(Cherished Technololgy LIMITED) C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe
C:\Documents and Settings\All Users\Application Data\WPM
() C:\Program Files\Mobogenie\DaemonProcess.exe
C:\Program Files\Mobogenie
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [761024 2013-12-11] ()
HKU\Kevin\...\Run: [Google Update*] - [x]
S2 *etadpug; "C:\Program Files\Google\Desktop\Install\{e459fab5-9ce1-ec8b-07db-a39975a958ee}\ \ \???\{e459fab5-9ce1-ec8b-07db-a39975a958ee}\GoogleUpdate.exe"
C:\Program Files\Google\Desktop\Install\{e459fab5-9ce1-ec8b-07db-a39975a958ee}
2014-01-14 05:19 - 2014-01-14 05:19 - 00000000 ____D C:\programdata\BearShare
2014-01-14 05:19 - 2014-01-14 05:19 - 00000000 ____D C:\program files (x86)\BearShare Applications
2014-01-14 05:19 - 2014-01-14 05:19 - 00000000 ____D C:\programdata\{D398BDFF-BC85-4852-B26D-4CA820357DB2}
C:\program files (x86)\sgpsa
2014-01-14 04:56 - 2008-04-14 07:00 - 00017062 _____ C:\users\Kevin\appdata\local\we4032.dll",Startup
C:\users\Kevin\appdata\local\houiphcfm
C:\users\Kevin\appdata\local\microsoft\windows\temporary internet files\content.ie5\sadfc401
2014-01-14 06:44 - 2014-01-14 05:51 - 00000000 ____C C:\WINDOWS\Tasks\Pricora-codedownloader.job
2014-01-14 06:44 - 2014-01-14 05:51 - 00000000 ____C C:\WINDOWS\Tasks\Pricora-chromeinstaller.job
2014-01-14 06:44 - 2014-01-14 05:51 - 00000000 ____C C:\WINDOWS\Tasks\Pricora-firefoxinstaller.job
C:\Program Files (x86)\Pricora
2014-01-14 04:56 - 2008-04-14 07:00 - 00010240 _____ C:\program files (x86)\antivirus 2009
2014-01-14 05:18 - 2014-01-14 05:18 - 00000000 ____D C:\users\Kevin\appdata\roaming\2B2CF94012581557DBFF5E801EB42A26
2014-01-14 04:55 - 2014-01-14 05:43 - 00000000 ____D C:\Documents and Settings\Kevin\Local Settings\Application Data\Mobogenie
C:\Windows\Installer\{A3B308B9-BE96-4334-816F-3D82B19A7DE2}