[utiltop Trojan.Downloader Ad.pkg] Processing Time : 57ms / 2012-05-15

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 1,023.55 MB
Intel64 Family 6 Model 37 Stepping 5
Date : 2012-05-15
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\best-pc\best-pc.exe
DF001 C:\Program Files (x86)\best-pc\best-pcEngine.exe
DF002 C:\Program Files (x86)\best-pc\best-pcse.exe
DF003 C:\Program Files (x86)\best-pc\best-pcU.exe
DF004 C:\Program Files (x86)\best-pc\uninst_best-pc.exe
DF005 C:\Program Files (x86)\comoff\ComOff.exe
DF006 C:\Program Files (x86)\comoff\mddfrevfn.exe
DF007 C:\Program Files (x86)\comoff\uninst.exe
DF008 C:\Program Files (x86)\FileHam.com\FileHamBrowser\Cleanup.exe
DF009 C:\Program Files (x86)\FileHam.com\FileHamBrowser\파일함탐색기.exe
DF010 C:\Program Files (x86)\FileHam.com\Updater\FileHamUpdater.exe
DF011 C:\Program Files (x86)\GoodScan\db\filter.dll
DF012 C:\Program Files (x86)\GoodScan\db\inter.dll
DF013 C:\Program Files (x86)\GoodScan\GoodScan.exe
DF014 C:\Program Files (x86)\GoodScan\GSAssist.dll
DF015 C:\Program Files (x86)\GoodScan\GSAutoUpdate.exe
DF016 C:\Program Files (x86)\GoodScan\GSEn.dll
DF017 C:\Program Files (x86)\GoodScan\GSFD.SYS
DF018 C:\Program Files (x86)\Hiprotect\_Hiprotectuck.exe
DF019 C:\Program Files (x86)\Hiprotect\filter.dll
DF020 C:\Program Files (x86)\Hiprotect\Hiprotect.exe
DF021 C:\Program Files (x86)\Hiprotect\HiprotectMtr.exe
DF022 C:\Program Files (x86)\Hiprotect\HiprotectState2.exe
DF023 C:\Program Files (x86)\Hiprotect\Hiprotectuck.exe
DF024 C:\Program Files (x86)\Hiprotect\RCEngine.dll
DF025 C:\Program Files (x86)\Hiprotect\RepairCode.exe
DF026 C:\Program Files (x86)\linelink\linelink.dll
DF027 C:\Program Files (x86)\linelink\linelinkb.dll
DF028 C:\Program Files (x86)\linelink\linelinke.exe
DF029 C:\Program Files (x86)\linelink\llk.exe
DF030 C:\Program Files (x86)\linelink\nhopen.dll
DF031 C:\Program Files (x86)\linelink\ntop.exe
DF032 C:\Program Files (x86)\openkeyword\OpenKeywordC.exe
DF033 C:\Program Files (x86)\openkeyword\OpenKeywordD.exe
DF034 C:\Program Files (x86)\openkeyword\OpenKeywordS.exe
DF035 C:\Program Files (x86)\openkeyword\SQLiteEncrypt.dll
DF036 C:\Program Files (x86)\Racl\RaclSvc.exe
DF037 C:\Program Files (x86)\Racl\RaclTb.dll
DF038 C:\Program Files (x86)\Racl\RaclUninst.exe
DF039 C:\Program Files (x86)\skplus\skplus.exe
DF040 C:\Program Files (x86)\utiltop\Update_Guide.exe
DF041 C:\Program Files (x86)\utiltop\utiltop_update.exe
DF042 C:\Program Files (x86)\winaddtool\winaddtool.exe
DF043 C:\Program Files\iplus\IPlus.dll
DF044 C:\Program Files\iplus\IPlusUpdate.exe
DF045 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\best-pcsetup_victory.exe
DF046 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\exad007.exe
DF047 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\goodscan_utiltop.exe
DF048 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\hiprotect_utiltop.exe
DF049 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\IPlusSetup_utiltop.exe
DF050 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\linelinkset01.exe
DF051 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\OKExtern.exe
DF052 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\RaclSetup_son001.exe
DF053 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\setup.exe
DF054 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\setup_p001_s.exe
DF055 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\setup_skplus04_s.exe
DF056 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\utiltop_inst.exe
DF057 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\YSPS_20276022_168.exe
DF058 C:\Users\Administrator\Desktop\click_to_tweak_v4.95.exe
----------------------------------------------------------------------
SC059 best-pcService -/- best-pc Service -/- - -/-  -/- C:\Program Files (x86)\best-pc\best-pcse.exe
----------------------------------------------------------------------
UN060 오픈키워드(OpenKeyword) -/- TGSM -/- 오픈키워드(OpenKeyword) -/- hxxp://openkeyword.co.kr -/- -
TS061 GoodScan 실행
TS062 Hiprotect
TS063 IPlusUpdate
TS064 ntop
TS065 OKSTART
----------------------------------------------------------------------
US066 winaddtool -/- C:\Program Files (x86)\winaddtool\winaddtool.exe
US067 skplus -/- C:\Program Files (x86)\skplus\skplus.exe
US068 Hiprotect -/- C:\Program Files (x86)\Hiprotect\Hiprotect.exe /run1
US069 linelink -/- C:\Program Files (x86)\linelink\linelinke.exe
LS070 utiltop -/- C:\Program Files (x86)\utiltop\utiltop_update.exe
LS071 FileHamBrowser -/- C:\Program Files (x86)\Fileham.com\FileHamBrowser\파일함탐색기.exe menu
LS072 Racl -/- C:\Program Files (x86)\Racl\RaclSvc.exe
----------------------------------------------------------------------
BH073 IPlusB Class -/- C:\Program Files\iplus\IPlus.dll -/- {0BAB0BFA-D4FA-4965-94E2-5269BB66CB6B}
BH074 linelink -/- C:\PROGRA~2\linelink\LINELI~1.DLL -/- {7E940C3A-C689-4C73-BDC8-47D97C4E6332}
EXADD Shockwave Flash Object -/- C:\Windows\system32\Macromed\Flash\Flash64_11_1_102.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
EXADD IPlusB Class -/- C:\Program Files\iplus\IPlus.dll -/- {0BAB0BFA-D4FA-4965-94E2-5269BB66CB6B}
EXADD linelink -/- C:\PROGRA~2\linelink\LINELI~1.DLL -/- {7E940C3A-C689-4C73-BDC8-47D97C4E6332}
EXADD 잠김영역복사 -/- C:\Program Files (x86)\Racl\RaclTB.dll -/- {BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}
EXADD Shockwave Flash Object -/- C:\Windows\SysWOW64\Macromed\Flash\Flash11g.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
----------------------------------------------------------------------
001: adcreative.naver.com/ad3/1037/1037410/Animation_templet_475x100**.***
002: adcreative.naver.com/ad3/1039/1039522/baristar_naver_335x150_05**.***
003: adcreative.naver.com/ad3/css/min/adcast_v5.min.css?11*.***
004: adcreative.naver.com/ad3/css/min/common.min.css?12*.***
005: adcreative.naver.com/ad3/js/adcast/min/a110718.min.js?11*.***
006: adcreative.naver.com/ad3/js/min/da.min.js?12*.***
007: adcreative.naver.com/ad3/js/min/da.picnic.min.js?11*.***
008: adcreative.naver.com/ad3/js/min/da.picnic.min.js?12*.***
009: adcreative.naver.com/ad3/system/adcast/usual/110215*.***
010: adm.adgod.co.kr/app/config.php?ap*.***
011: adm.adgod.co.kr/app/index.php?domain=clicktotweak.com&ap*.***
012: adm.adgod.co.kr/app/index.php?domain=filejo.com&ap*.***
013: adm.adgod.co.kr/app/index.php?domain=manual.filedosa.com&app=68**.***
014: adm.adgod.co.kr/app/index.php?domain=naver.com&ap*.***
015: adm.adgod.co.kr/app/index.php?domain=tweak.filedosa.com&ap*.***
016: adm.adgod.co.kr/app/setup.php?app=68&mode=exe*.***
017: adm.adgod.co.kr/app/setup.php?app=68&mode=ins*.***
018: appa.co.kr/bacon/ba_11st*.***
019: appa.co.kr/bacon/g_new*.***
020: appa.co.kr/bacon/smsham*.***
021: best-pc.co.kr/dbk*.***
022: best-pc.co.kr/etc/yak_app*.***
023: best-pc.co.kr/mbk.php?v1=victory&v2=00:0C:29:3E:C*.***
024: best-pc.co.kr/value.php?strMode=setup&strID=victory&strPC=00:0C**.***
025: castbox.shopping.naver.com/index*.***
026: crl.microsoft.com/pki/crl/products/CodeSignPCA*.***
027: crl.microsoft.com/pki/crl/products/CodeSignPCA2*.***
028: crl.microsoft.com/pki/crl/products/CodeSigPCA*.***
029: crl.microsoft.com/pki/crl/products/microsoftrootcert*.***
030: crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA*.***
031: crl.microsoft.com/pki/crl/products/MobDevPrivCompoPCA*.***
032: cyemulmax.nowcdn.co.kr/IPlus/ipinstall2_ui*.***
033: down.comoff.kr/files/utiltop_inst*.***
034: down.hiprotect.co.kr/app/install/hiprotect_Process_s_run*.***
035: down.hiprotect.co.kr/total/Hiprotectuck*.***
036: down.linelink.co.kr/install/linelink*.***
037: down.linelink.co.kr/setup/linelinkset01*.***
038: down.sk-plus.co.kr/setup_skplus04_s*.***
039: down.winaddtool.com/setup_p001_s*.***
040: download.utilpack.co.kr/util_file/11/64341a4643e047*.***
041: fs.bizspring.net/fs4/bstr*.***
042: fs.bizspring.net/fs4/logger.v*.***
043: hiprotect.co.kr/app/count.php?kind=run&pid=*.***
044: hiprotect.co.krhiprotect.co.kr/app/app_set.php?pid=*.***
045: hiprotect.co.krhiprotect.co.kr/app/licensechk.php?sncode**.***
046: inno.sk-plus.co.kr/skplus_install.php?aff_code=skplus04&mac=000**.***
047: inno.sk-plus.co.krinno.sk-plus.co.kr/skplus_exe_chk.php?**.***
048: i-plus.jssearch.net/app_inc/config_n.php?kind=install&pid=utilt**.***
049: i-plus.jssearch.net/app_inc/counter.php?counterv=iplus&kind=i&p**.***
050: kr.ads.yimg.com/adv/yahoo/wam_celeb_120201*.***
051: kr.yahoo.com/?ilc*.***
052: l.yimg.com/d/lib/bc/bcr_2.0.*.***
053: l.yimg.com/go/news/picture/2012/05/temp/20120514120545209060082**.***
054: l.yimg.com/go/news/picture/2012/05/temp/20120514120549119883169**.***
055: l.yimg.com/go/news/picture/2012/05/temp/20120514120556191624575**.***
056: l.yimg.com/go/news/picture/2012/05/temp/20120515100509150693906**.***
057: l.yimg.com/ne/home/2012/mh/mhteacher_120515*.***
058: l.yimg.com/ne/news3/pyramid/2012/05/15/rvrv27_t1_Image8_1337055**.***
059: l.yimg.com/nk/jscript/flash_general_2009021*.***
060: l.yimg.com/zz/combo?nn/lib/metro/g/core_yui_3.4.4.js&nn/lib/met**.***
061: l.yimg.com/zz/combo?nn/lib/metro/g/uicontrib/yui/yui_3.4.*.***
062: l1.yimg.com/cv/ip/ap/default/120222/22310*.***
063: l1.yimg.com/dh/ap/kr/fp/2012/05/d52*.***
064: l1.yimg.com/dh/ap/kr/fp/2012/05/d64*.***
065: l1.yimg.com/dh/ap/kr/fp/2012/05/d82*.***
066: l1.yimg.com/dh/ap/kr/fp/2012/05/d83*.***
067: l1.yimg.com/le/i/11st/20120416/0416_28*.***
068: l1.yimg.com/le/i/11st/20120508/0508_29*.***
069: l1.yimg.com/le/i/11st/20120509/0509_25*.***
070: l1.yimg.com/le/i/11st/20120511/0514_30*.***
071: l1.yimg.com/le/i/11st/20120514/0515_21*.***
072: lcs.naver.com/m?u=http%3A%2F%2Fww*.naver.com%2F&e=&i=&os=Win32&**.***
073: linelink.co.kr/link/adnclick.php?mcode=4f8fdab2&q=*.***
074: linelink.co.kr/link/adnclick.php?mcode=4f8fdadb&q=*.***
075: linelink.co.kr/link/amain.html?goth=inl&q=7410&pid=part01&mc=00**.***
076: linelink.co.kr/link/amain.html?q=00000&pro=yes&pid=part01&mc=00**.***
077: linelink.co.kr/link/amain.html?replace=yes&goth=&bkey=&q=7410&p**.***
078: linelink.co.kr/link/close.php?q=*.***
079: linelink.co.kr/link/main.html?main=am&q=7410&pid=part01&mac=000**.***
080: log.adsence.co.kr/logexp.php?aid=goodscan&kind=inst&pid=utiltop**.***
081: log.adsence.co.kr/logexp.php?aid=hiprotect&kind=inst&pid=*.***
082: log.adsence.co.kr/logexp.php?aid=hiprotect&kind=inst&pid=utilto**.***
083: ma.realmedia.co.kr/ade_imp?media=15&page=347&ads=5784&crtv=1132**.***
084: mscrl.microsoft.com/pki/mscorp/crl/mswww(5)*.***
085: nv.ad.naver.com/adshow?unit=002AG&ac=4109583&src=1599339&t=i&du**.***
086: nv1.ad.naver.com/adshow?unit=0*.***
087: nv2.ad.naver.com/adshow?unit=*.***
088: pay.hiprotect.co.kr/npay/dcash/hp/js/Commo*.***
089: pay.hiprotect.co.kr/npay/dcash/hp/js/Star*.***
090: pay.hiprotect.co.kr/npay/dcash/hp/Start.php3?pid=home&mc=000c29**.***
091: pay.hiprotect.co.kr/npay/dcash/hp/style*.***
092: pay.hiprotect.co.kr/payment.php?sncode=000c293ecd7f&pid=*.***
093: rank.search.naver.net/nexearch_utf8_v2.js?sm=tab_lve&callcntdum**.***
094: report.winaddtool.com/report_install.php?pid=p001&mac=000C293EC**.***
095: report.winaddtool.comreport.winaddtool.com/report_exe.ph**.***
096: rightclick.co.kr/check_counter.php?pi=son001&gu=212F6A75157AEA2**.***
097: sem.ilikeclick.com/sps2/?code=1b9fWZR4250BEp4080bhv4250Dwe4675H**.***
098: shopping.phinf.naver.net/201205/1be24c80-cbbe-4756-97e6-8174cf6**.***
099: shopping.phinf.naver.net/201205/70ff6c50-9958-48ee-9331-6e33673**.***
100: shopping.phinf.naver.net/201205/72563756-5b32-4e4a-abc9-26c0c6f**.***
101: shopping.phinf.naver.net/201205/79293143-13fa-40e8-a4a2-597e699**.***
102: shopping.phinf.naver.net/201205/aa50d7b2-00fd-4b7f-8cc6-f720324**.***
103: shopping.phinf.naver.net/201205/b8a36064-85db-4855-8bc5-10b1b16**.***
104: shopping.phinf.naver.net/201205/b98fda3f-427c-47ca-8e15-4785ce5**.***
105: shopping.phinf.naver.net/201205/cd0a1c91-603b-45f4-ba9a-c4a154d**.***
106: shopping.phinf.naver.net/201205/e969422f-37fa-4516-9ba5-4baedc9**.***
107: shopping.phinf.naver.net/201205/ef0a168f-8ac4-4ece-92b8-fbce1f8**.***
108: shopping.phinf.naver.net/201205/f3b92741-9244-4c0c-b92d-7865b98**.***
109: shopping.phinf.naver.net/201205/fb65e0cf-b40b-496c-b335-129d778**.***
110: ssl.logger.co.kr/tracker.tsp?u=34831&XU=&EXEN=1&dr=&XDR=&dt=&du**.***
111: static.naver.net/newscast/2012/0515/113025-317518050*.***
112: static.naver.net/www/favicon*.***
113: static.naver.net/www/u/2009/1008/nmms_1513377*.***
114: static.naver.net/www/u/2012/0418/nmms_153335833c*.***
115: static.naver.net/www/u/2012/0507/nmms_165822410*.***
116: static.naver.net/www/u/2012/0508/nmms_115149372c*.***
117: static.naver.net/www/u/2012/0508/nmms_115319871c*.***
118: static.naver.net/www/u/2012/0508/nmms_165824975*.***
119: static.naver.net/www/u/2012/0509/nmms_122947771c*.***
120: static.naver.net/www/u/2012/0510/nmms_104053117c*.***
121: static.naver.net/www/u/2012/0511/nmms_111722482*.***
122: static.naver.net/www/u/2012/0511/nmms_163845549c*.***
123: static.naver.net/www/u/2012/0511/nmms_164716714c*.***
124: static.naver.net/www/u/2012/0514/nmms_105131104c*.***
125: static.naver.net/www/u/2012/0514/nmms_16232144c*.***
126: static.naver.net/www/u/2012/0514/nmms_173810559c*.***
127: static.naver.net/www/u/2012/0514/nmms_1831109c*.***
128: static.naver.net/www/u/2012/0514/nmms_183346137c*.***
129: static.naver.net/www/widget/NIA_navigation_v1.17*.***
130: static.nid.naver.com/login.nhn?svc=me&url=http%3A%2F%2Fww*.nave**.***
131: static.nid.naver.com/loginv2/blank.*.***
132: static.nid.naver.com/loginv2/commonLoginF*.***
133: static.nid.naver.com/loginv2/css/wwwl.css?2012*.***
134: static.nid.naver.com/loginv2/js/long_ww*.js?2012*.***
135: static.shopping.naver.net/co/css/v25/castbox_v25.css?d=20111221**.***
136: static.shopping.naver.net/co/js/v14/castbox-nclktag-min_v14.js?**.***
137: sub.openkeyword.co.kr/opapp/postmedia1/OKSetup*.***
138: sub.openkeyword.co.kr/opapp/postmedia1/OKUpdate*.***
139: thumb.opencast.naver.net/opencast01/n/a/naver_story/20120513/23**.***
140: thumb.opencast.naver.net/opencast01/n/a/naver_story/20120514/11**.***
141: thumb.opencast.naver.net/opencast01/n/a/naver_story/20120514/13**.***
142: update.best-pc.co.kr*.***
143: update.best-pc.co.kr/bin/best-pc*.***
144: update.best-pc.co.kr/bin/best-pcEngine*.***
145: update.best-pc.co.kr/bin/best-pcse*.***
146: update.best-pc.co.kr/bin/best-pcU*.***
147: update.best-pc.co.kr/bin/bootflash*.***
148: update.best-pc.co.kr/bin/pcspeedflash*.***
149: update.best-pc.co.kr/bin/uninst_best-pc*.***
150: update.best-pc.co.kr/set/best-pcsetup_victory*.***
151: update.goodscan.co.kr/installchk/pcroomchk*.***
152: update.hiprotect.co.kr/instchk/instchk*.***
153: update.hiprotect.co.kr/instchk/pcroomchk*.***
154: update.hiprotect.co.kr/partner/partner_info*.***
155: update.hiprotect.co.kr/update_data*.***
156: update.hiprotect.co.kr/version*.***
157: upstat.pcupgrade.co.krAPP/ck_setup.php?m=00:0C:29:3E:CD:7F&d=**.***
158: utiltop.com/app/program/utiltop_setup*.***
159: utiltop.com/banner/app_banner.*.***
160: utiltop.com/ico/free_favicon*.***
161: utiltop.com/ico/lf_icon*.***
162: utiltop.com/ico/odisk*.***
163: utiltop.com/path.html?seq=2*.***
164: utiltop.com/request/agree*.***
165: utiltop.com/request/bacon*.***
166: utiltop.com/request/execute.php?code*.***
167: utiltop.com/request/install*.***
168: utiltop.com/request/install_bundle.php?code*.***
169: utiltop.com/request/module*.***
170: wise.ad-ias.com:8088/event.ems/site=aircross&pid=naver@475x100_**.***
171: ww*.appa.co.kr/imgs/appa*.***
172: ww*.clicktotweak.com/?r=home&m=upload&a=download&u*.***
173: ww*.comoff.kr/check_counter.php?mid=00-0C-29-3E-CD-7F&kind=1&pi**.***
174: ww*.fileham.com/ad/setup/exad007*.***
175: ww*.fileham.com/main/app/setup_count.php?mac=00-0c-29-3e-cd-7f&**.***
176: ww*.goodscan.co.kr/app/inst_nor.php?pid=utiltop&os=v*.***
177: ww*.hiprotect.co.kr/app/count.php?kind=install&pid=home&os=vist**.***
178: ww*.hiprotect.co.kr/app/count.php?kind=install&pid=utiltop&os=v**.***
179: ww*.linelink.co.kr/count/install_count.php?pid=part01&kind=i&ma**.***
180: ww*.linelink.co.kr/link/config*.***
181: ww*.linelink.co.kr/link/new_config.php?pid=pa*.***
182: ww*.linelink.co.kr/link/new_config2.php?pid=pa*.***
183: ww*.naver.*.***
184: ww*.naver.com/css/atcmp_20120321*.***
185: ww*.naver.com/css/main_20120501*.***
186: ww*.naver.com/include/navercast.10/navercast.jso*.***
187: ww*.naver.com/js/c/JEagleEyeClient_20120111.min.js*.***
188: ww*.naver.com/js/c/jindo2_all_20120503.min.js?2012*.***
189: ww*.naver.com/js/c/nlog_20120319.mi*.***
190: ww*.naver.com/js/c/ntop1_20120426.mi*.***
191: ww*.naver.com/js/c/ntop2_20120509.mi*.***
192: ww*.naver.com/js/c/ntop3_20120509.mi*.***
193: ww*.naver.com/js/reatcmp_20120417AA.*.***
194: ww*.rightclick.co.kr/down/RaclSetup_son001*.***
195: ww*.utiltop.com/app/goodscan_utiltop*.***
196: ww*.utiltop.com/app/IPlusSetup_utiltop*.***
197: ww*.utiltop.com/app/OKExtern*.***
198: ww*.utiltop.com/app/YSPS_20276022_168*.***
199: xml.skplus.kr/link_install_chk.php?aff_code=skplus04&mac_addr=0**.***
200: xml.skplus.krxml.skplus.kr/link_keep_chk.php?aff_code=sk**.***
201: xml.skplus.krxml.skplus.kr/link_urltarget_chk.php?aff_co**.***
----------------------------------------------------------------------
TB075 잠김영역복사 -/- C:\Program Files (x86)\Racl\RaclTB.dll -/- {BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}
----------------------------------------------------------------------
Deleted Files : 59
Remove Service : 1
Remove Uninstall Entry : 1
Remove Startup Entry : 7
Remove Browser Helper Object : 2
Remove Toolbar : 1
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2012-05-15
[01-HKCUREG]**winaddtool
[01-HKCUREG]**skplus
[01-HKCUREG]**Hiprotect
[01-HKCUREG]**linelink
[02-HKLMREG]**utiltop
[02-HKLMREG]**FileHamBrowser
[02-HKLMREG]**Racl
[03-BHOCLSD]**{0BAB0BFA-D4FA-4965-94E2-5269BB66CB6B}
[03-BHOCLSD]**{7E940C3A-C689-4C73-BDC8-47D97C4E6332}
[04-TOOLBAR]**{BCE04A5B-2B7D-4F4B-BB8E-2A59611733DD}
[05-SERVICE]**best-pcService
----------------------------------------------------------------------
Total Processing Time : 57ms
----------------------------------------------------------------------