TMP
c:\users\Wheelsup Club\Documents\QPW0044.TMP
c:\users\Wheelsup Club\Documents\QPW0045.TMP
c:\users\Wheelsup Club\Documents\QPW0046.TMP
c:\users\Wheelsup Club\Documents\QPW0047.TMP
c:\users\Wheelsup Club\Documents\QPW0048.TMP
c:\users\Wheelsup Club\Documents\QPW0049.TMP
c:\users\Wheelsup Club\Documents\QPW0050.TMP
c:\users\Wheelsup Club\Documents\QPW0051.TMP
c:\users\Wheelsup Club\Documents\QPW0052.TMP
c:\users\Wheelsup Club\Documents\QPW0053.TMP
c:\users\Wheelsup Club\Documents\QPW0054.TMP
c:\users\Wheelsup Club\Documents\QPW0055.TMP
c:\users\Wheelsup Club\Documents\QPW0056.TMP
c:\users\Wheelsup Club\Documents\QPW0057.TMP
c:\users\Wheelsup Club\Documents\QPW0058.TMP
c:\users\Wheelsup Club\Documents\QPW0059.TMP
c:\users\Wheelsup Club\Documents\QPW0060.TMP
c:\users\Wheelsup Club\Documents\QPW0061.TMP
c:\users\Wheelsup Club\Documents\QPW0062.TMP
c:\users\Wheelsup Club\Documents\QPW0063.TMP
c:\users\Wheelsup Club\Documents\QPW0064.TMP
c:\users\Wheelsup Club\Documents\QPW0065.TMP
c:\users\Wheelsup Club\Documents\QPW0066.TMP
c:\users\Wheelsup Club\Documents\QPW0067.TMP
c:\users\Wheelsup Club\Documents\QPW0068.TMP
c:\users\Wheelsup Club\Documents\QPW0069.TMP
c:\users\Wheelsup Club\Documents\QPW0070.TMP
c:\users\Wheelsup Club\Documents\QPW0071.TMP
c:\users\Wheelsup Club\Documents\QPW0072.TMP
c:\users\Wheelsup Club\Documents\QPW0073.TMP
c:\users\Wheelsup Club\Documents\QPW0074.TMP
c:\users\Wheelsup Club\Documents\QPW0075.TMP
c:\users\Wheelsup Club\Documents\QPW0076.TMP
c:\users\Wheelsup Club\Documents\QPW0077.TMP
c:\users\Wheelsup Club\Documents\QPW0078.TMP
c:\users\Wheelsup Club\Documents\QPW0079.TMP
c:\users\Wheelsup Club\Documents\QPW0080.TMP
c:\users\Wheelsup Club\Documents\QPW0081.TMP
c:\users\Wheelsup Club\Documents\QPW0082.TMP
c:\users\Wheelsup Club\Documents\QPW0083.TMP
c:\users\Wheelsup Club\Documents\QPW0084.TMP
c:\users\Wheelsup Club\Documents\QPW0085.TMP
c:\users\Wheelsup Club\Documents\QPW0086.TMP
c:\users\Wheelsup Club\Documents\QPW0087.TMP
c:\users\Wheelsup Club\Documents\QPW0088.TMP
c:\users\Wheelsup Club\Documents\QPW0089.TMP
c:\users\Wheelsup Club\Documents\QPW0090.TMP
c:\users\Wheelsup Club\Documents\QPW0091.TMP
c:\users\Wheelsup Club\Documents\QPW0092.TMP
c:\users\Wheelsup Club\Documents\QPW0093.TMP
c:\users\Wheelsup Club\Documents\QPW0094.TMP
c:\users\Wheelsup Club\Documents\QPW0095.TMP
c:\users\Wheelsup Club\Documents\QPW0096.TMP
c:\users\Wheelsup Club\Documents\QPW0097.TMP
c:\users\Wheelsup Club\Documents\QPW0098.TMP
c:\users\Wheelsup Club\Documents\QPW0099.TMP
c:\users\Wheelsup Club\Documents\QPW0100.TMP
c:\users\Wheelsup Club\Documents\QPW0101.TMP
c:\users\Wheelsup Club\Documents\QPW0102.TMP
c:\users\Wheelsup Club\Documents\QPW0103.TMP
c:\users\Wheelsup Club\Documents\QPW0104.TMP
c:\users\Wheelsup Club\Documents\QPW0105.TMP
c:\users\Wheelsup Club\Documents\QPW0106.TMP
c:\users\Wheelsup Club\Documents\QPW0107.TMP
c:\users\Wheelsup Club\Documents\QPW0108.TMP
c:\users\Wheelsup Club\Documents\QPW0109.TMP
c:\users\Wheelsup Club\Documents\QPW0110.TMP
c:\users\Wheelsup Club\Documents\QPW0111.TMP
c:\users\Wheelsup Club\Documents\QPW0112.TMP
c:\users\Wheelsup Club\Documents\QPW0113.TMP
c:\users\Wheelsup Club\Documents\QPW0114.TMP
c:\users\Wheelsup Club\Documents\QPW0115.TMP
c:\users\Wheelsup Club\Documents\QPW0116.TMP
c:\users\Wheelsup Club\Documents\QPW0117.TMP
c:\users\Wheelsup Club\Documents\QPW0118.TMP
c:\users\Wheelsup Club\Documents\QPW0119.TMP
c:\users\Wheelsup Club\Documents\QPW0120.TMP
c:\users\Wheelsup Club\Documents\QPW0121.TMP
c:\users\Wheelsup Club\Documents\QPW0122.TMP
c:\users\Wheelsup Club\Documents\QPW0123.TMP
c:\users\Wheelsup Club\Documents\QPW0124.TMP
c:\users\Wheelsup Club\Documents\QPW0125.TMP
c:\users\Wheelsup Club\Documents\QPW0126.TMP
c:\users\Wheelsup Club\Documents\QPW0127.TMP
c:\users\Wheelsup Club\Documents\QPW0128.TMP
c:\users\Wheelsup Club\Documents\QPW0129.TMP
c:\users\Wheelsup Club\Documents\QPW0130.TMP
c:\users\Wheelsup Club\Documents\QPW0131.TMP
c:\users\Wheelsup Club\Documents\QPW0132.TMP
c:\users\Wheelsup Club\Documents\QPW0133.TMP
c:\users\Wheelsup Club\Documents\QPW0134.TMP
c:\users\Wheelsup Club\Documents\QPW0135.TMP
c:\users\Wheelsup Club\Documents\QPW0136.TMP
c:\users\Wheelsup Club\Documents\QPW0137.TMP
c:\users\Wheelsup Club\Documents\QPW0138.TMP
c:\users\Wheelsup Club\Documents\QPW0139.TMP
c:\users\Wheelsup Club\Documents\QPW0140.TMP
c:\users\Wheelsup Club\Documents\QPW0141.TMP
c:\users\Wheelsup Club\Documents\QPW0142.TMP
c:\users\Wheelsup Club\Documents\QPW0143.TMP
c:\users\Wheelsup Club\Documents\QPW0144.TMP
c:\users\Wheelsup Club\Documents\QPW0145.TMP
c:\users\Wheelsup Club\Documents\QPW0146.TMP
c:\users\Wheelsup Club\Documents\QPW0147.TMP
c:\users\Wheelsup Club\Documents\QPW0148.TMP
c:\users\Wheelsup Club\Documents\QPW0149.TMP
c:\users\Wheelsup Club\Documents\QPW0150.TMP
c:\users\Wheelsup Club\Documents\QPW0151.TMP
c:\users\Wheelsup Club\Documents\QPW0152.TMP
c:\users\Wheelsup Club\Documents\QPW0153.TMP
c:\users\Wheelsup Club\Documents\QPW0154.TMP
c:\users\Wheelsup Club\Documents\QPW0155.TMP
c:\users\Wheelsup Club\Documents\QPW0156.TMP
c:\users\Wheelsup Club\Documents\QPW0157.TMP
c:\users\Wheelsup Club\Documents\QPW0158.TMP
c:\users\Wheelsup Club\Documents\QPW0159.TMP
c:\users\Wheelsup Club\Documents\QPW0160.TMP
c:\users\Wheelsup Club\Documents\QPW0161.TMP
c:\users\Wheelsup Club\Documents\QPW0162.TMP
c:\users\Wheelsup Club\Documents\QPW0163.TMP
c:\users\Wheelsup Club\Documents\QPW0164.TMP
c:\users\Wheelsup Club\Documents\QPW0165.TMP
c:\users\Wheelsup Club\Documents\QPW0166.TMP
c:\users\Wheelsup Club\Documents\QPW0167.TMP
c:\users\Wheelsup Club\Documents\QPW0168.TMP
c:\users\Wheelsup Club\Documents\QPW0169.TMP
c:\users\Wheelsup Club\Documents\QPW0170.TMP
c:\users\Wheelsup Club\Documents\QPW0171.TMP
c:\users\Wheelsup Club\Documents\QPW0172.TMP
c:\users\Wheelsup Club\Documents\QPW0173.TMP
c:\users\Wheelsup Club\Documents\QPW0174.TMP
c:\users\Wheelsup Club\Documents\QPW0175.TMP
c:\users\Wheelsup Club\Documents\QPW0176.TMP
c:\users\Wheelsup Club\Documents\QPW0177.TMP
c:\users\Wheelsup Club\Documents\QPW0178.TMP
c:\users\Wheelsup Club\Documents\QPW0179.TMP
c:\users\Wheelsup Club\Documents\QPW0180.TMP
c:\users\Wheelsup Club\Documents\QPW0181.TMP
c:\users\Wheelsup Club\Documents\QPW0182.TMP
c:\users\Wheelsup Club\Documents\QPW0183.TMP
c:\users\Wheelsup Club\Documents\QPW0184.TMP
c:\users\Wheelsup Club\Documents\QPW0185.TMP
c:\users\Wheelsup Club\Documents\QPW0186.TMP
c:\users\Wheelsup Club\Documents\QPW0187.TMP
c:\users\Wheelsup Club\Documents\QPW0188.TMP
c:\users\Wheelsup Club\Documents\QPW0189.TMP
c:\users\Wheelsup Club\Documents\QPW0190.TMP
c:\users\Wheelsup Club\Documents\QPW0191.TMP
c:\users\Wheelsup Club\Documents\QPW0192.TMP
c:\users\Wheelsup Club\Documents\QPW0193.TMP
c:\users\Wheelsup Club\Documents\QPW0194.TMP
c:\users\Wheelsup Club\Documents\QPW0195.TMP
c:\users\Wheelsup Club\Documents\QPW0196.TMP
c:\users\Wheelsup Club\Documents\QPW0197.TMP
c:\users\Wheelsup Club\Documents\QPW0198.TMP
c:\users\Wheelsup Club\Documents\QPW0199.TMP
c:\users\Wheelsup Club\Documents\QPW0200.TMP
c:\users\Wheelsup Club\Documents\QPW0201.TMP
c:\users\Wheelsup Club\Documents\QPW0202.TMP
c:\users\Wheelsup Club\Documents\QPW0203.TMP
c:\users\Wheelsup Club\Documents\QPW0204.TMP
c:\users\Wheelsup Club\Documents\QPW0205.TMP
c:\users\Wheelsup Club\Documents\QPW0206.TMP
c:\users\Wheelsup Club\Documents\QPW0207.TMP
c:\users\Wheelsup Club\Documents\QPW0208.TMP
c:\users\Wheelsup Club\Documents\QPW0209.TMP
c:\users\Wheelsup Club\Documents\QPW0210.TMP
c:\users\Wheelsup Club\Documents\QPW0211.TMP
c:\users\Wheelsup Club\Documents\QPW0212.TMP
c:\users\Wheelsup Club\Documents\QPW0213.TMP
c:\users\Wheelsup Club\Documents\QPW0214.TMP
c:\users\Wheelsup Club\Documents\QPW0215.TMP
c:\users\Wheelsup Club\Documents\QPW0216.TMP
c:\users\Wheelsup Club\Documents\QPW0217.TMP
c:\users\Wheelsup Club\Documents\QPW0218.TMP
c:\users\Wheelsup Club\Documents\QPW0219.TMP
c:\users\Wheelsup Club\Documents\QPW0220.TMP
c:\users\Wheelsup Club\Documents\QPW0221.TMP
c:\users\Wheelsup Club\Documents\QPW0222.TMP
c:\users\Wheelsup Club\Documents\QPW0223.TMP
c:\users\Wheelsup Club\Documents\QPW0224.TMP
c:\users\Wheelsup Club\Documents\QPW0225.TMP
c:\users\Wheelsup Club\Documents\QPW0226.TMP
c:\users\Wheelsup Club\Documents\QPW0227.TMP
c:\users\Wheelsup Club\Documents\QPW0228.TMP
c:\users\Wheelsup Club\Documents\QPW0229.TMP
c:\users\Wheelsup Club\Documents\QPW0230.TMP
c:\users\Wheelsup Club\Documents\QPW0231.TMP
c:\users\Wheelsup Club\Documents\QPW0232.TMP
c:\users\Wheelsup Club\Documents\QPW0233.TMP
c:\users\Wheelsup Club\Documents\QPW0234.TMP
c:\users\Wheelsup Club\Documents\QPW0235.TMP
c:\users\Wheelsup Club\Documents\QPW0236.TMP
c:\users\Wheelsup Club\Documents\QPW0237.TMP
c:\users\Wheelsup Club\Documents\QPW0238.TMP
c:\users\Wheelsup Club\Documents\QPW0239.TMP
c:\users\Wheelsup Club\Documents\QPW0240.TMP
c:\users\Wheelsup Club\Documents\QPW0241.TMP
c:\users\Wheelsup Club\Documents\QPW0242.TMP
c:\users\Wheelsup Club\Documents\QPW0243.TMP
c:\users\Wheelsup Club\Documents\QPW0244.TMP
c:\users\Wheelsup Club\Documents\QPW0245.TMP
c:\users\Wheelsup Club\Documents\QPW0246.TMP
c:\users\Wheelsup Club\Documents\QPW0247.TMP
c:\users\Wheelsup Club\Documents\QPW0248.TMP
c:\users\Wheelsup Club\Documents\QPW0249.TMP
c:\users\Wheelsup Club\Documents\QPW0250.TMP
c:\users\Wheelsup Club\Documents\QPW0251.TMP
c:\users\Wheelsup Club\Documents\QPW0252.TMP
c:\users\Wheelsup Club\Documents\QPW0253.TMP
c:\users\Wheelsup Club\Documents\QPW0254.TMP
c:\users\Wheelsup Club\Documents\QPW0255.TMP
c:\users\Wheelsup Club\Documents\QPW0256.TMP
c:\users\Wheelsup Club\Documents\QPW0257.TMP
c:\users\Wheelsup Club\Documents\QPW0258.TMP
c:\users\Wheelsup Club\Documents\QPW0259.TMP
c:\users\Wheelsup Club\Documents\QPW0260.TMP
c:\users\Wheelsup Club\Documents\QPW0261.TMP
c:\users\Wheelsup Club\Documents\QPW0262.TMP
c:\users\Wheelsup Club\Documents\QPW0263.TMP
c:\users\Wheelsup Club\Documents\QPW0264.TMP
c:\users\Wheelsup Club\Documents\QPW0265.TMP
c:\users\Wheelsup Club\Documents\QPW0266.TMP
c:\users\Wheelsup Club\Documents\QPW0267.TMP
c:\users\Wheelsup Club\Documents\QPW0268.TMP
c:\users\Wheelsup Club\Documents\QPW0269.TMP
c:\users\Wheelsup Club\Documents\QPW0270.TMP
c:\users\Wheelsup Club\Documents\QPW0271.TMP
c:\users\Wheelsup Club\Documents\QPW0272.TMP
c:\users\Wheelsup Club\Documents\QPW0273.TMP
c:\users\Wheelsup Club\Documents\QPW0274.TMP
c:\users\Wheelsup Club\Documents\QPW0275.TMP
c:\users\Wheelsup Club\Documents\QPW0276.TMP
c:\users\Wheelsup Club\Documents\QPW0277.TMP
c:\users\Wheelsup Club\Documents\QPW0278.TMP
c:\users\Wheelsup Club\Documents\QPW0279.TMP
c:\users\Wheelsup Club\Documents\QPW0280.TMP
c:\users\Wheelsup Club\Documents\QPW0281.TMP
c:\users\Wheelsup Club\Documents\QPW0282.TMP
c:\users\Wheelsup Club\Documents\QPW0283.TMP
c:\users\Wheelsup Club\Documents\QPW0284.TMP
c:\users\Wheelsup Club\Documents\QPW0285.TMP
c:\users\Wheelsup Club\Documents\QPW0286.TMP
c:\users\Wheelsup Club\Documents\QPW0287.TMP
c:\users\Wheelsup Club\Documents\QPW0288.TMP
c:\users\Wheelsup Club\Documents\QPW0289.TMP
c:\users\Wheelsup Club\Documents\QPW0290.TMP
c:\users\Wheelsup Club\Documents\QPW0291.TMP
c:\users\Wheelsup Club\Documents\QPW0292.TMP
c:\users\Wheelsup Club\Documents\QPW0293.TMP
c:\users\Wheelsup Club\Documents\QPW0294.TMP
c:\users\Wheelsup Club\Documents\QPW0295.TMP
c:\users\Wheelsup Club\Documents\QPW0296.TMP
c:\users\Wheelsup Club\Documents\QPW0297.TMP
c:\users\Wheelsup Club\Documents\QPW0298.TMP
c:\users\Wheelsup Club\Documents\QPW0299.TMP
c:\users\Wheelsup Club\Documents\QPW0300.TMP
c:\users\Wheelsup Club\Documents\QPW0301.TMP
c:\users\Wheelsup Club\Documents\QPW0302.TMP
c:\users\Wheelsup Club\Documents\QPW0303.TMP
c:\users\Wheelsup Club\Documents\QPW0304.TMP
c:\users\Wheelsup Club\Documents\QPW0305.TMP
c:\users\Wheelsup Club\Documents\QPW0306.TMP
c:\users\Wheelsup Club\Documents\QPW0307.TMP
c:\users\Wheelsup Club\Documents\QPW0308.TMP
c:\users\Wheelsup Club\Documents\QPW0309.TMP
c:\users\Wheelsup Club\Documents\QPW0310.TMP
c:\users\Wheelsup Club\Documents\QPW0311.TMP
c:\users\Wheelsup Club\Documents\QPW0312.TMP
c:\users\Wheelsup Club\Documents\QPW0313.TMP
c:\users\Wheelsup Club\Documents\QPW0314.TMP
c:\users\Wheelsup Club\Documents\QPW0315.TMP
c:\users\Wheelsup Club\Documents\QPW0316.TMP
c:\users\Wheelsup Club\Documents\QPW0317.TMP
c:\users\Wheelsup Club\Documents\QPW0318.TMP
c:\users\Wheelsup Club\Documents\QPW0319.TMP
c:\users\Wheelsup Club\Documents\QPW0320.TMP
c:\users\Wheelsup Club\Documents\QPW0321.TMP
c:\users\Wheelsup Club\Documents\QPW0322.TMP
c:\users\Wheelsup Club\Documents\QPW0323.TMP
c:\users\Wheelsup Club\Documents\QPW0324.TMP
c:\users\Wheelsup Club\Documents\QPW0325.TMP
c:\users\Wheelsup Club\Documents\QPW0326.TMP
c:\users\Wheelsup Club\Documents\QPW0327.TMP
c:\users\Wheelsup Club\Documents\QPW0328.TMP
c:\users\Wheelsup Club\Documents\QPW0329.TMP
c:\users\Wheelsup Club\Documents\QPW0330.TMP
c:\users\Wheelsup Club\Documents\QPW0331.TMP
c:\users\Wheelsup Club\Documents\QPW0332.TMP
c:\users\Wheelsup Club\Documents\QPW0333.TMP
c:\users\Wheelsup Club\Documents\QPW0334.TMP
c:\users\Wheelsup Club\Documents\QPW0335.TMP
c:\users\Wheelsup Club\Documents\QPW0336.TMP
c:\users\Wheelsup Club\Documents\QPW0337.TMP
c:\users\Wheelsup Club\Documents\QPW0338.TMP
c:\users\Wheelsup Club\Documents\QPW0339.TMP
c:\users\Wheelsup Club\Documents\QPW0340.TMP
c:\users\Wheelsup Club\Documents\QPW0341.TMP
c:\users\Wheelsup Club\Documents\QPW0342.TMP
c:\users\Wheelsup Club\Documents\QPW0343.TMP
c:\users\Wheelsup Club\Documents\QPW0344.TMP
c:\users\Wheelsup Club\Documents\QPW0345.TMP
c:\users\Wheelsup Club\Documents\QPW0346.TMP
c:\users\Wheelsup Club\Documents\QPW0347.TMP
c:\users\Wheelsup Club\Documents\QPW0348.TMP
c:\users\Wheelsup Club\Documents\QPW0349.TMP
c:\users\Wheelsup Club\Documents\QPW0350.TMP
c:\users\Wheelsup Club\Documents\QPW0351.TMP
c:\users\Wheelsup Club\Documents\QPW0352.TMP
c:\users\Wheelsup Club\Documents\QPW0353.TMP
c:\users\Wheelsup Club\Documents\QPW0354.TMP
c:\users\Wheelsup Club\Documents\QPW0355.TMP
c:\users\Wheelsup Club\Documents\QPW0356.TMP
c:\users\Wheelsup Club\Documents\QPW0357.TMP
c:\users\Wheelsup Club\Documents\QPW0358.TMP
c:\users\Wheelsup Club\Documents\QPW0359.TMP
c:\users\Wheelsup Club\Documents\QPW0360.TMP
c:\users\Wheelsup Club\Documents\QPW0361.TMP
c:\users\Wheelsup Club\Documents\QPW0362.TMP
c:\users\Wheelsup Club\Documents\QPW0363.TMP
c:\users\Wheelsup Club\Documents\QPW0364.TMP
c:\users\Wheelsup Club\Documents\QPW0365.TMP
c:\users\Wheelsup Club\Documents\QPW0366.TMP
c:\users\Wheelsup Club\Documents\QPW0367.TMP
c:\users\Wheelsup Club\Documents\QPW0368.TMP
c:\users\Wheelsup Club\Documents\QPW0369.TMP
c:\users\Wheelsup Club\Documents\QPW0370.TMP
c:\users\Wheelsup Club\Documents\QPW0371.TMP
c:\users\Wheelsup Club\Documents\QPW0372.TMP
c:\users\Wheelsup Club\Documents\QPW0373.TMP
c:\users\Wheelsup Club\Documents\QPW0374.TMP
c:\users\Wheelsup Club\Documents\QPW0375.TMP
c:\users\Wheelsup Club\Documents\QPW0376.TMP
c:\users\Wheelsup Club\Documents\QPW0377.TMP
c:\users\Wheelsup Club\Documents\QPW0378.TMP
c:\users\Wheelsup Club\Documents\QPW0379.TMP
c:\users\Wheelsup Club\Documents\QPW0380.TMP
c:\users\Wheelsup Club\Documents\QPW0381.TMP
c:\users\Wheelsup Club\Documents\QPW0382.TMP
c:\users\Wheelsup Club\Documents\QPW0383.TMP
c:\users\Wheelsup Club\Documents\QPW0384.TMP
c:\users\Wheelsup Club\Documents\QPW0385.TMP
c:\users\Wheelsup Club\Documents\QPW0386.TMP
c:\users\Wheelsup Club\Documents\QPW0387.TMP
c:\users\Wheelsup Club\Documents\QPW0388.TMP
c:\users\Wheelsup Club\Documents\QPW0389.TMP
c:\users\Wheelsup Club\Documents\QPW0390.TMP
c:\users\Wheelsup Club\Documents\QPW0391.TMP
c:\users\Wheelsup Club\Documents\QPW0392.TMP
c:\users\Wheelsup Club\Documents\QPW0393.TMP
c:\users\Wheelsup Club\Documents\QPW0394.TMP
c:\users\Wheelsup Club\Documents\QPW0395.TMP
c:\users\Wheelsup Club\Documents\QPW0396.TMP
c:\users\Wheelsup Club\Documents\QPW0397.TMP
c:\users\Wheelsup Club\Documents\QPW0398.TMP
c:\users\Wheelsup Club\Documents\QPW0399.TMP
c:\users\Wheelsup Club\Documents\QPW0400.TMP
c:\users\Wheelsup Club\Documents\QPW0401.TMP
c:\users\Wheelsup Club\Documents\QPW0402.TMP
c:\users\Wheelsup Club\Documents\QPW0403.TMP
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
-------\Service_Uvnc_service
.
.
((((((((((((((((((((((((( Files Created from 2013-10-07 to 2013-11-07 )))))))))))))))))))))))))))))))
.
.
2013-11-07 16:11 . 2013-11-07 16:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-07 15:06 . 2013-11-07 15:06 -------- d-----w- c:\programdata\Oracle
2013-11-07 15:05 . 2013-11-07 15:04 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-11-05 19:11 . 2013-11-05 19:11 -------- d-----w- c:\users\Wheelsup Club\AppData\Roaming\Malwarebytes
2013-11-05 19:11 . 2013-11-05 19:11 -------- d-----w- c:\programdata\Malwarebytes
2013-11-05 19:11 . 2013-11-05 19:11 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-11-05 19:11 . 2013-04-04 19:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-11-05 15:03 . 2013-11-06 13:43 -------- d-----w- c:\users\Wheelsup Club\AppData\Local\FileTypeAssistant
2013-11-05 14:17 . 2013-11-05 14:17 -------- d-----w- c:\windows\ERUNT
2013-11-05 02:54 . 2013-11-05 02:56 -------- d-----w- C:\AdwCleaner
2013-11-03 12:18 . 2013-11-03 12:18 -------- d-----w- c:\users\Wheelsup Club\AppData\Roaming\AVAST Software
2013-11-03 12:17 . 2013-11-06 16:14 409832 ----a-w- c:\windows\system32\drivers\aswsp.sys
2013-11-03 12:17 . 2013-11-03 12:16 84328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-11-03 12:17 . 2013-11-03 12:16 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-11-03 12:17 . 2013-11-03 12:16 65264 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-11-03 12:17 . 2013-11-03 12:16 38984 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-11-03 12:17 . 2013-11-03 12:16 205320 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-11-03 12:17 . 2013-11-03 12:16 1032416 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-11-03 12:17 . 2013-11-03 12:16 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-11-03 12:17 . 2013-11-03 12:16 334648 ----a-w- c:\windows\system32\aswBoot.exe
2013-11-03 12:16 . 2013-11-03 12:16 43152 ----a-w- c:\windows\avastSS.scr
2013-11-03 12:15 . 2013-11-03 12:15 -------- d-----w- c:\program files\AVAST Software
2013-11-03 12:10 . 2013-11-03 12:10 -------- d-----w- c:\programdata\AVAST Software
2013-11-02 02:52 . 2013-11-02 02:53 -------- d-----w- c:\program files (x86)\ERUNT
2013-10-31 13:22 . 2013-11-01 13:42 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-10-31 13:22 . 2013-11-01 13:42 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-30 13:51 . 2013-09-20 14:49 21040 ----a-w- c:\windows\system32\sdnclean64.exe
2013-10-30 13:50 . 2013-10-30 13:59 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2013-10-29 18:41 . 2013-10-29 18:41 -------- d-----w- c:\program files\Uninstaller
2013-10-27 12:54 . 2013-10-27 12:54 -------- d-----w- c:\program files\iPod
2013-10-27 12:54 . 2013-10-27 12:55 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-10-27 12:54 . 2013-10-27 12:55 -------- d-----w- c:\program files\iTunes
2013-10-27 12:54 . 2013-10-27 12:55 -------- d-----w- c:\program files (x86)\iTunes
2013-10-24 20:31 . 2013-10-24 20:31 -------- d-----w- c:\users\Wheelsup Club\AppData\Local\FreeFileViewer
2013-10-17 15:44 . 2013-10-17 15:44 -------- d-----w- c:\program files\McAfee Security Scan
2013-10-16 12:57 . 2013-10-16 12:57 17813896 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-10-15 20:28 . 2013-10-15 20:28 -------- d-----w- c:\program files (x86)\Flash Movie Player
2013-10-09 17:41 . 2013-10-09 17:41 -------- d-----w- c:\users\Wheelsup Club\AppData\Roaming\DonationCoder
2013-10-09 17:41 . 2013-10-09 17:41 -------- d-----w- c:\program files (x86)\ScreenshotCaptor
2013-10-09 17:41 . 2013-10-09 17:41 -------- d-----w- c:\programdata\DonationCoder
2013-10-09 15:34 . 2013-10-09 15:45 -------- d-----w- C:\FFOutput
2013-10-09 15:33 . 2013-10-09 15:33 -------- d-----w- c:\program files (x86)\FreeTime
2013-10-09 15:14 . 2013-10-09 15:20 -------- d-----w- c:\program files (x86)\Free All to Image Jpg-Jpeg Bmp Tiff Png Converter
2013-10-09 14:14 . 2013-10-09 14:14 -------- d-----w- c:\users\Wheelsup Club\AppData\Roaming\Free-backup.info
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-19 14:03 . 2013-11-06 13:43 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D8B61F3F-E95A-49BE-A2D3-ACDCE989C5F5}\gapaengine.dll
2013-10-19 14:03 . 2012-02-10 14:10 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-10-15 14:26 . 2013-10-15 14:26 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2013-10-14 07:12 . 2013-11-07 14:57 10280728 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{46A5C5A1-0162-42DA-BFD7-690EC05BB971}\mpengine.dll
2013-10-14 07:12 . 2013-11-06 13:43 10280728 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-10-09 20:38 . 2011-10-28 02:18 80541720 ----a-w- c:\windows\system32\MRT.exe
2013-08-29 01:48 . 2013-10-09 12:31 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-08-21 01:12 . 2013-08-21 01:12 4812567 ----a-w- c:\users\Wheelsup Club\FileZilla_3.7.3_win32-setup.exe
2013-08-18 03:10 . 2013-08-18 03:10 61440 ----a-r- c:\users\Wheelsup Club\AppData\Roaming\Microsoft\Installer\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}\ARPPRODUCTICON.exe
2013-08-18 03:08 . 2003-03-19 00:05 106496 ----a-w- c:\windows\SysWow64\ATL71.DLL
2013-08-14 20:19 . 2013-08-14 20:19 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-08-14 01:39 . 2013-08-14 01:40 1169609 ----a-w- c:\windows\unins001.exe
2013-08-13 17:51 . 2013-08-13 17:51 4817275 ----a-w- c:\users\Wheelsup Club\FileZilla_3.7.2_win32-setup.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-08-14 20:34 222832 ----a-w- c:\users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-08-14 20:34 222832 ----a-w- c:\users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-08-14 20:34 222832 ----a-w- c:\users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SymphonyPreLoad"="c:\program files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.symphony.standard.launcher.win32.x86_3.0.1.20120110-2000\IBM Lotus Symphony -nogui -nosplash" [X]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2009-07-14 44544]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-06-01 39408]
"Update Service"="c:\program files (x86)\Common Files\Teknum Systems\update.exe" [2012-12-12 19456]
"BIBLauncher"="c:\program files (x86)\Business-in-a-Box\BIBLauncher.exe" [2012-05-16 915248]
"VerControl"="c:\users\WHEELS~1\AppData\Local\TempImg\VerControl.exe" [2010-10-04 339968]
"Desktop iCalendar Lite.exe"="c:\program files\desksware\Desktop iCalendar Lite\Desktop iCalendar Lite.exe" [2013-07-06 1087232]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"Hotkey Utility"="c:\program files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe" [2010-05-06 609312]
"OOTag"="c:\program files (x86)\Gateway\OOBEOffer\OOTag.exe" [2010-02-23 13856]
"Gateway Photo Frame"="c:\program files (x86)\Gateway Photo Frame\ButtonMonitor.exe" [2009-07-20 124416]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2013-07-23 84576]
"nmctxth"="c:\program files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe" [2008-12-12 642856]
"NapsterShell"="c:\program files (x86)\Napster\napster.exe" [2007-01-13 323216]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720]
"BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2010-06-10 2621440]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-07-04 641704]
"Aimersoft Helper Compact.exe"="c:\program files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe" [2012-02-28 1667072]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"Nikon Message Center 2"="c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe" [2011-10-30 571392]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-10-23 152392]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-11-03 3568312]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
c:\users\Wheelsup Club\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CorelCENTRAL Alarms.LNK - c:\program files (x86)\Corel\WordPerfect Office 2000\programs\alarm.exe [2012-3-24 249856]
Desktop Application Director 9.LNK - c:\program files (x86)\Corel\WordPerfect Office 2000\programs\dad9.exe [2012-3-24 233472]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Corel Registration.lnk - c:\program files (x86)\Corel\WordPerfect Office 2000\Register\Remind32.exe [2012-3-24 67584]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.130\SSScheduler.exe [2013-9-6 324320]
Service Manager.lnk - c:\program files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe /n [2002-12-17 74308]
VistaAccess.lnk - c:\vstascan\VsAccess.exe [2012-3-30 158208]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer8"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Util SaltarSmart;Util SaltarSmart;c:\program files (x86)\SaltarSmart\bin\utilSaltarSmart.exe;c:\program files (x86)\SaltarSmart\bin\utilSaltarSmart.exe [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
R3 debutfilter;Debut Filter Driver v6.20.00;c:\windows\system32\DRIVERS\debutfilterx64.sys;c:\windows\SYSNATIVE\DRIVERS\debutfilterx64.sys [x]
R3 GSService;GSService;c:\windows\SysWOW64\GSService.exe;c:\windows\SysWOW64\GSService.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SndTAudio;SndTAudio;c:\windows\system32\drivers\SndTAudio.sys;c:\windows\SYSNATIVE\drivers\SndTAudio.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys;c:\windows\SYSNATIVE\DRIVERS\SWDUMon.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsAudio_Device(1);WsAudio_Device(1);c:\windows\system32\drivers\VirtualAudio1.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio1.sys [x]
R3 WsAudio_Device(2);WsAudio_Device(2);c:\windows\system32\drivers\VirtualAudio2.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio2.sys [x]
R3 WsAudio_Device(3);WsAudio_Device(3);c:\windows\system32\drivers\VirtualAudio3.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio3.sys [x]
R3 WsAudio_Device(4);WsAudio_Device(4);c:\windows\system32\drivers\VirtualAudio4.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio4.sys [x]
R3 WsAudio_Device(5);WsAudio_Device(5);c:\windows\system32\drivers\VirtualAudio5.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio5.sys [x]
S0 ahcix64s;ahcix64s;c:\windows\system32\DRIVERS\ahcix64s.sys;c:\windows\SYSNATIVE\DRIVERS\ahcix64s.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/12/15 09:45];c:\program files (x86)\CyberLink\PowerDVD9\000.fcl;c:\program files (x86)\CyberLink\PowerDVD9\000.fcl [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys;c:\windows\SYSNATIVE\drivers\aswFsBlk.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Gateway\Registration\GregHSRW.exe;c:\program files (x86)\Gateway\Registration\GregHSRW.exe [x]
S2 LinksysUpdater;Linksys Updater;c:\program files (x86)\Linksys\Linksys Updater\bin\LinksysUpdater.exe;c:\program files (x86)\Linksys\Linksys Updater\bin\LinksysUpdater.exe [x]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 Updater Service;Updater Service;c:\program files\Gateway\Gateway Updater\UpdaterService.exe;c:\program files\Gateway\Gateway Updater\UpdaterService.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys;c:\windows\SYSNATIVE\drivers\anvsnddrv.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVer7231_x64;AVerMedia 7231 capture service;c:\windows\system32\DRIVERS\AVer7231_x64.sys;c:\windows\SYSNATIVE\DRIVERS\AVer7231_x64.sys [x]
S3 bbcap;bb_capture_driver;c:\windows\system32\DRIVERS\bbcap.sys;c:\windows\SYSNATIVE\DRIVERS\bbcap.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 rtl819xpn64;Realtek RTL8190/RTL8192E 802.11n Wireless LAN (Mini-)PCI NIC NT Driver;c:\windows\system32\DRIVERS\rtl819xp.sys;c:\windows\SYSNATIVE\DRIVERS\rtl819xp.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2013-11-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-31 13:42]
.
2013-11-07 c:\windows\Tasks\FreeFileViewerUpdateChecker.job
- c:\program files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [2012-08-06 22:24]
.
2013-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-28 00:54]
.
2013-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-28 00:54]
.
2013-11-07 c:\windows\Tasks\WpsUpdateTask_Wheelsup Club.job
- c:\program files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe [2013-08-11 16:00]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-08-14 20:34 261744 ----a-w- c:\users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-08-14 20:34 261744 ----a-w- c:\users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-08-14 20:34 261744 ----a-w- c:\users\Wheelsup Club\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-11-03 12:16 326944 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OOTag"="c:\program files (x86)\Gateway\OOBEOffer\ootag.exe" [2010-02-23 13856]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-08-12 1356240]
"Eraser"="c:\progra~1\Eraser\Eraser.exe" [2012-05-22 980920]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-20 9955872]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.bing.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.forumswatcher.com/search.htm
IE: Download current page with FreshWebSuction - file://c:\program files (x86)\FreshWebmaster\FreshWebSuction\obiectx_all.htm
IE: Download using FreshWebSuction - file://c:\program files (x86)\FreshWebmaster\FreshWebSuction\obiectx.htm
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Search Using Copernic Agent - c:\program files (x86)\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
LSP: %SystemRoot%\system32\vsocklib.dll
Trusted Zone: dddpl.com\www
Trusted Zone: trca.on.ca\www
TCP: DhcpNameServer = 64.71.255.204 64.71.255.198
FF - ProfilePath - c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\
FF - ExtSQL: 2013-09-27 09:16; fmconverter@gmail.com; c:\program files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF - ExtSQL: 2013-11-03 07:16; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
FF - ExtSQL: 2013-11-03 19:44; {4ED1F68A-5463-4931-9384-8FFF5ED91D92}; c:\program files (x86)\McAfee\SiteAdvisor
FF - ExtSQL: 2013-11-04 21:36; adblockpopups@jessehakanen.net; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\adblockpopups@jessehakanen.net.xpi
FF - ExtSQL: 2013-11-04 21:40; videoresumer@jetpack; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\videoresumer@jetpack.xpi
FF - ExtSQL: 2013-11-04 21:40; vdpure@link64; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\vdpure@link64.xpi
FF - ExtSQL: 2013-11-04 21:41; {bee6eb20-01e0-ebd1-da83-080329fb9a3a}; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
FF - ExtSQL: 2013-11-04 21:41; {b9db16a4-6edc-47ec-a1f4-b86292ed211d}; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - ExtSQL: 2013-11-04 21:41; netvideohunter@netvideohunter.com; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\netvideohunter@netvideohunter.com
FF - ExtSQL: 2013-11-04 21:41; extension@hidemyass.com; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\extension@hidemyass.com.xpi
FF - ExtSQL: 2013-11-04 21:41; artur.dubovoy@gmail.com; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\artur.dubovoy@gmail.com.xpi
FF - ExtSQL: 2013-11-04 21:41; YoutubeDownloader@PeterOlayev.com; c:\users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\YoutubeDownloader@PeterOlayev.com.xpi
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKU-Default-Run-SearchProtect - \SearchProtect\bin\cltmng.exe
Notify-SDWinLogon - SDWinLogon.dll
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
AddRemove-Actual Drawing - c:\program files\Actual Drawing\PY_UNINSTAL.EXE SOFTWARE\PySoft\HTML_Edit
AddRemove-CoreAAC Audio Decoder - c:\windows\system32\CoreAAC-uninstall.exe
AddRemove-Freecorder extension for Firefox - c:\program files (x86)\Freecorder extension\UninstallFirefoxToolbar.exe
AddRemove-IECT3298580 - c:\programdata\Conduit\IE\CT3298580\UninstallerUI.exe
AddRemove-VDC_is1 - c:\program files (x86)\Video Download Converter\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD9\000.fcl"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2354175475-3584804694-207632515-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-2354175475-3584804694-207632515-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
c:\windows\SysWOW64\java.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\windows\SysWOW64\vmnat.exe
c:\program files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
c:\program files (x86)\VMware\VMware Player\vmware-authd.exe
c:\windows\SysWOW64\vmnetdhcp.exe
.
**************************************************************************
.
Completion time: 2013-11-07 11:22:39 - machine was rebooted
ComboFix-quarantined-files.txt 2013-11-07 16:22
.
Pre-Run: 635,885,785,088 bytes free
Post-Run: 635,353,346,048 bytes free
.
- - End Of File - - B18D12DF0571603B1F73C06245F43D86


- r

[ken545]

Hi,

More garbage removed. I am looking at a lot of free programs, some of them fall in the grey area, most free applications come bundled with other garbage as you now can see
DonationCoder
FreeFileViewer
Bearshare
Free-backup.info

Bearshare is a file sharing site, the program itself is ok but what you download and share most times are not. The bad guys use file sharing to infect computers. Its like playing Russian roulette malwarewise. I would never allow any programs like this on any of my systems.


You can go to your Control Panel and click on Java, then to Help>About and you should have Version 7 Update 45, if not let me know

Lets take another look


OTL by OldTimer

Download OTL (http://oldtimer.geekstogo.com/OTL.exe) to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Click the "Scan All Users" checkbox.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

[ramping]

1. OTL.txt:



OTL logfile created on: 11/7/2013 2:27:28 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Wheelsup Club\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.73 Gb Total Physical Memory | 3.26 Gb Available Physical Memory | 56.88% Memory free
11.47 Gb Paging File | 8.49 Gb Available in Paging File | 74.03% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 915.73 Gb Total Space | 591.84 Gb Free Space | 64.63% Space Free | Partition Type: NTFS

Computer Name: WHEELSUPCLUB-PC | User Name: Wheelsup Club | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Wheelsup Club\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\java.exe (Oracle Corporation)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.symphony.brand.win32_3.0.1.20120110-2000\program\soffice.bin (IBM)
PRC - C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe ()
PRC - C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.)
PRC - C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.)
PRC - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.)
PRC - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.2.3.20110915-1350\win32\x86\symphony.exe (IBM)
PRC - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
PRC - C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe ()
PRC - C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe (Acer Group)
PRC - C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
PRC - C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe (Acer Incorporated)
PRC - C:\Program Files (x86)\Gateway Photo Frame\ButtonMonitor.exe (IOI)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Linksys\Linksys Updater\bin\LinksysUpdater.exe ()
PRC - C:\Program Files (x86)\Napster\napster.exe (Napster)
PRC - C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\alarm.exe (Corel Corporation Limited)
PRC - C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\dad9.exe (Corel Corporation Limited)
PRC - C:\VstaScan\VsAccess.exe (UMAX)
PRC - C:\Program Files (x86)\Corel\WordPerfect Office 2000\Register\Remind32.exe (IntelliQuest Communications, Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\de6ee26de5e4f343509de7e92ab48ba6\CustomMarshalers.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\8c20095bd7d46cdfa7933eb258a07daa\Accessibility.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl ()
MOD - C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl ()
MOD - C:\Users\Wheelsup Club\IBM\Lotus\Symphony\.config\org.eclipse.osgi\bundles\397\1\.cp\officebean.dll ()
MOD - C:\Users\Wheelsup Club\IBM\Lotus\Symphony\.config\org.eclipse.osgi\bundles\263\1\.cp\swtIbmWrapper.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.symphony.brand.win32_3.0.1.20120110-2000\program\libxml2.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.symphony.basis.system.win32_3.0.1.20120110-2000\basis\program\libxslt.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.symphony.basis.base.win32_3.0.1.20120110-2000\basis\program\nsldap32v50.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.symphony.filetype.win32.x86_3.0.1.20120110-2000\seditorReg.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\rcp\eclipse\plugins\com.ibm.rcp.swt.browser.dom.ie_6.2.3.20110915-1350\os\win32\x86\comex.dll ()
MOD - C:\Program Files (x86)\Windows Live\Writer\en\WindowsLive.Writer.Localization.resources.dll ()
MOD - C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\rcp\eclipse\plugins\com.ibm.rcp.os.win32_6.2.3.20110915-1350\os\win32\x86\os.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.2.3.20110915-1350\win32\x86\eclipse_1118.dll ()
MOD - C:\Program Files (x86)\IBM\Lotus\Symphony\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.2.3.20110915-1350\win32\x86\pipeserver.dll ()
MOD - C:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll ()
MOD - C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyHook.dll ()
MOD - C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe ()
MOD - C:\Program Files (x86)\Gateway Photo Frame\IOIUSBLib.dll ()
MOD - C:\Program Files (x86)\Gateway Photo Frame\IOIHIDLib.dll ()
MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()
MOD - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\CAntiVirusCOM.dll ()
MOD - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\CFirewallCOM.dll ()


========== Services (SafeList) ==========

SRV:[b]64bit: - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe (McAfee, Inc.)
SRV:64bit: - (NisSrv) -- c:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AMD FUEL Service) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
SRV:64bit: - (Updater Service) -- C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe (Acer Group)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (McAfee SiteAdvisor Service) -- c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.)
SRV - (sftvsa) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (GSService) -- C:\Windows\SysWOW64\GSService.exe ()
SRV - (VMware NAT Service) -- C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.)
SRV - (VMnetDHCP) -- C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.)
SRV - (VMAuthdService) -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.)
SRV - (VMUSBArbService) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe (VMware, Inc.)
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (BrYNSvc) -- C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (GameConsoleService) -- C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (Greg_Service) -- C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe (Acer Incorporated)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (nmservice) -- C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
SRV - (LinksysUpdater) -- C:\Program Files (x86)\Linksys\Linksys Updater\bin\LinksysUpdater.exe ()


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswsp.sys (AVAST Software)
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswVmm) -- C:\windows\SysNative\drivers\aswVmm.sys ()
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswRvrt) -- C:\windows\SysNative\drivers\aswRvrt.sys ()
DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (Sftvol) -- C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:64bit: - (Sftredir) -- C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) -- C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:64bit: - (Sftfs) -- C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:64bit: - (NisDrv) -- C:\Windows\SysNative\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (debutfilter) -- C:\Windows\SysNative\drivers\debutfilterx64.sys ()
DRV:64bit: - (bbcap) -- C:\Windows\SysNative\drivers\bbcap.sys (Windows (R) Codename Longhorn DDK provider)
DRV:64bit: - (SndTAudio) -- C:\Windows\SysNative\drivers\SndTAudio.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (WsAudio_Device(5) -- C:\Windows\SysNative\drivers\VirtualAudio5.sys (Wondershare)
DRV:64bit: - (WsAudio_Device(4) -- C:\Windows\SysNative\drivers\VirtualAudio4.sys (Wondershare)
DRV:64bit: - (WsAudio_Device(3) -- C:\Windows\SysNative\drivers\VirtualAudio3.sys (Wondershare)
DRV:64bit: - (WsAudio_Device(2) -- C:\Windows\SysNative\drivers\VirtualAudio2.sys (Wondershare)
DRV:64bit: - (WsAudio_Device(1) -- C:\Windows\SysNative\drivers\VirtualAudio1.sys (Wondershare)
DRV:64bit: - (truecrypt) -- C:\Windows\SysNative\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (anvsnddrv) -- C:\Windows\SysNative\drivers\anvsnddrv.sys (AnvSoft Inc.)
DRV:64bit: - (SWDUMon) -- C:\Windows\SysNative\drivers\SWDUMon.sys ()
DRV:64bit: - (AODDriver4.1) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys (Advanced Micro Devices)
DRV:64bit: - (Fs_Rec) -- C:\windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (vmx86) -- C:\Windows\SysNative\drivers\vmx86.sys (VMware, Inc.)
DRV:64bit: - (vmkbd) -- C:\Windows\SysNative\drivers\VMkbd.sys (VMware, Inc.)
DRV:64bit: - (VMnetuserif) -- C:\Windows\SysNative\drivers\vmnetuserif.sys (VMware, Inc.)
DRV:64bit: - (VMnetBridge) -- C:\Windows\SysNative\drivers\vmnetbridge.sys (VMware, Inc.)
DRV:64bit: - (VMnetAdapter) -- C:\Windows\SysNative\drivers\vmnetadapter.sys (VMware, Inc.)
DRV:64bit: - (hcmon) -- C:\Windows\SysNative\drivers\hcmon.sys (VMware, Inc.)
DRV:64bit: - (vmusb) -- C:\Windows\SysNative\drivers\vmusb.sys (VMware, Inc.)
DRV:64bit: - (vmci) -- C:\Windows\SysNative\drivers\vmci.sys (VMware, Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (AVer7231_x64) -- C:\Windows\SysNative\drivers\AVer7231_x64.sys (AVerMedia TECHNOLOGIES, Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (amdiox64) -- C:\Windows\SysNative\drivers\amdiox64.sys (Advanced Micro Devices)
DRV:64bit: - (rtl819xpn64) -- C:\Windows\SysNative\drivers\rtl819xp.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (ahcix64s) -- C:\Windows\SysNative\drivers\ahcix64s.sys (Advanced Micro Devices, Inc)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (AtiPcie) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (purendis) -- C:\Windows\SysNative\drivers\purendis.sys (Cisco Systems, Inc.)
DRV:64bit: - (pnarp) -- C:\Windows\SysNative\drivers\pnarp.sys (Cisco Systems, Inc.)
DRV - ({B154377D-700F-42cc-9474-23858FBDF4BD}) -- C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl (CyberLink Corp.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\..\URLSearchHook: {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
IE - HKCU\..\SearchScopes\{C723D6C5-9428-496C-A842-6999F6652CB2}: "URL" = http://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
IE - HKCU\..\SearchScopes\{FE83DAC5-EAC2-470D-9158-0B74E1B2D4BE}: "URL" = http://www.bing.com/search?q={searchTerms}&form=BIE9SE&pc=BIE9&src=IE-SearchBox
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\windows\system32\npDeployJava1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: C:\Program Files (x86)\Virtual Earth 3D\ [2012/09/26 15:40:18 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: C:\Program Files (x86)\Virtual Earth 3D\ [2012/09/26 15:40:18 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nullsoft.com/winampDetector;version=1: C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2013/10/04 07:17:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2013/09/27 08:16:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/11/03 07:16:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/09/17 09:06:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/10/08 21:27:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Components: C:\Program Files (x86)\Netscape\Navigator 9\components [2013/05/26 07:30:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Plugins: C:\Program Files (x86)\Netscape\Navigator 9\plugins [2013/10/08 21:27:08 | 000,000,000 | ---D | M]

[2012/12/12 14:56:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Extensions
[2013/10/29 13:39:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions
[2013/05/11 14:50:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\{49c53dce-afa0-49a1-a08b-2eb8e8444128}
[2013/05/11 14:49:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\donottrackplus@abine.com
[2013/05/11 14:50:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\netvideohunter@netvideohunter.com
[2013/06/20 12:29:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\staged
[2013/11/04 21:41:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions
[2013/11/04 21:41:48 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013/11/04 21:41:47 | 000,000,000 | ---D | M] (Flash and Video Download) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
[2013/11/04 21:41:48 | 000,000,000 | ---D | M] ("NetVideoHunter") -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\netvideohunter@netvideohunter.com
[2013/10/29 13:39:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\slvcv7hg.default-1353510380055\extensions
[2013/06/20 12:29:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\slvcv7hg.default-1353510380055\extensions\staged
[2013/10/03 15:59:46 | 000,011,342 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\firefox@saltarsmart.biz.xpi
[2013/11/04 21:36:26 | 000,128,676 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\adblockpopups@jessehakanen.net.xpi
[2013/11/04 21:41:48 | 000,342,563 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\artur.dubovoy@gmail.com.xpi
[2013/11/04 21:41:48 | 000,053,803 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\extension@hidemyass.com.xpi
[2013/11/04 21:40:47 | 000,041,044 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\vdpure@link64.xpi
[2013/11/04 21:40:30 | 000,187,236 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\videoresumer@jetpack.xpi
[2013/11/04 21:41:48 | 000,072,246 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\ra2bxp65.default-1383529527463\extensions\YoutubeDownloader@PeterOlayev.com.xpi
[2013/10/03 15:59:46 | 000,011,342 | ---- | M] () (No name found) -- C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\slvcv7hg.default-1353510380055\extensions\firefox@saltarsmart.biz.xpi
[2013/11/01 09:15:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/11/01 09:15:02 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/12/15 14:55:29 | 000,002,024 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\McSiteAdvisor.xml

O1 HOSTS File: ([2013/11/07 11:14:39 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O2:64bit: - BHO: (no name) - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - No CLSID value found.
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (no name) - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - No CLSID value found.
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (FireShot) - {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\library\fsaddin64-0.98.28.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - {97ab88ef-346b-4179-a0b1-7445896547a5} - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (FireShot) - {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Wheelsup Club\AppData\Roaming\Mozilla\Firefox\Profiles\r2ykzn6f.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\library\fsaddin-0.98.28.dll File not found
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe (The Eraser Project)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [OOTag] C:\Program Files (x86)\Gateway\OOBEOffer\OOTag.exe (Microsoft)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe (AimerSoft)
O4 - HKLM..\Run: [AMD AVT] C:\windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [Gateway Photo Frame] C:\Program Files (x86)\Gateway Photo Frame\ButtonMonitor.exe (IOI)
O4 - HKLM..\Run: [Hotkey Utility] C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe ()
O4 - HKLM..\Run: [NapsterShell] C:\Program Files (x86)\Napster\napster.exe (Napster)
O4 - HKLM..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe (Nikon Corporation)
O4 - HKLM..\Run: [nmctxth] C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [OOTag] C:\Program Files (x86)\Gateway\OOBEOffer\OOTag.exe (Microsoft)
O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [BIBLauncher] C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe ()
O4 - HKCU..\Run: [Desktop iCalendar Lite.exe] C:\Program Files\desksware\Desktop iCalendar Lite\Desktop iCalendar Lite.exe (Desksware)
O4 - HKCU..\Run: [Speech Recognition] C:\windows\Speech\Common\sapisvr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [SymphonyPreLoad] "C:\Program Files (x86)\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.symphony.standard.launcher.win32.x86_3.0.1.20120110-2000\IBM Lotus Symphony" -nogui -nosplash File not found
O4 - HKCU..\Run: [Update Service] C:\Program Files (x86)\Common Files\Teknum Systems\update.exe (Teknum Systems AS)
O4 - HKCU..\Run: [VerControl] C:\Users\Wheelsup Club\AppData\Local\TempImg\VerControl.exe ()
O4 - Startup: C:\Users\Wheelsup Club\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CorelCENTRAL Alarms.LNK = C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\alarm.exe (Corel Corporation Limited)
O4 - Startup: C:\Users\Wheelsup Club\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Desktop Application Director 9.LNK = C:\Program Files (x86)\Corel\WordPerfect Office 2000\programs\dad9.exe (Corel Corporation Limited)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Download current page with FreshWebSuction - C:\Program Files (x86)\FreshWebmaster\FreshWebSuction\obiectx_all.htm ()
O8:64bit: - Extra context menu item: Download using FreshWebSuction - C:\Program Files (x86)\FreshWebmaster\FreshWebSuction\obiectx.htm ()
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O8:64bit: - Extra context menu item: Search Using Copernic Agent - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O8 - Extra context menu item: Download current page with FreshWebSuction - C:\Program Files (x86)\FreshWebmaster\FreshWebSuction\obiectx_all.htm ()
O8 - Extra context menu item: Download using FreshWebSuction - C:\Program Files (x86)\FreshWebmaster\FreshWebSuction\obiectx.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O9:64bit: - Extra Button: Webroot - {43699cd0-e34f-11de-8a39-0800200c9a66} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : Webroot - {43699cd0-e34f-11de-8a39-0800200c9a66} - Reg Error: Key error. File not found
O9:64bit: - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
O9 - Extra 'Tools' menuitem : Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files (x86)\Copernic Agent\CopernicAgent.exe (Copernic Technologies Inc.)
O9 - Extra Button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\Program Files (x86)\Copernic Agent\CopernicAgent.exe (Copernic Technologies Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: dddpl.com ([www] https in Trusted sites)
O15 - HKCU\..Trusted Domains: trca.on.ca ([www] https in Trusted sites)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 64.71.255.204 64.71.255.198
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{16C6E4AB-95AE-44B4-B300-BF7F85B75A16}: DhcpNameServer = 64.71.255.204 64.71.255.198
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7A83BCC7-06FE-4C29-BFF1-A71A0A9D6DB9}: DhcpNameServer = 64.71.255.204 64.71.255.198
O18:64bit: - Protocol\Handler\copernicagent - No CLSID value found
O18:64bit: - Protocol\Handler\copernicagentcache - No CLSID value found
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll (Cisco Systems, Inc.)
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\copernicagent {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O18 - Protocol\Handler\copernicagentcache {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/04/14 21:18:11 | 000,000,000 | ---D | M] - C:\Autoruns -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/11/07 14:24:18 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Wheelsup Club\Desktop\OTL.exe
[2013/11/07 11:14:45 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2013/11/07 10:06:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013/11/07 10:05:21 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\javaws.exe
[2013/11/07 10:05:14 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\javaw.exe
[2013/11/07 10:05:14 | 000,174,504 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\java.exe
[2013/11/07 10:05:14 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\WindowsAccessBridge-32.dll
[2013/11/07 10:05:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013/11/07 10:04:40 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2013/11/07 09:44:23 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\Documents\ProcAlyzer Dumps
[2013/11/07 09:38:58 | 000,518,144 | ---- | C] (SteelWerX) -- C:\windows\SWREG.exe
[2013/11/07 09:38:58 | 000,406,528 | ---- | C] (SteelWerX) -- C:\windows\SWSC.exe
[2013/11/07 09:38:58 | 000,060,416 | ---- | C] (NirSoft) -- C:\windows\NIRCMD.exe
[2013/11/07 09:35:50 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013/11/07 09:27:05 | 005,144,303 | R--- | C] (Swearware) -- C:\Users\Wheelsup Club\Desktop\ComboFix.exe
[2013/11/05 14:11:35 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Roaming\Malwarebytes
[2013/11/05 14:11:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/11/05 14:11:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/11/05 14:11:12 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys
[2013/11/05 14:11:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/11/05 10:03:52 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Local\FileTypeAssistant
[2013/11/05 09:17:46 | 000,000,000 | ---D | C] -- C:\windows\ERUNT
[2013/11/04 21:54:36 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/11/04 21:51:12 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\Desktop\GooredFix Backups
[2013/11/03 20:45:34 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\Desktop\Old Firefox Data
[2013/11/03 07:18:12 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Roaming\AVAST Software
[2013/11/03 07:17:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
[2013/11/03 07:17:07 | 001,032,416 | ---- | C] (AVAST Software) -- C:\windows\SysNative\drivers\aswSnx.sys
[2013/11/03 07:17:07 | 000,409,832 | ---- | C] (AVAST Software) -- C:\windows\SysNative\drivers\aswsp.sys
[2013/11/03 07:17:07 | 000,092,544 | ---- | C] (AVAST Software) -- C:\windows\SysNative\drivers\aswRdr2.sys
[2013/11/03 07:17:07 | 000,084,328 | ---- | C] (AVAST Software) -- C:\windows\SysNative\drivers\aswMonFlt.sys
[2013/11/03 07:17:07 | 000,065,264 | ---- | C] (AVAST Software) -- C:\windows\SysNative\drivers\aswTdi.sys
[2013/11/03 07:17:07 | 000,038,984 | ---- | C] (AVAST Software) -- C:\windows\SysNative\drivers\aswFsBlk.sys
[2013/11/03 07:17:02 | 000,334,648 | ---- | C] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
[2013/11/03 07:16:45 | 000,043,152 | ---- | C] (AVAST Software) -- C:\windows\avastSS.scr
[2013/11/03 07:15:52 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2013/11/03 07:10:08 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2013/11/01 21:58:26 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\Documents\Registry Backups
[2013/11/01 21:54:13 | 000,000,000 | ---D | C] -- C:\windows\ERDNT
[2013/11/01 21:53:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2013/11/01 21:52:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2013/11/01 09:15:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013/10/31 08:22:17 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe


...(Continued)

[ramping]

(Continued)




[2013/10/31 08:22:17 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/10/30 08:51:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2013/10/30 08:51:03 | 000,021,040 | ---- | C] (Safer Networking Limited) -- C:\windows\SysNative\sdnclean64.exe
[2013/10/30 08:50:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy 2
[2013/10/29 13:41:37 | 000,000,000 | ---D | C] -- C:\Program Files\Uninstaller
[2013/10/27 07:55:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/10/27 07:54:40 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013/10/27 07:54:39 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013/10/27 07:54:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2013/10/27 07:54:39 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/10/24 15:31:13 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Local\FreeFileViewer
[2013/10/19 09:33:54 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
[2013/10/17 10:44:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
[2013/10/17 10:44:01 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan
[2013/10/16 07:57:03 | 017,813,896 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerInstaller.exe
[2013/10/16 06:55:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013/10/15 15:28:55 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flash Movie Player
[2013/10/15 15:28:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Flash Movie Player
[2013/10/09 15:48:56 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2013/10/09 15:48:55 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2013/10/09 15:48:54 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesysprep.dll
[2013/10/09 15:48:54 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesysprep.dll
[2013/10/09 15:48:54 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\RegisterIEPKEYs.exe
[2013/10/09 15:48:54 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\RegisterIEPKEYs.exe
[2013/10/09 15:48:54 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll
[2013/10/09 15:48:54 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll
[2013/10/09 15:48:54 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe
[2013/10/09 15:48:54 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll
[2013/10/09 15:48:54 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll
[2013/10/09 15:48:52 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll
[2013/10/09 15:48:51 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2013/10/09 15:48:51 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll
[2013/10/09 15:48:51 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll
[2013/10/09 12:41:57 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Roaming\DonationCoder
[2013/10/09 12:41:55 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\Documents\DonationCoder
[2013/10/09 12:41:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenshotCaptor
[2013/10/09 12:41:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ScreenshotCaptor
[2013/10/09 12:41:44 | 000,000,000 | ---D | C] -- C:\ProgramData\DonationCoder
[2013/10/09 10:34:28 | 000,000,000 | ---D | C] -- C:\FFOutput
[2013/10/09 10:33:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreeTime
[2013/10/09 10:14:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free All to Image Jpg-Jpeg Bmp Tiff Png Converter
[2013/10/09 09:14:33 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JustZIPit
[2013/10/09 09:14:32 | 000,000,000 | ---D | C] -- C:\Users\Wheelsup Club\AppData\Roaming\Free-backup.info
[2013/10/09 07:31:56 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\comctl32.dll
[2013/10/09 07:31:53 | 000,368,128 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysNative\atmfd.dll
[2013/10/09 07:31:53 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\atmfd.dll
[2013/10/09 07:31:53 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\fontsub.dll
[2013/10/09 07:31:53 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\fontsub.dll
[2013/10/09 07:31:53 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\windows\SysNative\atmlib.dll
[2013/10/09 07:31:53 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\lpk.dll
[2013/10/09 07:31:53 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\windows\SysWow64\atmlib.dll
[2013/10/09 07:31:53 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dciman32.dll
[2013/10/09 07:31:52 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\hidclass.sys
[2013/10/09 07:31:52 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\hidparse.sys
[2013/10/09 07:31:51 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\davclnt.dll
[2013/10/09 07:31:49 | 005,549,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntoskrnl.exe
[2013/10/09 07:31:48 | 003,969,472 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntkrnlpa.exe
[2013/10/09 07:31:48 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntoskrnl.exe
[2013/10/09 07:31:48 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\advapi32.dll
[2013/10/09 07:31:48 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\tdh.dll
[2013/10/09 07:31:47 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntdll.dll
[2013/10/09 07:31:47 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\tdh.dll
[2013/10/09 07:31:46 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wow64.dll
[2013/10/09 07:31:46 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\setup16.exe
[2013/10/09 07:31:46 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntvdm64.dll
[2013/10/09 07:31:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\instnm.exe
[2013/10/09 07:31:46 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\wow32.dll
[2013/10/09 07:31:46 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\user.exe
[2013/10/09 07:31:42 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2013/10/09 07:31:42 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2013/10/09 07:31:41 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\scavengeui.dll
[2013/10/09 07:31:40 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\usbport.sys
[2013/10/09 07:31:40 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\usbd.sys
[2013/08/20 20:12:29 | 004,812,567 | ---- | C] (Tim Kosse) -- C:\Users\Wheelsup Club\FileZilla_3.7.3_win32-setup.exe
[2013/08/13 12:51:37 | 004,817,275 | ---- | C] (Tim Kosse) -- C:\Users\Wheelsup Club\FileZilla_3.7.2_win32-setup.exe
[2013/07/15 13:44:22 | 004,815,135 | ---- | C] (FileZilla Project) -- C:\Users\Wheelsup Club\FileZilla_3.7.1_win32-setup.exe
[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
[1 C:\Users\Wheelsup Club\Documents\*.tmp files -> C:\Users\Wheelsup Club\Documents\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/11/07 14:20:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Wheelsup Club\Desktop\OTL.exe
[2013/11/07 14:12:01 | 000,000,390 | ---- | M] () -- C:\windows\tasks\WpsUpdateTask_Wheelsup Club.job
[2013/11/07 14:11:29 | 000,009,920 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/11/07 14:11:29 | 000,009,920 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/11/07 14:02:51 | 000,000,898 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/11/07 13:59:16 | 000,000,674 | ---- | M] () -- C:\windows\vista32.ini
[2013/11/07 13:57:24 | 000,000,894 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/11/07 13:57:24 | 000,000,418 | ---- | M] () -- C:\windows\tasks\FreeFileViewerUpdateChecker.job
[2013/11/07 13:57:07 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013/11/07 13:57:05 | 322,772,991 | -HS- | M] () -- C:\hiberfil.sys
[2013/11/07 11:48:00 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2013/11/07 11:14:39 | 000,000,027 | ---- | M] () -- C:\windows\SysNative\drivers\etc\hosts
[2013/11/07 10:04:54 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\WindowsAccessBridge-32.dll
[2013/11/07 10:04:50 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\javaws.exe
[2013/11/07 10:04:50 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\javaw.exe
[2013/11/07 10:04:48 | 000,174,504 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\java.exe
[2013/11/07 09:23:25 | 005,144,303 | R--- | M] (Swearware) -- C:\Users\Wheelsup Club\Desktop\ComboFix.exe
[2013/11/06 11:14:12 | 000,409,832 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsp.sys
[2013/11/06 10:16:33 | 000,000,797 | ---- | M] () -- C:\windows\qpw.INI
[2013/11/06 10:16:23 | 000,201,728 | ---- | M] () -- C:\Users\Wheelsup Club\Documents\Visitors to DDDPL Website (January 23, 2009)1.qpw
[2013/11/06 10:16:12 | 000,201,728 | ---- | M] () -- C:\Users\Wheelsup Club\Documents\Visitors to DDDPL Website (January 23, 2009)2.qpw
[2013/11/05 14:11:17 | 000,001,116 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/11/04 21:19:53 | 000,810,974 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2013/11/04 21:19:53 | 000,681,578 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2013/11/04 21:19:53 | 000,130,288 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2013/11/03 07:17:53 | 000,001,973 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013/11/03 07:16:47 | 001,032,416 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswSnx.sys
[2013/11/03 07:16:47 | 000,334,648 | ---- | M] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
[2013/11/03 07:16:47 | 000,205,320 | ---- | M] () -- C:\windows\SysNative\drivers\aswVmm.sys
[2013/11/03 07:16:47 | 000,084,328 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswMonFlt.sys
[2013/11/03 07:16:47 | 000,065,776 | ---- | M] () -- C:\windows\SysNative\drivers\aswRvrt.sys
[2013/11/03 07:16:47 | 000,065,264 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswTdi.sys
[2013/11/03 07:16:47 | 000,038,984 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswFsBlk.sys
[2013/11/03 07:16:46 | 000,092,544 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswRdr2.sys
[2013/11/03 07:16:45 | 000,043,152 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr
[2013/11/02 10:43:22 | 000,005,057 | ---- | M] () -- C:\Users\Wheelsup Club\Documents\Attach.zip
[2013/11/01 14:28:13 | 000,003,279 | ---- | M] () -- C:\Users\Wheelsup Club\AppData\Local\recently-used.xbel
[2013/11/01 08:42:28 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
[2013/11/01 08:42:28 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/10/31 14:30:57 | 000,000,058 | ---- | M] () -- C:\Users\Wheelsup Club\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2013/10/31 08:18:19 | 000,001,174 | ---- | M] () -- C:\Users\Wheelsup Club\Desktop\Continue Firefox Free Download Installation.lnk
[2013/10/30 08:51:10 | 000,001,386 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013/10/27 13:13:18 | 000,000,829 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013/10/27 07:55:40 | 000,001,790 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/10/25 08:50:20 | 000,001,014 | ---- | M] () -- C:\Users\Public\Desktop\Audacity.lnk
[2013/10/23 07:20:47 | 000,000,986 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk
[2013/10/21 15:43:32 | 000,000,020 | -H-- | M] () -- C:\ProgramData\PKP_DLet.DAT
[2013/10/19 09:33:54 | 000,001,205 | ---- | M] () -- C:\Users\Wheelsup Club\Desktop\Format Factory.lnk
[2013/10/17 10:44:05 | 000,001,938 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2013/10/17 10:44:05 | 000,001,938 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2013/10/16 16:01:55 | 000,001,945 | ---- | M] () -- C:\windows\epplauncher.mif
[2013/10/16 07:57:05 | 017,813,896 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerInstaller.exe
[2013/10/15 15:28:55 | 000,001,053 | ---- | M] () -- C:\Users\Wheelsup Club\Desktop\Flash Movie Player.lnk
[2013/10/15 15:27:26 | 000,001,149 | ---- | M] () -- C:\Users\Wheelsup Club\Desktop\Continue FLV Player Installation.lnk
[2013/10/11 09:16:03 | 000,450,642 | R--- | M] () -- C:\windows\SysNative\drivers\etc\hosts.20131027-085644.backup
[2013/10/10 06:53:40 | 001,143,400 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2013/10/09 15:46:02 | 000,804,698 | ---- | M] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2013/10/09 15:29:08 | 000,001,058 | ---- | M] () -- C:\Users\Wheelsup Club\Desktop\Inkscape.lnk
[2013/10/09 12:41:48 | 000,001,110 | ---- | M] () -- C:\Users\Wheelsup Club\Desktop\Screenshot Captor.lnk
[2013/10/09 09:14:33 | 000,001,203 | ---- | M] () -- C:\Users\Wheelsup Club\Application Data\Microsoft\Internet Explorer\Quick Launch\JustZIPit.lnk
[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
[1 C:\Users\Wheelsup Club\Documents\*.tmp files -> C:\Users\Wheelsup Club\Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/11/07 09:38:58 | 000,256,000 | ---- | C] () -- C:\windows\PEV.exe
[2013/11/07 09:38:58 | 000,208,896 | ---- | C] () -- C:\windows\MBR.exe
[2013/11/07 09:38:58 | 000,098,816 | ---- | C] () -- C:\windows\sed.exe
[2013/11/07 09:38:58 | 000,080,412 | ---- | C] () -- C:\windows\grep.exe
[2013/11/07 09:38:58 | 000,068,096 | ---- | C] () -- C:\windows\zip.exe
[2013/11/05 14:11:17 | 000,001,116 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/11/03 07:17:53 | 000,001,973 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013/11/03 07:17:07 | 000,205,320 | ---- | C] () -- C:\windows\SysNative\drivers\aswVmm.sys
[2013/11/03 07:17:07 | 000,065,776 | ---- | C] () -- C:\windows\SysNative\drivers\aswRvrt.sys
[2013/11/02 10:43:22 | 000,005,057 | ---- | C] () -- C:\Users\Wheelsup Club\Documents\Attach.zip
[2013/11/01 14:28:13 | 000,003,279 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\recently-used.xbel
[2013/11/01 09:15:13 | 000,001,166 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/10/31 08:22:18 | 000,000,830 | ---- | C] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2013/10/31 08:18:19 | 000,001,174 | ---- | C] () -- C:\Users\Wheelsup Club\Desktop\Continue Firefox Free Download Installation.lnk
[2013/10/30 08:51:10 | 000,001,398 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
[2013/10/30 08:51:10 | 000,001,386 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013/10/27 07:55:40 | 000,001,790 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/10/19 09:33:54 | 000,001,205 | ---- | C] () -- C:\Users\Wheelsup Club\Desktop\Format Factory.lnk
[2013/10/15 15:28:55 | 000,001,053 | ---- | C] () -- C:\Users\Wheelsup Club\Desktop\Flash Movie Player.lnk
[2013/10/15 15:27:26 | 000,001,149 | ---- | C] () -- C:\Users\Wheelsup Club\Desktop\Continue FLV Player Installation.lnk
[2013/10/09 15:29:08 | 000,001,058 | ---- | C] () -- C:\Users\Wheelsup Club\Desktop\Inkscape.lnk
[2013/10/09 12:41:57 | 000,000,058 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2013/10/09 12:41:48 | 000,001,110 | ---- | C] () -- C:\Users\Wheelsup Club\Desktop\Screenshot Captor.lnk
[2013/10/09 09:14:33 | 000,001,203 | ---- | C] () -- C:\Users\Wheelsup Club\Application Data\Microsoft\Internet Explorer\Quick Launch\JustZIPit.lnk
[2013/08/17 22:15:59 | 000,000,000 | ---- | C] () -- C:\windows\ViewNX2.INI
[2013/08/17 22:09:40 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Devices
[2013/08/17 22:09:40 | 000,000,268 | RH-- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\Database
[2013/08/17 22:09:40 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLes.DAT
[2013/08/17 22:09:40 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Echo
[2013/08/17 22:09:00 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Dialogs
[2013/08/17 22:09:00 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Developer Tools
[2013/08/17 22:09:00 | 000,000,268 | RH-- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\Definition Bundle
[2013/08/17 22:09:00 | 000,000,268 | RH-- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\Dance Kit
[2013/08/17 22:09:00 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLev.DAT
[2013/08/17 22:09:00 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLet.DAT
[2013/08/17 22:09:00 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Electric Clav
[2013/08/17 22:08:31 | 000,000,268 | RH-- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\Distortion
[2013/08/17 22:08:31 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLeo.DAT
[2013/08/17 22:08:31 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Frameworks
[2013/08/17 22:08:31 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Drums
[2013/08/13 20:40:51 | 001,169,609 | ---- | C] () -- C:\windows\unins001.exe
[2013/08/13 20:40:51 | 000,098,005 | ---- | C] () -- C:\windows\unins001.dat
[2013/05/03 12:06:07 | 000,000,050 | ---- | C] () -- C:\Users\Wheelsup Club\dlmgr_.pro
[2013/04/12 15:55:19 | 000,000,067 | ---- | C] () -- C:\windows\swf2avi.INI
[2013/04/10 13:34:56 | 000,753,873 | ---- | C] () -- C:\windows\unins000.exe
[2013/03/23 18:46:30 | 000,057,866 | ---- | C] () -- C:\windows\unins000.dat
[2013/03/22 19:36:06 | 000,001,206 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\CamStudio.Producer.ini
[2013/03/22 19:36:06 | 000,000,000 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\CamStudio.Producer.Data.ini
[2013/03/22 19:30:49 | 000,000,098 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\CamStudio.Producer.command
[2013/03/22 14:29:16 | 000,000,258 | RHS- | C] () -- C:\Users\Wheelsup Club\ntuser.pol
[2013/03/21 13:24:12 | 000,004,521 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\CamStudio.cfg
[2013/03/21 13:24:12 | 000,000,408 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\CamShapes.ini
[2013/03/21 13:24:12 | 000,000,408 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\CamLayout.ini
[2013/03/21 13:24:12 | 000,000,114 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\Camdata.ini
[2013/03/18 20:32:09 | 000,109,782 | ---- | C] () -- C:\windows\CopernicAgentUninstall.exe
[2013/03/17 20:21:24 | 000,448,736 | ---- | C] () -- C:\windows\SysWow64\GSService.exe
[2013/03/11 19:46:33 | 000,023,040 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/03/11 19:40:33 | 000,033,019 | ---- | C] () -- C:\windows\SysWow64\CoreAAC-uninstall.exe
[2013/03/11 18:56:51 | 000,000,008 | -H-- | C] () -- C:\windows\SysWow64\adb.dat
[2013/03/11 15:08:37 | 000,178,688 | ---- | C] () -- C:\windows\SysWow64\unrar.dll
[2013/02/24 20:08:18 | 000,000,216 | ---- | C] () -- C:\Users\Wheelsup Club\.swfinfo
[2012/12/22 09:58:09 | 000,000,000 | ---- | C] () -- C:\windows\nsreg.dat
[2012/12/12 13:08:51 | 000,001,724 | ---- | C] () -- C:\windows\SysWow64\tsdigsgn.dat
[2012/12/11 14:32:31 | 000,380,928 | ---- | C] () -- C:\windows\ccremove.exe
[2012/11/21 16:00:28 | 000,000,036 | ---- | C] () -- C:\windows\TSNPL.dat
[2012/09/24 20:52:26 | 000,000,000 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\bibstats
[2012/09/24 18:50:08 | 000,000,000 | ---- | C] () -- C:\Users\Wheelsup Club\mm_backup.cfg
[2012/08/08 18:23:57 | 000,000,727 | ---- | C] () -- C:\Users\Wheelsup Club\petitionscript.php
[2012/07/24 09:12:11 | 000,077,765 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\DDDPL Accounts.gnucash
[2012/07/04 00:34:16 | 000,204,952 | ---- | C] () -- C:\windows\SysWow64\ativvsvl.dat
[2012/07/04 00:34:16 | 000,157,144 | ---- | C] () -- C:\windows\SysWow64\ativvsva.dat
[2012/04/18 18:39:10 | 000,028,672 | ---- | C] () -- C:\windows\SysWow64\kdbsdk32.dll
[2012/03/30 14:33:10 | 000,393,216 | ---- | C] () -- C:\windows\RTS8891U.dll
[2012/03/30 14:33:10 | 000,131,072 | ---- | C] () -- C:\windows\u2x00_32.dll
[2012/03/30 14:33:10 | 000,106,528 | ---- | C] () -- C:\windows\u1230_32.dll
[2012/03/30 14:33:10 | 000,068,608 | ---- | C] () -- C:\windows\vufile32.dll
[2012/03/30 14:33:10 | 000,047,616 | ---- | C] () -- C:\windows\ucmsp_32.dll
[2012/03/30 14:33:10 | 000,030,208 | ---- | C] () -- C:\windows\uxmail32.dll
[2012/03/30 14:33:10 | 000,027,648 | ---- | C] () -- C:\windows\vudcli32.dll
[2012/03/30 14:33:10 | 000,000,674 | ---- | C] () -- C:\windows\vista32.ini
[2012/03/30 14:33:10 | 000,000,195 | ---- | C] () -- C:\windows\KPCMS.INI
[2012/03/30 14:33:10 | 000,000,065 | ---- | C] () -- C:\windows\umaxdrv.ini
[2012/03/30 14:33:10 | 000,000,026 | ---- | C] () -- C:\windows\ucmsp_32.ini
[2012/03/24 12:27:54 | 000,036,864 | ---- | C] () -- C:\windows\SysWow64\iduninst.dll
[2012/03/16 15:29:42 | 000,000,193 | ---- | C] () -- C:\windows\WORDPAD.INI
[2012/03/16 15:10:29 | 000,000,000 | ---- | C] () -- C:\Users\Wheelsup Club\downloader.exe
[2012/02/28 11:18:35 | 000,000,341 | ---- | C] () -- C:\windows\pagebreeze.ini
[2012/02/28 11:18:35 | 000,000,044 | ---- | C] () -- C:\windows\formbreeze.ini
[2012/01/14 19:30:00 | 000,098,304 | ---- | C] () -- C:\windows\SysWow64\redmonnt.dll
[2012/01/14 16:37:45 | 000,012,293 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114163745.gnucash
[2012/01/14 16:26:50 | 000,012,216 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114162650.gnucash
[2012/01/14 16:26:08 | 000,011,581 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114162608.gnucash
[2012/01/14 16:21:00 | 000,010,992 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114162100.gnucash
[2012/01/14 16:14:16 | 000,010,914 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114161416.gnucash
[2012/01/14 16:12:42 | 000,011,028 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114161242.gnucash
[2012/01/14 16:07:41 | 000,010,651 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114160741.gnucash
[2012/01/14 16:02:37 | 000,010,140 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114160237.gnucash
[2012/01/14 15:57:18 | 000,009,526 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114155718.gnucash
[2012/01/14 15:50:30 | 000,009,409 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114155030.gnucash
[2012/01/14 15:45:12 | 000,009,166 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114154512.gnucash
[2012/01/14 15:43:14 | 000,008,560 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114154314.gnucash
[2012/01/14 15:38:10 | 000,008,136 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114153810.gnucash
[2012/01/14 15:32:57 | 000,007,795 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114153257.gnucash
[2012/01/14 15:27:11 | 000,007,635 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114152711.gnucash
[2012/01/14 15:22:07 | 000,007,213 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114152207.gnucash
[2012/01/14 15:16:30 | 000,006,857 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114151630.gnucash
[2012/01/14 14:56:35 | 000,006,754 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114145635.gnucash
[2012/01/14 14:50:45 | 000,006,483 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114145045.gnucash
[2012/01/14 14:45:41 | 000,006,045 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114144541.gnucash
[2012/01/14 14:34:32 | 000,006,045 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114143432.gnucash
[2012/01/14 14:27:30 | 000,005,902 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114142730.gnucash
[2012/01/14 14:24:08 | 000,005,487 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114142408.gnucash
[2012/01/14 14:18:56 | 000,004,984 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114141856.gnucash
[2012/01/14 14:13:54 | 000,004,547 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120114141354.gnucash
[2012/01/13 23:16:00 | 000,004,285 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113231600.gnucash
[2012/01/13 23:09:20 | 000,004,200 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113230920.gnucash
[2012/01/13 23:03:19 | 000,004,289 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113230319.gnucash
[2012/01/13 22:57:37 | 000,004,488 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113225737.gnucash
[2012/01/13 22:51:06 | 000,004,430 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113225106.gnucash
[2012/01/13 22:45:35 | 000,004,396 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113224535.gnucash
[2012/01/13 22:40:03 | 000,004,304 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113224003.gnucash
[2012/01/13 22:34:59 | 000,004,349 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113223459.gnucash
[2012/01/13 22:28:30 | 000,004,160 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113222830.gnucash
[2012/01/13 22:22:10 | 000,003,994 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash.20120113222210.gnucash
[2012/01/13 22:04:05 | 000,012,293 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Local\Chart Of Accounts (January 13, 2012).gnucash
[2011/12/20 16:48:58 | 000,017,920 | ---- | C] () -- C:\windows\WebFerretUninstall.exe
[2011/12/20 16:48:57 | 000,008,192 | ---- | C] () -- C:\windows\SysWow64\NetFerret.dll
[2011/12/13 10:28:49 | 000,061,678 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\PFP90JPR.{PB
[2011/12/13 10:28:49 | 000,012,358 | ---- | C] () -- C:\Users\Wheelsup Club\AppData\Roaming\PFP90JCM.{PB

========== ZeroAccess Check ==========

[2013/10/29 13:46:59 | 000,000,000 | -HSD | M] -- C:\Users\Wheelsup Club\AppData\Local\Google\Desktop\Install\{8d8b353f-1586-90d2-b96a-5971d851d5e3}\❤≸⋙\Ⱒ☠⍨\*ﯹ๛\{8d8b353f-1586-90d2-b96a-5971d851d5e3}\L
[2013/10/29 13:46:59 | 000,000,000 | -HSD | M] -- C:\Users\Wheelsup Club\AppData\Local\Google\Desktop\Install\{8d8b353f-1586-90d2-b96a-5971d851d5e3}\❤≸⋙\Ⱒ☠⍨\*ﯹ๛\{8d8b353f-1586-90d2-b96a-5971d851d5e3}\U
[2012/11/09 23:09:20 | 000,000,596 | ---- | M] () -- C:\Users\Wheelsup Club\Desktop\Rarely-used Icons\Old Firefox Data\extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}\defaults\printing\icons\@.png
[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 21:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 20:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/03/17 18:47:56 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\4Free
[2013/09/16 13:51:38 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\5b9fa4523c026efaa14deb116069b2e3
[2012/03/15 15:40:16 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\andre-simon.de
[2013/03/19 21:44:59 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\AnvSoft
[2013/02/24 19:57:42 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Apowersoft
[2013/04/05 13:04:06 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Applian FLV and Media Player
[2013/09/24 14:55:37 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Audacity
[2013/03/17 17:17:43 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Aura4You
[2013/11/03 07:18:12 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\AVAST Software
[2013/03/11 18:46:01 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\AviDvdBurner
[2013/03/11 19:26:07 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\AvitoDvd
[2013/04/22 09:37:53 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\BHOK IT Consulting
[2013/03/23 12:05:10 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Blueberry
[2013/03/18 20:32:13 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Copernic
[2012/09/26 15:43:49 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\DassaultSystemes
[2013/09/04 10:39:35 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\desksware
[2013/10/09 12:41:57 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\DonationCoder
[2013/04/09 14:23:03 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Downloaded Installations
[2013/09/29 12:47:44 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\DVDVideoSoft
[2012/12/11 14:13:01 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FFSJ
[2013/02/13 15:36:57 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FileOpen
[2013/10/31 20:43:50 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FileZilla
[2013/02/13 16:11:23 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FireShot
[2013/04/09 15:08:24 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FM Software Studio
[2013/09/24 13:04:26 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Free Audio Editor
[2013/03/17 19:20:01 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Free AVI Video Converter
[2013/10/09 09:14:32 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Free-backup.info
[2013/09/20 13:11:14 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FreeFileViewer
[2011/12/24 16:04:29 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FreeImageConverter
[2012/11/06 11:13:28 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\FVD Suite
[2013/03/17 20:20:42 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\GetRightToGo
[2012/11/21 16:08:19 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\GSplit
[2011/10/28 21:21:34 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\HeidiSQL
[2013/08/25 13:11:55 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\inkscape
[2013/03/22 13:51:02 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\iSpy
[2013/03/22 14:28:41 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Kingsoft
[2013/03/22 21:26:14 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\LogSys
[2012/12/22 09:58:08 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Netscape
[2013/08/17 22:12:04 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Nikon
[2013/02/13 15:36:57 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Nitro
[2011/10/27 22:33:24 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\OEM
[2013/07/18 14:25:07 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Olsoft
[2013/08/24 12:10:46 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\OpenOffice
[2011/10/28 10:02:01 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\OpenOffice.org
[2013/03/17 19:05:06 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\OxelonMC
[2011/12/14 16:31:23 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Packard Bell
[2013/04/02 08:03:27 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\PrimoPDF
[2013/04/12 15:48:18 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\RecoolTec
[2013/08/25 10:45:21 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\SoftGrid Client
[2012/11/08 16:49:25 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\TP
[2011/12/27 16:29:06 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Trellian
[2012/12/11 15:50:41 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\TrueCrypt
[2012/03/04 09:18:49 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\TweakNow PowerPack 2012
[2012/02/28 11:11:41 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Virtual Mechanics
[2011/10/28 13:57:54 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\WildTangent
[2011/11/03 13:25:39 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Windows Live Writer
[2013/03/23 12:45:30 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\WinFF
[2013/03/11 19:32:21 | 000,000,000 | ---D | M] -- C:\Users\Wheelsup Club\AppData\Roaming\Xilisoft

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:A5514ABC

< End of report >


...(continued)

[ramping]

2. OTL Extras.txt:



OTL Extras logfile created on: 11/7/2013 2:27:28 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Wheelsup Club\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.73 Gb Total Physical Memory | 3.26 Gb Available Physical Memory | 56.88% Memory free
11.47 Gb Paging File | 8.49 Gb Available in Paging File | 74.03% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 915.73 Gb Total Space | 591.84 Gb Free Space | 64.63% Space Free | Partition Type: NTFS

Computer Name: WHEELSUPCLUB-PC | User Name: Wheelsup Club | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistApplianMP] -- "C:\Program Files (x86)\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" ()
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Backup using FileFort Backup] -- "C:\Program Files (x86)\NCH Software\FileFort\filefort.exe" -addjobfor "%1" -list "%L"
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Create slideshow with PhotoStage Slideshow Producer] -- "C:\Program Files (x86)\NCH Software\PhotoStage\photostage.exe" "%L"
Directory [File Finder...] -- C:\Program Files (x86)\Ontrack\PowerDesk\pdfind.exe /PATH:%1 (Ontrack Data International)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithApplianMP] -- "C:\Program Files (x86)\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistApplianMP] -- "C:\Program Files (x86)\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --playlist-enqueue "%1" ()
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Backup using FileFort Backup] -- "C:\Program Files (x86)\NCH Software\FileFort\filefort.exe" -addjobfor "%1" -list "%L"
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Create slideshow with PhotoStage Slideshow Producer] -- "C:\Program Files (x86)\NCH Software\PhotoStage\photostage.exe" "%L"
Directory [File Finder...] -- C:\Program Files (x86)\Ontrack\PowerDesk\pdfind.exe /PATH:%1 (Ontrack Data International)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithApplianMP] -- "C:\Program Files (x86)\Applian Technologies\Applian FLV and Media Player\amp.exe" -I skins2 --started-from-file --no-playlist-enqueue "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0F1DA359-64CA-478D-BF35-B140AC54D5F0}" = lport=94 | protocol=6 | dir=in | app=c:\program files (x86)\nch software\vrs\vrs.exe |
"{1F830682-0423-44AB-8878-62FB64A43BBC}" = lport=137 | protocol=17 | dir=in | app=system |
"{2E4E39FC-B4F9-471F-9F12-891B760E8048}" = lport=94 | protocol=6 | dir=out | app=c:\program files (x86)\nch software\vrs\vrs.exe |
"{43A93B43-AF9C-4BD1-AFD3-836CAB03B63E}" = lport=67 | protocol=17 | dir=in | name=dhcp discovery service |
"{4482C0F7-4DCF-4A09-BF6B-60AEE099489B}" = lport=138 | protocol=17 | dir=in | app=system |
"{45D6F676-FEC8-4DED-B92E-069CCAE34A3C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4A80AC2F-D991-4222-BEEF-10D732D92541}" = rport=139 | protocol=6 | dir=out | app=system |
"{4A972923-DC3F-4789-A694-26559FC68413}" = lport=4100 | protocol=17 | dir=in | app=c:\program files (x86)\nch software\vrs\vrs.exe |
"{5A375D52-2D42-4DB7-805D-EC0121A3A9D1}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{6143B31C-8A65-402E-B3C1-472E9B1AF432}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{69E3CB8B-765A-417C-A427-B81232B5AD56}" = rport=137 | protocol=17 | dir=out | app=system |
"{79A8BE13-2BCD-46F5-B964-9C0723F3E093}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7F74A5F0-6D11-46D4-86A9-248BEBBCB354}" = rport=10243 | protocol=6 | dir=out | app=system |
"{84C7E73E-4449-44EC-9133-3A1B6483B27C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{86C0186C-DE6E-4CC5-BFCB-40A06117D5B4}" = lport=10243 | protocol=6 | dir=in | app=system |
"{86D07EEC-592B-42FB-AB79-AD7ED2612A41}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{89193AB5-EA13-4DFD-B6F5-CE3A4081B606}" = lport=94 | protocol=6 | dir=in | app=c:\program files (x86)\nch software\vrs\vrs.exe |
"{8AC491CA-40BD-470A-9FD6-45F0200EB850}" = rport=138 | protocol=17 | dir=out | app=system |
"{8F1EA68C-FB4C-46E1-8AA4-9650609EDF8C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{915C5472-629F-4A12-BACE-6924FB2E9D82}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A87DC465-D640-42CE-8C76-2CCBCC7CDB06}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{AC0DAD3C-9086-433D-BF86-C278006D95A7}" = rport=445 | protocol=6 | dir=out | app=system |
"{B26D9466-E287-4457-B19E-5D6C558F73D9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B88C6C2D-F54E-40C4-BEC3-A5F7A1BC3FC6}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{BC225EAA-657C-44C5-B3E6-BA800CBAF765}" = lport=4100 | protocol=17 | dir=out | app=c:\program files (x86)\nch software\vrs\vrs.exe |
"{C3B14BF4-5EA5-4A2B-B20F-57CE1EFF2572}" = lport=445 | protocol=6 | dir=in | app=system |
"{CA5472D0-DEE4-4988-B1E9-95BF3E05E9BE}" = lport=139 | protocol=6 | dir=in | app=system |
"{D186B523-DEE2-4AC1-9F60-43FE4771A66E}" = lport=94 | protocol=6 | dir=out | app=c:\program files (x86)\nch software\vrs\vrs.exe |
"{DB083080-1464-4FF9-8F4C-EDD4A0C490BF}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DC16C320-952B-43F6-B6A0-75351D1CAFD5}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{EEB266AA-3AB4-45CB-87BE-6DD178B4AFCF}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FA44A05C-28AC-47AA-9E34-BAF3CD10F638}" = lport=2869 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02E37E92-8A4A-48F4-950D-361E21F3617A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{03310AA0-DF5E-48D2-A23C-EF0D5DBB8B33}" = dir=in | app=c:\program files (x86)\apowersoft\video download capture\apowersoftdump.dll |
"{0EA6D42E-68FB-4FF1-ABF5-BEF32D22C255}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{15E91B87-DB61-4E7B-9490-7EE51CE95E90}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd9.exe |
"{22BFBEDA-392E-4076-9795-CE4270F10CB9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2846477C-25D1-436A-81B3-83CC481A1A41}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2A73BCEE-79EA-46AC-BA15-A62775200CA6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{2EB972CA-2F7D-4F80-98E3-BA63A44FE666}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{301776EF-100D-411E-AEDF-2EEF700FDB1A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3650CE17-0F67-4E14-90B3-26202A67BD40}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4E46FE66-2F63-40FE-90DE-51616B40CA91}" = dir=in | app=c:\program files (x86)\apowersoft\video download capture\video-download-capture.exe |
"{50441266-DA08-47AC-8823-88778D7D25FF}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{511ACEB1-9C0A-4BF3-802A-92D7F3D0C37E}" = dir=in | app=c:\program files (x86)\vmware\vmware player\vmware-authd.exe |
"{590BFC7F-BDC0-4DD2-9D94-A8D34226822A}" = dir=in | app=c:\users\wheelsup club\appdata\local\microsoft\skydrive\skydrive.exe |
"{5A45AC9F-C737-4AD3-8874-F2F34FD0FF04}" = dir=in | app=c:\program files (x86)\freefileviewer\ffvcheckforupdates.exe |
"{60B22B50-08DA-469E-ABBE-6296C4B51C8F}" = protocol=6 | dir=in | app=c:\program files (x86)\deep log analyzer\dla.exe |
"{6B01FEB4-A328-44F9-9116-04ADB55397DB}" = protocol=17 | dir=in | app=c:\program files (x86)\firebird\firebird_2_1\bin\fbserver.exe |
"{6BAFA53D-CD7F-4508-A12B-764DFD44257C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6F91DEB8-9A91-4491-8095-077DAEE30757}" = dir=in | app=c:\program files (x86)\file type assistant\tsassist.exe |
"{72FF27FC-0626-496A-BCB9-7768C15BC4B5}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{7A342823-30A0-4E3B-97CD-9241A6488E73}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{9C0F6390-5BC6-49A8-B76E-859E967B4F42}" = protocol=17 | dir=in | app=c:\program files (x86)\deep log analyzer\dla.exe |
"{9F8F27B0-1A5E-4FB4-97DA-C0CC09C17C13}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A143A69F-9AA9-41BA-B5B7-4C8E56782A9C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A3E802B9-FC45-4061-AA23-50666ED2598B}" = protocol=17 | dir=in | app=c:\program files (x86)\ibm\lotus\symphony\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.2.3.20110915-1350\win32\x86\symphony.exe |
"{A4F6A869-9845-4560-B944-66A6088A1A19}" = protocol=6 | dir=in | app=c:\program files (x86)\firebird\firebird_2_1\bin\fbserver.exe |
"{A5A6D46A-F083-45AC-8B41-8378E02446DD}" = protocol=6 | dir=out | app=system |
"{A5A88F58-D7FE-4D04-90CD-078B764FD3E8}" = dir=in | app=c:\program files (x86)\apowersoft\video download capture\videodownloadcapture.exe |
"{AA9E29DE-3138-467D-A62B-5DA5DA998BE0}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{B352E4DB-DF86-46E4-91E5-F84AE3BAC641}" = dir=in | app=c:\program files (x86)\file type assistant\tsassist.exe |
"{B8B1BE0A-6597-47ED-9C97-6E48DF36164D}" = dir=in | app=c:\program files (x86)\file type assistant\tsassist.exe |
"{BA67F8E9-083E-43CD-8295-C56A7D1B75E6}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{BE864846-CEE7-41CF-A9C7-3916797DE610}" = protocol=6 | dir=in | app=c:\program files (x86)\ftp commander\ftpcomm.exe |
"{C3A7EF3C-F2AE-4E6B-9BD0-5DE0F9BB09C2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C59ABA3F-591B-46E4-8487-B5F978BB2CC6}" = protocol=6 | dir=in | app=c:\program files (x86)\ibm\lotus\symphony\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.2.3.20110915-1350\win32\x86\symphony.exe |
"{CC700E74-30A0-42C9-B527-F73DE1374D35}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{CED8E119-8880-448C-975B-75B706A43420}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DEB817A7-1E90-4714-8359-210201092550}" = dir=in | app=c:\program files (x86)\apowersoft\video download capture\apowersoftsrv.dll |
"{E5F7F306-BD93-40E6-8FA5-AEEE58B30BFB}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{E9C4D6C4-A23F-4AE2-A3F2-3D44FDB639D4}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{EB5E43DC-E4EF-49E2-907B-DA417EF83484}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F8C284E0-B2FE-4306-8774-9A21AEBB22B7}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{F954BAA2-1E4C-45FE-9A25-CE020565B747}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{FC308072-B5A5-44BB-A1BB-0C77C692C2BA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FE911BE9-AD01-4D3F-A5B2-31A999FAEBEA}" = protocol=17 | dir=in | app=c:\program files (x86)\ftp commander\ftpcomm.exe |
"TCP Query User{29D99F1E-6A47-4155-9575-832633175D77}C:\program files (x86)\fvd suite\fvd downloader\fvd downloader.exe" = protocol=6 | dir=in | app=c:\program files (x86)\fvd suite\fvd downloader\fvd downloader.exe |
"TCP Query User{324D21EC-DDF2-4AF0-B658-0DE1D5C3CCDB}C:\program files (x86)\ftp commander\ftpcomm.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ftp commander\ftpcomm.exe |
"TCP Query User{642DC97E-3768-4B01-A84A-3693DCCE357A}C:\program files (x86)\firebird\firebird_2_1\bin\fbserver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\firebird\firebird_2_1\bin\fbserver.exe |
"TCP Query User{983ADCB3-3960-4D79-BF3D-E03C11DA5FDD}C:\program files (x86)\deep log analyzer\dla.exe" = protocol=6 | dir=in | app=c:\program files (x86)\deep log analyzer\dla.exe |
"TCP Query User{D19C1643-3A5F-48D8-8A53-FE47D5B6C32F}C:\users\wheelsup club\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe" = protocol=6 | dir=in | app=c:\users\wheelsup club\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe |
"TCP Query User{D9152336-542F-4956-815D-37C19C44A740}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"UDP Query User{3C5AA8E4-1B9A-4FFC-B19A-68474DCEB340}C:\program files (x86)\fvd suite\fvd downloader\fvd downloader.exe" = protocol=17 | dir=in | app=c:\program files (x86)\fvd suite\fvd downloader\fvd downloader.exe |
"UDP Query User{3DD95C1F-053A-4F91-B4AC-7D1D1ED17955}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"UDP Query User{56865B3D-7DA2-4419-90B2-C61F19EA81D2}C:\users\wheelsup club\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe" = protocol=17 | dir=in | app=c:\users\wheelsup club\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe |
"UDP Query User{8B0C83D1-A608-43E9-B06E-45F0130993F4}C:\program files (x86)\firebird\firebird_2_1\bin\fbserver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\firebird\firebird_2_1\bin\fbserver.exe |
"UDP Query User{B3D83ABB-B587-459E-AA67-E53037CC87BF}C:\program files (x86)\ftp commander\ftpcomm.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ftp commander\ftpcomm.exe |
"UDP Query User{DD9FCD2B-F15F-4AA8-A6F3-3CB35772EFEB}C:\program files (x86)\deep log analyzer\dla.exe" = protocol=17 | dir=in | app=c:\program files (x86)\deep log analyzer\dla.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{018F3B17-AF23-809D-3807-25A16563416C}" = AMD Media Foundation Decoders
"{11953C65-BB4E-4CA4-B0F0-2600A4B20040}" = Picture Control Utility x64
"{1374CC63-B520-4f3f-98E8-E9020BF01CFF}" = Windows XP Mode
"{170EF2EC-C6AC-9418-933B-E2215E5ACE62}" = AMD Accelerated Video Transcoding
"{1A2B11DC-654B-0C80-14AA-B980D07257A7}" = ccc-utility64
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2231CA42-C1E1-13C2-FAA5-4A832ABE3AAB}" = ATI AVIVO64 Codecs
"{26A24AE4-039D-4CA4-87B4-2F86417011FF}" = Java 7 Update 11 (64-bit)
"{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support
"{2F195958-3530-E1DD-FAAD-28A81421525C}" = AMD Fuel
"{2FD0FA0A-7A21-4C4A-B268-1142B54E035E}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4FF5C7C9-86CC-41ED-B93B-0B51AB4FED24}" = VmciSockets
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5EEC477F-8E9B-4420-8829-16E7426227DB}" = Windows Live MIME IFilter
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{635BE602-BB9C-4C59-8CC5-93F9366E8A21}" = ViewNX 2
"{6ACE7F46-FACE-4125-AE86-672F4F2A6A28}" = Bing Maps 3D
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6E5159B4-A519-41EF-80EF-AD58371515DF}" = Eraser 6.0.10.2620
"{72EF03F5-0507-4861-9A44-D99FD4C41418}" = Paint.NET v3.5.11
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D26D58C-3464-4C03-BB61-5695F984EFEF}" = Microsoft Security Client
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A04DCB25-7040-4935-A30D-8E0A893ABF2D}" = iTunes
"{A2A448FD-B078-DBF9-0F3F-AC8A8A4ADDB9}" = AMD Drag and Drop Transcoding
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{CF1EB598-B424-436A-B15F-B763846BA970}" = Dassault Systemes Software Prerequisites x86-x64
"{E391E2FF-927F-46A6-8466-C688A2FAF1FB}" = AMD Catalyst Install Manager
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}" = iCloud
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Desktop iCalendar Lite_is1" = Desktop iCalendar Lite
"ffdshow64_is1" = ffdshow x64 v1.3.4500 [2013-01-06]
"File Shredder_is1" = File Shredder 2.5
"KLiteCodecPack64_is1" = K-Lite Codec Pack 9.8.0 (64-bit)
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.46-1 (x64)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform
"{03E1711E-2A57-D826-142F-4D1C8CBB9CE3}" = CCC Help Korean
"{04B83666-3A62-452B-85D3-70F8117F2329}_is1" = CamStudio version 2.7
"{05499036-169E-2DB2-CA6A-921826EDB571}" = CCC Help Hungarian
"{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery
"{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions
"{14FA6DD9-92ED-493D-A937-81A78870E08A}_is1" = Free Video Joiner
"{16FD907B-FA72-4F3C-B959-E076C8238F80}" = Napster Label Creator
"{1737B9BC-D3B4-D62A-C79F-049D1C14BAC5}" = CCC Help Finnish
"{17D86E62-4849-49BC-83D2-FA369CEEA9D9}_is1" = Any Video Recorder version 1.0.2
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1959CCD2-1227-4de4-97E7-04F29D526762}_is1" = AnyMedia Player 3.4.2
"{1C179D24-8307-A87E-5BF2-7F847B5489FB}" = CCC Help Dutch
"{1C961E37-1448-39D0-7A46-BB6BEA266C18}" = CCC Help Russian
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{24E95349-8629-47A0-EB12-9B081EFE4122}" = Catalyst Control Center Localization All
"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = MPC-HC 1.7.0
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 29
"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 45
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2AC01935-3774-4981-98C8-14E93C14372C}" = Windows Live UX Platform Language Pack
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3315B802-84C6-47BC-907A-9B77A4646197}_is1" = SWF to AVI
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee SiteAdvisor
"{38B50CEC-C683-404D-BAD7-48CBCBFF981B}_is1" = Free WebM to AVI Converter 1.0
"{3C74D5C3-EBB9-408E-972F-B9802F13D5E4}" = 3DVIA Shape for Maps
"{3C9D008D-3716-4C3F-90CD-38ED57568FAB}_is1" = Video Download Capture V4.3.2
"{3E2D9049-CB69-11D2-94EC-00A0C90683DA}" = VBA (2720)
"{3F1C9552-58E0-4AAC-A616-AE3A28720EC6}" = GimpShop 2.8
"{4048B649-4AD0-1C0F-3C0F-09478FE3E4E8}" = CCC Help Chinese Traditional
"{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1" = Pazera Free MP4 to AVI Converter 1.6
"{44327031-4B00-4D21-8D25-620B6B476005}_is1" = Free SWF to AVI Converter
"{449CE12D-E2C7-4B97-B19E-55D163EA9435}" = Bing Bar
"{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{51E47ACA-6672-7A6B-FE18-20E1EA4802E3}" = CCC Help Greek
"{52E225FC-FCB4-41F7-837B-6E37FB05BD7B}" = Adobe AIR
"{533D415A-4151-4AC5-858E-4068524C8051}_is1" = Pdf2Jpg version 1.2
"{55E61709-D7D4-43C0-B45D-BFAF5C09A02D}" = OpenOffice 4.0.0
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{59C7AFEC-E6E0-C99E-31FD-1FCBBFF70393}" = AMD VISION Engine Control Center
"{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer
"{5CA66729-D7A8-428B-21AC-CE78AB6BC83D}" = CCC Help Portuguese
"{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}" = Nikon Movie Editor
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{5E094C92-6288-4F43-AA9A-D452D0218F3F}" = Windows Live Essentials
"{604B7475-6B17-D7DF-636D-E1E147349316}" = CCC Help Japanese
"{62460273-C5CA-BEAB-5AEA-360698FCB506}" = CCC Help Czech
"{6389F199-1D6C-4974-9557-693F9DD48736}" = Windows Live Writer Resources
"{638b91e2-b5ee-49f3-8348-be72f2d65d13}" = IBM Lotus Symphony
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE
"{6D5B770B-9F4B-5D56-C270-196E91C9F0FF}" = CCC Help Danish
"{6E25AE88-7018-022F-508B-80656F538535}" = CCC Help Polish
"{7061301A-0D44-432F-859D-AF705DA2C81F}_is1" = 4Free Video Converter 2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{729E16B3-1B80-4F3F-8D19-342A89631E0A}_is1" = Media converter
"{74ECAA44-3ED0-4F2D-BFD8-4EB04B69FAD5}}_is1" = Aneesoft Free AVI Video Converter 3.6.0.0
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{778AA318-7343-B50A-09FE-96BD3FF18501}" = Catalyst Control Center InstallProxy
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7992DE31-541F-5873-89C7-25F8E0F33683}" = Catalyst Control Center InstallProxy
"{7C6F0282-3DCD-4A80-95AC-BB298E821C44}" = Windows Live Writer
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Gateway Recovery Management
"{80E4B2D6-BFF2-402C-96C4-3942DF24CABB}_is1" = FVD Suite 3.0.2
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{865D54A9-0240-4952-9F4D-30A59F6F2C2D}}_is1" = Split Files version 1.72
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{89870E0D-9602-41F8-9E83-14F6849346A4}" = Windows Live Mail
"{89C7E0A7-4D9D-4DCC-8834-A9A2B92D7EBB}" = Photo Gallery
"{8A5E6B59-2804-4677-8A5F-DEBC218CE4E0}_is1" = PWGen 2.2.1
"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{925B2376-5813-40B2-BE52-F088A515B9B9}" = Option Strategy Builder 1.0.4
"{941BF29A-8738-34FB-58AF-116758FA60AB}" = CCC Help Thai
"{95120000-003F-0409-0000-0000000FF1CE}" = Microsoft Office Excel Viewer
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{95140000-00AF-0409-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{99FCB145-B8BA-11D5-A6B4-0050BA724CB6}" = Astra 4000U
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C6D5C94-386A-4DE7-B99F-523D3F167B9A}" = Windows Live Messenger
"{9D4D322B-0BE2-F994-701F-8E464029B11A}" = CCC Help Swedish
"{A2264E8F-1649-11E3-8BED-B8AC6F98CCE3}" = Google Earth
"{A539EC7C-3635-468F-8CBA-42364F1150B5}_is1" = Deep Log Analyzer
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"{A8D93648-9F7F-407D-915C-62044644C3DA}" = MSI to redistribute MS VS2005 CRT libraries
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9FDFB03-82ED-0DCC-6351-A562F184E9ED}" = CCC Help Italian
"{AAA94EAA-40A4-458C-9D86-D1DA765B51D5}" = Windows Live Writer
"{AAF91344-2808-4D6B-9242-FBE5AF79D60A}" = Windows Live Family Safety
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.05)
"{AC76BA86-7AD7-5760-0000-A00000000003}" = Japanese Fonts Support For Adobe Reader X
"{B014EE44-9197-4513-9613-71E6EB1B514E}" = Nikon Message Center 2
"{B286BAC3-CBE6-4854-BF68-EB72A34CEA56}" = Windows Live Messenger
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B39A6825-EA20-43EA-AB2D-A6BC0298D9A1}" = Movie Maker
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{B62BA521-B0BB-7215-6467-9EC0A1E61D85}" = Catalyst Control Center Graphics Previews Common
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B6D49D90-3D8B-F6D4-2009-11AE0E11EBC3}" = CCC Help English
"{BBBCAE4B-B416-4182-A6F2-438180894A81}" = Napster
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{BE0BEC1F-C9D6-17D5-075A-53DF0A23C282}" = CCC Help Norwegian
"{BF2A74BF-8D12-47F1-8B19-22B30AF6B0D1}" = Linksys EasyLink Advisor
"{BFD7E2D6-B4E1-D425-166E-CF27BBD79C10}" = CCC Help Spanish
"{C04ACDD0-62A7-091E-0B83-4383E7073469}" = CCC Help Turkish
"{C34FAEF3-4241-4C4E-9CFF-7BBD8BCEABE7}" = WebEx Support Manager for Internet Explorer
"{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common
"{C7232E58-FD2F-5EC0-B4FD-2C5FA2DB6BB8}" = CCC Help French
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D2340C67-0F20-4B9C-A3A8-CD8821582E5D}" = WebDwarf V2
"{D604900F-A275-416C-AF9D-CDEDF58B72DB}" = Windows Live Mail
"{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}" = ArcSoft Panorama Maker 6
"{DD7C5FC1-DCA5-487A-AF23-658B1C00243F}" = Photo Common
"{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}" = eBay Worldwide
"{E2A97415-BD97-4867-B906-05E39E9EE51F}" = HL-2240
"{E2EA5233-8AC4-4A59-A521-FBD1A0778A06}" = XMLFox
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform
"{E452E727-86B8-4233-8CC3-41FD817AFAFF}" = VMware Player
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E661CA41-4846-13AB-5137-25F13F1C5D6B}" = CCC Help Chinese Standard
"{e6817f01-cedf-45af-8195-bd1691311e1c}" = Nero 9 Essentials
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Gateway Updater
"{EFBCA571-617D-484A-9ECA-E301BB6D0750}" = Windows Live Writer
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F6F30C28-38AA-4DBA-AE0B-7E30238E61BB}" = Junk Mail filter update
"{F96D619D-99D6-4C9C-A393-0CD22DE1CA66}_is1" = Ezvid
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"{FBDBC490-089D-4476-BF72-1F7A6368200A}" = Pure Networks Platform
"{FCB53C89-7998-6782-DA2B-99B49BE8AD96}" = CCC Help German
"{FD31CD68-1D2F-4F9C-8ACB-9A7806D53D3B}" = StudioTax 2012
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"7-Zip" = 7-Zip 9.20
"AC3Filter_is1" = AC3Filter 1.63b
"Actual Drawing" = Actual Drawing
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AnswerWorks" = AnswerWorks Runtime
"Any Video Converter_is1" = Any Video Converter 5.0.7
"Applian FLV and Media Player" = Applian FLV and Media Player 3.1.1.12
"Audacity_is1" = Audacity 2.0.5
"Avast" = avast! Free Antivirus
"Avi to Dvd Free Converter_is1" = Avi to Dvd Free Converter v6.4.0.48
"Avi2Dvd" = Avi2Dvd 0.6.4
"AviSynth" = AviSynth 2.5
"AVS Video Editor_is1" = AVS Video Editor 6
"AVS Video Recorder_is1" = AVS Video Recorder 2.5
"BB FlashBack Express" = BB FlashBack Express
"BS1 Accounting 2012.0_is1" = BS1 Accounting 2012.0
"Business-in-a-Box" = Business-in-a-Box
"CinePaint" = CinePaint
"Cookie Editor_is1" = Cookie Editor 1.9.1.469
"Copernic Agent Basic" = Copernic Agent Basic
"CoreAAC Audio Decoder" = CoreAAC Audio Decoder (remove only)
"Corel Applications" = Corel Applications
"DMUninstaller" = DMUninstaller
"EditiX-Free-XML Editor2010 Free-2010" = EditiX-Free-XML Editor2010 Free-2010
"ERUNT_is1" = ERUNT 1.1j
"FileZilla Client" = FileZilla Client 3.7.3
"FlameRobin_is1" = FlameRobin 0.9.3
"Flash Movie Player" = Flash Movie Player 1.5
"FormatFactory" = FormatFactory 3.2.0.1
"Free Audio Editor" = Free Audio Editor
"Free AVI Video Converter_is1" = Free AVI Video Converter version 5.0.22.128
"Free File Splitter_is1" = Free File Splitter 1.0
"Free Screen Video Recorder_is1" = Free Screen Video Recorder version 2.5.29.320
"Free Word/Doc Txt to Image Jpg/Jpeg Bmp Tiff Png~F15BC2F8_is1" = Free Word/Doc Txt to Image Jpg/Jpeg Bmp Tiff Png Converter 5.8
"Free YouTube Download_is1" = Free YouTube Download version 3.2.11.812
"Freecorder 7 Applications" = Freecorder 7 Applications (7.0.0.48)
"Freecorder extension for Firefox" = Freecorder extension for Firefox
"Freecorder extension x64" = Freecorder extension x64
"FreeFileViewer_is1" = Free File Viewer 2012
"Freemake Video Converter_is1" = Freemake Video Converter version 4.0.4
"FreshWebmaster FreshWebSuction_is1" = FreshWebSuction
"FTP Commander" = FTP Commander
"FTP Navigator_is1" = FTP Navigator 8.03
"FVD Player_is1" = FVD Player 1.0.9
"Gateway Game Console" = Gateway Game Console
"Gateway InfoCentre" = Gateway InfoCentre
"Gateway Photo Frame" = Gateway Photo Frame 4.2.3.10
"Gateway Registration" = Gateway Registration
"Gateway Screensaver" = Gateway ScreenSaver
"Gateway Welcome Center" = Welcome Center
"GnuCash_is1" = GnuCash 2.4.11
"GPL Ghostscript 8.71 Lite_is1" = GPL Ghostscript 8.71 Lite
"GSplit3Set" = GSplit 3
"HandyBits EasyCrypto Deluxe" = HandyBits EasyCrypto Deluxe
"HandyBits File Shredder" = HandyBits File Shredder
"HandyBits Voice Mail" = HandyBits Voice Mail
"HandyBits ZipNGo" = HandyBits ZipNGo
"HeidiSQL_is1" = HeidiSQL 8.1.0.4545
"Hotkey Utility" = Hotkey Utility
"Identity Card" = Identity Card
"IECT3298580" = MixiDJ V44 Toolbar for IE
"Inkscape" = Inkscape 0.48.4
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"Internet Cleanup" = Internet Cleanup
"iWisoft Flash SWF to Video Converter_is1" = iWisoft Flash SWF to Video Converter 3.5
"JStock" = JStock (remove only)
"Kigo M4V Converter_is1" = Kigo M4V Converter 4.0.1
"Kingsoft Office" = Kingsoft Office 2013 (9.1.0.4246)
"KLiteCodecPack_is1" = K-Lite Codec Pack 9.9.5 (Full)
"Kobeman_is1" = Alleycode HTML Editor 2.2.1
"LAGARITH" = Lagarith lossless video codec (Remove Only)
"Linksys EasyLink Advisor" = Linksys EasyLink Advisor
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Mozilla Firefox 25.0 (x86 en-US)" = Mozilla Firefox 25.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Netscape Navigator (9.0.0.6)" = Netscape Navigator (9.0.0.6)
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"OptionMatrix-1.4.1" = OptionMatrix
"Oxelon Media Converter_is1" = Oxelon Media Converter 1.1
"PageBreeze Free HTML Editor" = PageBreeze Free HTML Editor
"PowerDesk4.0" = My PowerDesk
"PrimoPDF" = PrimoPDF -- brought to you by Nitro PDF Software
"ScreenshotCaptor_is1" = Screenshot Captor 4.7.2
"SEOToolkit30_is1" = Trellian SEO Toolkit v3.0
"Slicer" = The Slicer Uninstall
"ST5UNST #1" = project dogwaffle
"ST5UNST #2" = project dogwaffle (C:\Program Files (x86)\project dogwaffle\)
"Trellian WebPage_is1" = Trellian WebPage
"TrueCrypt" = TrueCrypt
"Trusted Software Assistant_is1" = File Type Assistant
"TweakNow PowerPack 2012_is1" = TweakNow PowerPack 2012
"VDC_is1" = Video Download Converter version 1.0.0.0
"Video Downloader_is1" = Video Downloader version 2.0
"Videovac_is1" = Videovac 1.6
"Visual Options Analyzer_is1" = VOptions v.4.5.1
"VLC media player" = VLC media player 2.1.0
"VMware_Player" = VMware Player
"WebFerret" = WebFerret
"WildTangent gateway Master Uninstall" = Gateway Games
"Winamp" = Winamp
"WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.44-1
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.2
"Word to Jpeg Converter 3000_is1" = Word to Jpeg Converter 3000 7.3
"WT078871" = Bejeweled 2 Deluxe
"WT078903" = Zuma Deluxe
"WT078955" = Blackhawk Striker 2
"WT078963" = Bob the Builder Can-Do-Zoo
"WT079019" = Faerie Solitaire
"WT079023" = FATE - The Traitor Soul
"WT079067" = Jewel Quest Solitaire 3
"WT079099" = Monopoly
"WT079103" = Mystery P.I. - Lost in Los Angeles
"WT079107" = Penguins!
"WT079111" = Plants vs. Zombies
"WT079115" = Polar Bowler
"WT079119" = Polar Golfer
"WT079151" = Scrabble Plus
"WT079155" = The Price is Right
"WT079176" = Virtual Villagers - A New Home
"WT079182" = Yahtzee
"WT079239" = Build-a-lot 2
"WT079258" = Escape Rosecliff Island
"WT079419" = Virtual Families
"Xilisoft AVI to DVD Converter" = Xilisoft AVI to DVD Converter
"Xvid_is1" = Xvid 1.2.2 final uninstall
"YTdetect" = Yahoo! Detect

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"FoxTab PDF Converter" = FoxTab PDF Converter
"MyPaint" = MyPaint 1.0.0
"Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player
"SkyDriveSetup.exe" = Microsoft SkyDrive
"Winamp Detect" = Winamp Detector Plug-in

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 11/5/2013 8:29:48 PM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/6/2013 9:32:20 AM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/6/2013 12:11:51 PM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/6/2013 1:57:39 PM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/6/2013 2:23:10 PM | Computer Name = WheelsupClub-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 11/7/2013 9:56:45 AM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/7/2013 11:11:27 AM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/7/2013 12:13:40 PM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/7/2013 12:33:52 PM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

Error - 11/7/2013 2:57:45 PM | Computer Name = WheelsupClub-PC | Source = MSSQLServer | ID = 19011
Description = SuperSocket info: FillAddress(MSAFD Tcpip [TCP/IPv6]) : Error 0.

[ System Events ]
Error - 11/7/2013 12:11:44 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7030
Description = The PEVSystemStart service is marked as an interactive service. However,
the system is configured to not allow interactive services. This service may not
function properly.

Error - 11/7/2013 12:14:02 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7000
Description = The Util SaltarSmart service failed to start due to the following
error: %%2

Error - 11/7/2013 12:34:18 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D
2 Scanner Service service to connect.

Error - 11/7/2013 12:34:18 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7000
Description = The Spybot-S&D 2 Scanner Service service failed to start due to the
following error: %%1053

Error - 11/7/2013 12:34:31 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7000
Description = The Util SaltarSmart service failed to start due to the following
error: %%2

Error - 11/7/2013 2:58:08 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D
2 Scanner Service service to connect.

Error - 11/7/2013 2:58:08 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7000
Description = The Spybot-S&D 2 Scanner Service service failed to start due to the
following error: %%1053

Error - 11/7/2013 2:58:10 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7000
Description = The Util SaltarSmart service failed to start due to the following
error: %%2

Error - 11/7/2013 3:03:50 PM | Computer Name = WheelsupClub-PC | Source = Service Control Manager | ID = 7022
Description = The Windows Update service hung on starting.

Error - 11/7/2013 3:05:31 PM | Computer Name = WheelsupClub-PC | Source = DCOM | ID = 10010
Description =


< End of report >



- r

[ken545]

The only thing I see bad is an infected backup copy of your hosts file, lets run this quick fix, post the log it produces please and also let me know how you feel things are running now



Open OTL.exe

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL




:OTL
[2013/10/11 09:16:03 | 000,450,642 | R--- | M] () -- C:\windows\SysNative\drivers\etc\hosts.20131027-085644.backup

:Services

:Reg

:Files
ipconfig /flushdns /c


:Commands
[purity]
[resethosts]
[CLEARALLRESTOREPOINTS]
[EMPTYJAVA]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top. <--Not run Scan
Let the program run unhindered, reboot when it is done
Then post the results of the log it produces

[ramping]

1. Off-hand, things seem to be running a lot better than they did, a few days ago. Thanks! :)

I'm really amazed at all the malware that got onto my machine, though!




2. OTL log:


All processes killed
========== OTL ==========
C:\Windows\SysNative\drivers\etc\hosts.20131027-085644.backup moved successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Wheelsup Club\Desktop\cmd.bat deleted successfully.
C:\Users\Wheelsup Club\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point

[EMPTYJAVA]

User: All Users

User: AppData

User: Default

User: Default User

User: Public

User: Wheelsup Club
->Java cache emptied: 257985 bytes

Total Java Files Cleaned = 0.00 mb


[EMPTYTEMP]

User: All Users

User: AppData
->Temp folder emptied: 0 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 57472 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Wheelsup Club
->Temp folder emptied: 2959708 bytes
->Temporary Internet Files folder emptied: 684409668 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 53822035 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 1392876 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 23930 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 78039 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 708.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 11072013_163522

Files\Folders moved on Reboot...
C:\Users\Wheelsup Club\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DF0B8057EE8D16A1B6.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DF0EB767C557EE1431.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DF11A88329441796CB.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DF2C84758273A2E841.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DF630DE21DFC43EE86.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DF64728CB9339F3208.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DF8985A56AD501E82D.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DFA011DCA331C762B4.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DFAE12EBCDFEC38812.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DFE66A7E2982E2EBF0.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DFF2C994A344CC4D9D.TMP not found!
File\Folder C:\Users\Wheelsup Club\AppData\Local\Temp\~DFF84065629DFC1A21.TMP not found!
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File move failed. C:\windows\temp\vmware-SYSTEM\vmauthd.log scheduled to be moved on reboot.
C:\windows\temp\vmware-SYSTEM\vmware-usbarb-SYSTEM-3296.log moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...



- r

[ken545]

Great

Run this free online virus scanner just to be on the safeside, do it when you have time , on some systems it could take a half hour and on some a few hours, we deleted all your temp files with OTL so it should cut down on the time. Besure to uncheck Remove Found Threats, just want to see the log, if it finds anything we can deal with it later

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.



Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan (http://eset.com/onlinescan)
Click the http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetOnline.png button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
Click on http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetSmartInstall.png to download the ESET Smart Installer. Save it to your desktop.
Double click on the http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetSmartInstallDesktopIcon.png icon on your desktop.

Check http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetAcceptTerms.png
Click the http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetStart.png button.
Accept any security warnings from your browser.
Check http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetScanArchives.png
Make sure that the option "Remove found threats" is Unchecked
Push the Start button.
ESET will then download updates for itself, install itself, and begin
scanning your computer. Please be patient as this can take some time.
When the scan completes, push http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetListThreats.png
Push http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetExport.png, and save the file to your desktop using a unique name, such as
ESETScan. Include the contents of this report in your next reply.
Push the http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetBack.png button.
Push http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetFinish.png
Please make sure you include the following items in your next post:
The log that was produced after running ESET Online Scanner.

[ramping]

1. Unfortunately, I got distracted, when setting up, and neglected to check "Scan Archives". :sad:




2. ESETScan.txt:


C:\Users\All Users\Spybot - Search & Destroy\Recovery\BrothersoftExtremeCT.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\Wajam33.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\Wajam60.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\Wajam61.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\WiIQfraud19.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\WinDownloadergen16.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\YontooPagerage13.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\YontooPagerage45.zip Win32/Bagle.gen.zip worm
C:\Users\Wheelsup Club\Downloads\avc-free.exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\Avi2Dvd_Setup_064exe.exe a variant of Win32/OpenInstall application
C:\Users\Wheelsup Club\Downloads\Brothersoft_downloader_For_Canaware_NetNotes.exe a variant of Win32/BSDownloader application
C:\Users\Wheelsup Club\Downloads\Brothersoft_downloader_For_Save_as_PDF.exe a variant of Win32/BSDownloader application
C:\Users\Wheelsup Club\Downloads\Brothersoft_downloader_For_WebShot.exe a variant of Win32/BSDownloader application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi134-Actual_Drawing-ORG-10056778.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi134-Desktop_iCalendar_Lite-ORG-10802583.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi134-Free_All_to_Image_JpgJpeg_Bmp_Tiff_Png_Converter-ORG-10855027.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi134-JustZIPit-ORG-10222609.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi134-Windows_Draw-ORG-10043116(1).exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi134-Windows_Draw-ORG-10043116.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi4_1_3-Gantt_Chart_Template_for_Excel-75326607.exe a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi5_3_0_96-Free_Screen_Video_Capture-ORG-10859265.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi5_3_0_96-Pazera_Free_MP4_to_AVI_Converter-BP-10784027.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi5_3_0_96-Pazera_Free_MP4_to_AVI_Converter-ORG-10784027.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-cbsi5_3_0_96-Xilisoft_AVI_to_DVD_Converter-ORG-10777684.exe probably a variant of Win32/CNETInstaller.A application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_10a-Free_HTML_to_PDF_Converter-ORG-10691753.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_10a-Free_WordDoc_Txt_to_Image_JpgJpeg_Bmp_Tiff_Png-ORG-10869109.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_10a-PDF4Free-BP-10412627.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_10a-Word_to_JPEG_Converter_3000-ORG-10916023.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_11-Aura_Free_Video_Converter-ORG-10966790.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_11-AVI_To_DVD_Free_Converter-ORG-75181429.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_11-Video_Capture_Factory-BP-10864463.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_12-FM_PDF_To_JPG_Converter_Free-SEO-75217093.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_12-PDF2Image-SEO-10968683.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_13-Free_Password_Generator-SEO-10559877.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_13-Free_SWF_to_AVI_Converter-SEO-75687385.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_14-Efficient_Calendar_Free-ORG-10920848.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_14-Efficient_Reminder_Free-ORG-10921373.exe Win32/DownloadAdmin.G application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_8-Deep_Log_Analyzer_Free_Edition-ORG2-10615007.exe Win32/DownloadAdmin.E application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_8-File_Splitter_and_Joiner-ORG2-10783572.exe Win32/DownloadAdmin.E application
C:\Users\Wheelsup Club\Downloads\cbsidlm-tr1_9-Netscape_Navigator-SEO2-10145004.exe multiple threats
C:\Users\Wheelsup Club\Downloads\ChrisPCFreeAnonymousProxyv410.exe a variant of Win32/OpenInstall application
C:\Users\Wheelsup Club\Downloads\cnet2_file_shredder_setup_exe.exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet2_instant-web-highlighter_4_0_zip (1).exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet2_instant-web-highlighter_4_0_zip (2).exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet2_instant-web-highlighter_4_0_zip (3).exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet2_instant-web-highlighter_4_0_zip.exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet2_WebFerret6Setup_exe (1).exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet2_WebFerret6Setup_exe.exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet2_WnvHtmlToPdf_App-v7_0_zip.exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet_abcquatt_zip.exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\cnet_FreeImageConverter_msi.exe a variant of Win32/InstallCore.D application
C:\Users\Wheelsup Club\Downloads\DesktopActivityRecorderSetup.exe multiple threats
C:\Users\Wheelsup Club\Downloads\EZVID_Setup.exe a variant of Win32/Adware.iBryte.G application
C:\Users\Wheelsup Club\Downloads\FLVPlayerSetup.exe a variant of Win32/InstallCore.BQ application
C:\Users\Wheelsup Club\Downloads\FormatFactorySetup.exe multiple threats
C:\Users\Wheelsup Club\Downloads\FreeAVIVideoConverter.exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreemakeVideoConverterSetup(1).exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreemakeVideoConverterv4000.exe a variant of Win32/OpenInstall application
C:\Users\Wheelsup Club\Downloads\FreeScreenVideoRecorder(1).exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreeScreenVideoRecorder.exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreeStudio.exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreeWebMVideoConverter(1).exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreeWebMVideoConverter(2).exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreeWebMVideoConverter(3).exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\FreeWebMVideoConverter.exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\fvdsuite_installer.exe.exe a variant of Win32/InstallCore.AY application
C:\Users\Wheelsup Club\Downloads\installer_file_splitter_and_joiner_3_3_English.exe999DA391C895FB3E016246499739BD94 Win32/Vittalia.B application
C:\Users\Wheelsup Club\Downloads\intel-drivers-update-utility.exe Win32/DriverBoss.B application
C:\Users\Wheelsup Club\Downloads\PDFCreatorSetup.exe Win32/OpenCandy application
C:\Users\Wheelsup Club\Downloads\setup(3).exe Win32/Toolbar.Zugo.C application
C:\Users\Wheelsup Club\Downloads\UpdateMyDrivers.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\Wheelsup Club\Downloads\2xxx_XP_upd\DriverUpdaterSetup-1.2.3.2277.exe a variant of Win32/Bundled.Toolbar.Ask application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Freecorder extension\AddonsFramework.dll.vir Win32/Toolbar.Besttoolbars.A application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\freevideomaster\tbfree.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\MixiDJ_V44\tbMixi.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SaltarSmart\SaltarSmartBHO.dll.vir a variant of Win32/BrowseFox.F application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SaltarSmart\SaltarSmartUninstall.exe.vir Win32/BrowseFox.C application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SaltarSmart\updateSaltarSmart.exe.vir a variant of Win32/BrowseFox.G application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SaltarSmart\bin\utilSaltarSmart.exe.vir a variant of Win32/BrowseFox.G application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\ffprotect\application.js.vir Win32/Conduit.SearchProtect.A application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\ffprotect\nsprotector.js.vir Win32/Conduit.SearchProtect.A application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\AppsUpdater.exe.vir MSIL/Vittalia.C application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\KeyGen.dll.vir Win32/Vittalia.K application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\uninstall.exe.vir a variant of Win32/ToolkitOffers.A application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\UpdaterService.exe.vir a variant of MSIL/Vittalia.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SuperLyrics-16\SuperLyrics-16-chromeinstaller.exe.vir a variant of Win32/Toolbar.CrossRider.K application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SuperLyrics-16\SuperLyrics-16-codedownloader.exe.vir a variant of Win32/Toolbar.CrossRider.K application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SuperLyrics-16\SuperLyrics-16-enabler.exe.vir a variant of Win32/Toolbar.CrossRider.K application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SuperLyrics-16\SuperLyrics-16-firefoxinstaller.exe.vir a variant of Win32/Toolbar.CrossRider.K application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SuperLyrics-16\SuperLyrics-16-updater.exe.vir a variant of Win32/Toolbar.CrossRider.K application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zauxstb.dll.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll.vir a variant of Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbprtct.dll.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zdatact.dll.vir a variant of Win32/Toolbar.MyWebSearch.A application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zhtmlmu.dll.vir probably a variant of Win32/Toolbar.MyWebSearch.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zieovr.dll.vir probably a variant of Win32/Toolbar.MyWebSearch.P application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zimpipe.exe.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zreghk.dll.vir a variant of Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zskin.dll.vir a variant of Win32/Toolbar.MyWebSearch.P application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zskplay.exe.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe.vir a variant of Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\CREXT.DLL.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\CrExtP4z.exe.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\T8HTML.DLL.vir probably a variant of Win32/Toolbar.MyWebSearch.F application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\T8TICKER.DLL.vir Win32/Toolbar.MyWebSearch.W application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\ytbyclick_B1\tbytby.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\ProgramData\apn\APN-Stub\W3IV6-G\APNIC.dll.vir Win32/Bundled.Toolbar.Ask.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll.vir a variant of Win32/Adware.Yontoo.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\ProgramData\VisualBee\VisualBeeSoftware.exe.vir a variant of Win32/Toolbar.Babylon.A application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Users\Wheelsup Club\AppData\LocalLow\MixiDJ_V44\tbMixi.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Users\Wheelsup Club\AppData\LocalLow\ytbyclick_B1\tbytb0.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Users\Wheelsup Club\AppData\LocalLow\ytbyclick_B1\tbytby.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Users\Wheelsup Club\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe.vir a variant of Win32/DealPly.B application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Users\Wheelsup Club\AppData\Roaming\OpenCandy\OpenCandy_ACEB2D58356B43CDAEE7C15E9E5FA89D\LatestDLMgr.exe.vir a variant of Win32/OpenCandy.A application cleaned by deleting - quarantined
C:\Program Files\Uninstaller\Uninstall.exe a variant of MSIL/DomaIQ.A application cleaned by deleting - quarantined
C:\Program Files (x86)\FoxTabPDFConverter\Uninstall\Uninstall.exe a variant of Win32/InstallCore.F application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\ApnIC.dll a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\ApnStub.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\ApnToolbarInstaller.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\Ask\AskPIP_FF_.exe a variant of Win32/Bundled.Toolbar.Ask.D application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst-egypt.exe a variant of Win32/Hao123.A application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst-japan.exe a variant of Win32/Hao123.A application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst-saudi-forf.exe a variant of Win32/Hao123.A application cleaned by deleting - quarantined
C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe a variant of Win32/Hao123.A application cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\BrothersoftExtremeCT.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\Wajam33.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\Wajam60.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\Wajam61.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\WiIQfraud19.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\WinDownloadergen16.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\YontooPagerage13.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\ProgramData\Spybot - Search & Destroy\Recovery\YontooPagerage45.zip Win32/Bagle.gen.zip worm cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (admin)\Deleted Items\4F0740A4-000003B2.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (admin)\Deleted Items\6C2349B9-000003B1.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (admin)\Deleted Items\72CF6E53-00000397.eml HTML/Phishing.Agent.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (admin)\Deleted Items\79C51EDB-000003B0.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (help)\Deleted Items\21957197-000010F4.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (help)\Deleted Items\4A64184E-000010EC.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (help)\Deleted Items\539729D9-000010F8.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (sales)\Deleted Items\0C7455C7-0000112F.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (sales)\Deleted Items\1B741515-00001136.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (sales)\Deleted Items\3DA977FB-00001133.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (sales)\Deleted Items\44FE3AF5-00001134.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\Microsoft\Windows Live Mail\Dddpl (sales)\Deleted Items\649327B4-00001137.eml HTML/Phishing.LinkedIn.A trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\TempImg\AskInstallChecker-1.5.0.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\TempImg\askToolbarInstaller-1.9.1.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\TempImg\chk.exe probably a variant of Win32/Agent.SZW trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\TempImg\FVM.exe a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\TempImg\Installer.exe multiple threats cleaned by deleting - quarantined
C:\Users\Wheelsup Club\AppData\Local\TempImg\VerControl.exe probably a variant of Win32/Agent.SZW trojan cleaned by deleting - quarantined
C:\Users\Wheelsup Club\Desktop\Rarely-used Icons\FFSetup3-1-1-0.exe multiple threats cleaned by deleting - quarantined
C:\Users\Wheelsup Club\Desktop\Rarely-used Icons\Old Firefox Data\extensions\plugin@yontoo.com\content\overlay.js Win32/Adware.Yontoo application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\Downloads\AnyVideoConverterSetup.exe Win32/OpenCandy application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\Downloads\avc-free(1).exe Win32/OpenCandy application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\Downloads\avc-free(2).exe Win32/OpenCandy application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\Downloads\avc-free(3).exe Win32/OpenCandy application cleaned by deleting - quarantined
C:\Users\Wheelsup Club\Downloads\avc-free(4).exe Win32/OpenCandy application cleaned by deleting - quarantined


- r

[ken545]

Well, what ESET found was nothing to really worry about, most where in the backup and quarantine folders from the programs we ran, also some junk in your downloads folder.

Any other issues ?

[ramping]

Not that I can think of.

Thanks for all your help, though! ;)

- r

[ken545]

Your very welcome :)


Click START then RUN
Now type Combofix /uninstall in the runbox and click OK. Note the space between the X and the /, it needs to be there.


http://i526.photobucket.com/albums/cc345/MPKwings/CF-Uninstall.png




Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups, any programs that where not removed you can just drag to the trash.


Malwarebytes is the free version and yours to keep and will not be removed



How did I get infected in the first place ?
Read these links and find out how to prevent getting infected again.
Tutorial for System Restore (http://www.bleepingcomputer.com/tutorials/tutorial56.html) <-- Do this first to prevent yourself from being reinfected.
WhattheTech (http://forums.whatthetech.com/index.php?showtopic=57817)
Grinler BleepingComputer (http://www.bleepingcomputer.com/forums/topic2520.html)
GeeksTo Go (http://www.geekstogo.com/forum/index.php?autocom=custom&page=How_did_I)
Dslreports (http://www.dslreports.com/faq/10002)



Safe Surfn
Ken