Zpomalený internet

[stacik]

Dobrý den, několik týdnů mám problém s internetem. S přítelem používáme stejný internet, ale mě se stránky zobrazují mnohem pomaleji než jemu. Také jsem zkoušela různé prohlížeče, ale je to pořád to samé. Taky se stává, že se občas stránky načítají normálně, ale za hodinu už to je zase šíleně zpomalené. Prosím Vás o pomoc a předem děkuji za jakoukoliv pomoc

Zde je log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Luci at 2013-05-29 22:25:34
Microsoft Windows 7 Home Premium
System drive C: has 38 GB (32%) free of 119 GB
Total RAM: 4095 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:25:44, on 29.5.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Luci.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SimilarSites - {FE69C007-C452-4d3e-86D2-1730DF8BC871} - C:\Program Files (x86)\SimilarSites\similarsites.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: SimilarSites - {FE69C007-C452-4d3e-86D2-1730DF8BC871} - C:\Program Files (x86)\SimilarSites\similarsites.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [Boingo Wi-Fi] "C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk"
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SafeQ Client] "C:\Program Files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: SimilarSites - {807DF5E0-4EF7-48a8-A405-239F3E29FFA9} - C:\Program Files (x86)\SimilarSites\similarsites.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KoopPdfService - Unknown owner - C:\Program Files (x86)\Kooperativa\Services\KoopPDFServer.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12729 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
"C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe" /TUStart /pid:2148
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
Atouch64.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe"
ATKOSD.exe
"C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
KBFiltr.exe
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
WDC.exe
"C:\Windows\AsScrPro.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe"
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip /h
"C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Trend Micro\Internet Security\TmProxy.exe"
"C:\Program Files\Trend Micro\BM\TMBMSRV.exe" /service
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3816.0.402854889\976762696" --supports-dual-gpus=false --gpu-vendor-id=0x10de --gpu-device-id=0x0873 --gpu-driver-vendor=NVIDIA --gpu-driver-version=8.16.11.8881 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/4/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_58/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="3816.1.581439291\1995700460" /prefetch:673131151
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2384.12da4400.728677977 "C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 2384 "\\.\pipe\gecko-crash-server-pipe.2384" plugin
"C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe" --proxy-stub-channel=Flash3968.61D8BDE0.8268 --host-broker-channel=Flash3968.61D8BDE0.10649 --host-pid=3968 --host-npapi-version=27 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll"
"C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe" --channel=1988.002BF904.1126514 --proxy-stub-channel=Flash3968.61D8BDE0.8268 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Kooperativa\Services\KoopPDFServer.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe" PanProcess
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/4/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_58/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="3816.4.1327521700\854896567" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Luci\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Luci\AppData\Roaming\Mozilla\Firefox\Profiles\fy162b2h.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll


C:\Users\Luci\AppData\Roaming\Mozilla\Firefox\Profiles\fy162b2h.default\extensions\
{E71B541F-5E72-5555-A47C-E47863195841}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-09 68960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-08-12 346736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2010-08-12 318960]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll [2013-02-05 94112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-08-12 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2010-08-12 761840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2010-08-12 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2010-08-12 346736]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-08-12 256112]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]
{FE69C007-C452-4d3e-86D2-1730DF8BC871} - SimilarSites - C:\Program Files (x86)\SimilarSites\similarsites.dll [2012-02-01 316928]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 649608]
"ASUS WebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [2010-03-16 1754448]
"UfSeAgnt.exe"=C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe [2010-02-23 1022904]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2010-01-20 16413288]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-09-01 323584]
"Setwallpaper"=c:\programdata\SetWallpaper.cmd []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2010-08-12 3058304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-05-13 10810912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdateLBPShortCut"=C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"UpdateP2GoShortCut"=C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Boingo Wi-Fi"=C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2010-08-12 2429]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-20 170624]
"Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-04-26 1597440]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]
"SafeQ Client"=C:\Program Files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe [2013-01-07 259072]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

C:\Users\Luci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-05-29 22:25:34 ----D---- C:\rsit
2013-05-28 19:49:12 ----D---- C:\Windows\system32\SPReview
2013-05-26 22:48:05 ----D---- C:\Program Files\Kooperativa
2013-05-26 22:34:52 ----D---- C:\Program Files (x86)\Kooperativa
2013-05-23 14:51:44 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2013-05-29 22:25:45 ----D---- C:\Windows\Temp
2013-05-29 22:25:44 ----D---- C:\Windows\system32\drivers\etc
2013-05-29 22:25:44 ----D---- C:\Windows\Prefetch
2013-05-29 22:25:44 ----D---- C:\Program Files\Trend Micro
2013-05-29 20:59:30 ----D---- C:\Windows\system32\catroot2
2013-05-29 20:58:57 ----D---- C:\Windows\system32\Tasks
2013-05-29 20:56:51 ----D---- C:\Windows\system32\config
2013-05-28 19:49:12 ----D---- C:\Windows\System32
2013-05-28 15:31:27 ----D---- C:\Users\Luci\AppData\Roaming\vlc
2013-05-28 12:58:29 ----D---- C:\Windows\inf
2013-05-28 12:58:29 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-05-27 08:50:55 ----A---- C:\Windows\system32\ServiceFilter.ini
2013-05-27 08:50:44 ----A---- C:\Windows\system32\AutoRunFilter.ini
2013-05-26 22:48:05 ----RD---- C:\Program Files
2013-05-26 22:34:52 ----RD---- C:\Program Files (x86)
2013-05-24 15:04:05 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-20 08:20:05 ----SHD---- C:\Windows\Installer
2013-05-20 08:19:01 ----D---- C:\Windows\SysWOW64
2013-05-18 15:58:11 ----SHD---- C:\System Volume Information
2013-05-18 15:58:10 ----D---- C:\Windows\Logs
2013-05-14 23:38:25 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2010-08-12 35384]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2010-04-08 244328]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-08-12 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-08-21 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-08-21 969200]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-08-21 359464]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-08-21 59728]
R1 tmtdi;Trend Micro TDI Driver; C:\Windows\system32\DRIVERS\tmtdi.sys [2010-02-23 107536]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-08-21 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
R2 tmpreflt;tmpreflt; C:\Windows\system32\DRIVERS\tmpreflt.sys [2011-07-12 42768]
R2 tmxpflt;tmxpflt; C:\Windows\system32\DRIVERS\tmxpflt.sys [2011-07-12 342288]
R2 vsapint;vsapint; C:\Windows\system32\DRIVERS\vsapint.sys [2011-07-12 2077456]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-05-13 2368160]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-18 236544]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-08-12 1799680]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [2012-09-18 11880]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-08-21 44032]
S3 cpuz135;cpuz135; \??\C:\Users\ADMINI~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-09 61792]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-12-08 379520]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
R2 KoopPdfService;KoopPdfService; C:\Program Files (x86)\Kooperativa\Services\KoopPDFServer.exe [2013-05-29 2454016]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-01-20 392296]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
R2 SfCtlCom;Trend Micro Central Control Component; C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe [2010-10-09 859712]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-09-19 2365792]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
R3 TMBMServer;Trend Micro Unauthorized Change Prevention Service; C:\Program Files\Trend Micro\BM\TMBMSRV.exe [2010-02-23 570632]
R3 TmProxy;Trend Micro Proxy Service; C:\Program Files\Trend Micro\Internet Security\TmProxy.exe [2010-02-23 917768]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-12 135664]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-14 256904]
S3 fsssvc;Windows Live Family Safety; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-09 533344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-12 135664]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-08-12 182768]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-23 117144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-01 1255736]

-----------------EOF-----------------

[vyosek]

Zdravim

Odinstalujte Trend Micro Internet Security a McAfee Security Scan - mate tam Avast a ten bohate staci. Vice bezpecnostniho SW zpusobuje jen komplikace a nestabilitu

Stahnete SecurityCheck http://screen317.spywareinfoforum.org/SecurityCheck.exe

• Ulozte nejlepe na Plochu
• Spustte tradicne dvouklikem a postupujte dle pokynu utility
• Po dokonceni skenu se vytvori a otevre log, ten mi sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Prohledat
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

[stacik]

Results of screen317's Security Check version 0.99.64
Windows 7 x64 (UAC is enabled)
Out of date service pack!!
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
TuneUp Utilities 2013
TuneUp Utilities Language Pack (en-US)
TuneUp Utilities 2013
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 11.7.700.202
Adobe Reader XI
Mozilla Firefox (21.0)
Google Chrome 27.0.1453.93
Google Chrome 27.0.1453.94
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````


# AdwCleaner v2.301 - Log vytvooen 29/05/2013 v 23:45:51
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Windows 7 Home Premium (64 bits)
# Uživatel : Luci - LUCKY-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Luci\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\SimilarSites
Složka Nalezeno : C:\ProgramData\Partner
Složka Nalezeno : C:\ProgramData\SimilarSites
Složka Nalezeno : C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\hidjnkeodmholilgafgdlgmgggbhnigl
Složka Nalezeno : C:\Users\Luci\AppData\Roaming\Mozilla\Firefox\Profiles\fy162b2h.default\extensions\{E71B541F-5E72-5555-A47C-E47863195841}
Složka Nalezeno : C:\Users\Luci\AppData\Roaming\SimilarSites
Soubor Nalezeno : C:\Users\Public\Desktop\eBay.lnk

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Hodnota Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Nalezeno : HKCU\Software\PIP
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{CCA8F2AB-BE4E-41F0-A289-4D960CEA58EA}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{807DF5E0-4EF7-48A8-A405-239F3E29FFA9}
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\Software\SimilarSites
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36BCB13-778D-4A40-99C1-D686086D268F}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hidjnkeodmholilgafgdlgmgggbhnigl
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SimilarSites
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{A36BCB13-778D-4A40-99C1-D686086D268F}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16476

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Luci\AppData\Roaming\Mozilla\Firefox\Profiles\fy162b2h.default\prefs.js

[OK] Soubor je eistý.

-\\ Google Chrome v27.0.1453.94

Soubor : C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [3291 octets] - [29/05/2013 23:45:51]

########## EOF - C:\AdwCleaner[R1].txt - [3351 octets] ##########

[vyosek]

Spustte znovu AdwCleaner

• Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
• Kliknete na Smazat
• PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

[stacik]

# AdwCleaner v2.301 - Log vytvooen 31/05/2013 v 19:52:32
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Windows 7 Home Premium (64 bits)
# Uživatel : Luci - LUCKY-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Luci\Downloads\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files (x86)\SimilarSites
Složka Vymazáno : C:\ProgramData\Partner
Složka Vymazáno : C:\ProgramData\SimilarSites
Složka Vymazáno : C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\hidjnkeodmholilgafgdlgmgggbhnigl
Složka Vymazáno : C:\Users\Luci\AppData\Roaming\Mozilla\Firefox\Profiles\fy162b2h.default\extensions\{E71B541F-5E72-5555-A47C-E47863195841}
Složka Vymazáno : C:\Users\Luci\AppData\Roaming\SimilarSites
Soubor Vymazáno : C:\Users\Public\Desktop\eBay.lnk

***** [Registry] *****

Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Hodnota Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Vymazáno : HKCU\Software\PIP
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{CCA8F2AB-BE4E-41F0-A289-4D960CEA58EA}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{807DF5E0-4EF7-48A8-A405-239F3E29FFA9}
Klíe Vymazáno : HKLM\Software\PIP
Klíe Vymazáno : HKLM\Software\SimilarSites
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36BCB13-778D-4A40-99C1-D686086D268F}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hidjnkeodmholilgafgdlgmgggbhnigl
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SimilarSites
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{A36BCB13-778D-4A40-99C1-D686086D268F}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16476

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Luci\AppData\Roaming\Mozilla\Firefox\Profiles\fy162b2h.default\prefs.js

[OK] Soubor je eistý.

-\\ Google Chrome v27.0.1453.94

Soubor : C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [3418 octets] - [29/05/2013 23:45:51]
AdwCleaner[S1].txt - [3349 octets] - [31/05/2013 19:52:32]

########## EOF - C:\AdwCleaner[S1].txt - [3409 octets] ##########

[vyosek]

Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

• Ulozte nejlepe na Plochu a rozbalte
• Spustte kliknutim na mbanr
• Nyni postupne kliknete na Next a Update
• Po dokonceni update (aktualizace) databaze kliknete opet na Next
• Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
• Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
• Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
• Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
• PC bude restartovan
• Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

[stacik]

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.06.0.1003

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7600 Windows 7 x64

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, Q:\ DRIVE_FIXED
CPU speed: 2.100000 GHz
Memory total: 4294201344, free: 1289048064

Downloaded database version: v2013.06.01.02
Downloaded database version: v2013.05.22.01
Initializing...
------------ Kernel report ------------
06/01/2013 14:08:45
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\DRIVERS\ACPI.sys
\SystemRoot\system32\DRIVERS\WMILIB.SYS
\SystemRoot\system32\DRIVERS\msisadrv.sys
\SystemRoot\system32\DRIVERS\pci.sys
\SystemRoot\system32\DRIVERS\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\DRIVERS\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\DRIVERS\atapi.sys
\SystemRoot\system32\DRIVERS\ataport.SYS
\SystemRoot\system32\DRIVERS\msahci.sys
\SystemRoot\system32\DRIVERS\nvstor64.sys
\SystemRoot\system32\DRIVERS\storport.sys
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\AsDsm.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\aswSnx.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\System32\Drivers\aswTdi.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\Drivers\aswrdr2.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\System32\Drivers\aswSP.SYS
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbfiltr.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\ETD.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\nvsmu.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\system32\DRIVERS\nvBridge.kmd
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\athrx.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\wmiacpi.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\DRIVERS\ATK64AMD.sys
\SystemRoot\system32\DRIVERS\CompositeBus.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_nvstor64.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\snp2uvc.sys
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\DRIVERS\sncduvc.SYS
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\drivers\luafv.sys
\??\C:\Windows\system32\drivers\aswMonFlt.sys
\SystemRoot\System32\Drivers\aswFsBlk.SYS
\SystemRoot\system32\DRIVERS\Sftvollh.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\??\C:\Program Files\ATKGFNEX\ASMMAP64.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\system32\DRIVERS\Sftfslh.sys
\SystemRoot\system32\DRIVERS\Sftplaylh.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\DRIVERS\Sftredirlh.sys
\??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\System32\ATMFD.DLL
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\mbamswissarmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa80041fa680
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\0000006e\
Lower Device Object: 0xfffffa8004024060
Lower Device Driver Name: \Driver\nvstor64\
<<<2>>>
Device number: 0, partition: 2
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa80041fa680, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80041fb040, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa80041fa680, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80040247a0, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xfffffa8004024060, DeviceName: \Device\0000006e\, DriverName: \Driver\nvstor64\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
Device number: 0, partition: 2
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\Windows\system32\drivers...
<<<2>>>
Device number: 0, partition: 2
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: E0C5913D

Partition information:

Partition 0 type is Other (0x1c)
Partition is NOT ACTIVE.
Partition starts at LBA: 63 Numsec = 40965687

Partition 1 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 40965752 Numsec = 244193280
Partition file system is NTFS
Partition is bootable

Partition 2 type is Extended with LBA (0xf)
Partition is NOT ACTIVE.
Partition starts at LBA: 285159424 Numsec = 691611648

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 500107862016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-976753168-976773168)...
Done!
Scan Interrupted
=======================================


Removal queue found; removal started
Removing c:\programdata\malwarebytes' anti-malware (portable)\mbr_0_i.mbam...
Removing c:\programdata\malwarebytes' anti-malware (portable)\bootstrap_0_1_40965752_i.mbam...
Removing c:\programdata\malwarebytes' anti-malware (portable)\mbr_0_r.mbam...
Removal finished
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.06.0.1003

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7600 Windows 7 x64

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, Q:\ DRIVE_FIXED
CPU speed: 2.100000 GHz
Memory total: 4294201344, free: 1951916032

Downloaded database version: v2013.06.01.03
Downloaded database version: v2013.06.01.04
Downloaded database version: v2013.06.01.05
Downloaded database version: v2013.06.02.01
Downloaded database version: v2013.06.02.02
Downloaded database version: v2013.06.02.03
Downloaded database version: v2013.06.02.04
Initializing...
------------ Kernel report ------------
06/02/2013 21:18:42
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\DRIVERS\ACPI.sys
\SystemRoot\system32\DRIVERS\WMILIB.SYS
\SystemRoot\system32\DRIVERS\msisadrv.sys
\SystemRoot\system32\DRIVERS\pci.sys
\SystemRoot\system32\DRIVERS\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\DRIVERS\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\DRIVERS\atapi.sys
\SystemRoot\system32\DRIVERS\ataport.SYS
\SystemRoot\system32\DRIVERS\msahci.sys
\SystemRoot\system32\DRIVERS\nvstor64.sys
\SystemRoot\system32\DRIVERS\storport.sys
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\AsDsm.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\aswSnx.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\System32\Drivers\aswTdi.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\Drivers\aswrdr2.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\System32\Drivers\aswSP.SYS
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbfiltr.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\ETD.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\nvsmu.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\system32\DRIVERS\nvBridge.kmd
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\athrx.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\wmiacpi.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\DRIVERS\ATK64AMD.sys
\SystemRoot\system32\DRIVERS\CompositeBus.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_nvstor64.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\snp2uvc.sys
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\DRIVERS\sncduvc.SYS
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\drivers\luafv.sys
\??\C:\Windows\system32\drivers\aswMonFlt.sys
\SystemRoot\System32\Drivers\aswFsBlk.SYS
\SystemRoot\system32\DRIVERS\Sftvollh.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\??\C:\Program Files\ATKGFNEX\ASMMAP64.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\system32\DRIVERS\Sftfslh.sys
\SystemRoot\system32\DRIVERS\Sftplaylh.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\DRIVERS\Sftredirlh.sys
\??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\DRIVERS\monitor.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\mbamswissarmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa80041f7670
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\0000006e\
Lower Device Object: 0xfffffa80040aa060
Lower Device Driver Name: \Driver\nvstor64\
<<<2>>>
Device number: 0, partition: 2
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa80041f7670, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80041f8040, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa80041f7670, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80040a96c0, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xfffffa80040aa060, DeviceName: \Device\0000006e\, DriverName: \Driver\nvstor64\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
Device number: 0, partition: 2
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\Windows\system32\drivers...
<<<2>>>
Device number: 0, partition: 2
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: E0C5913D

Partition information:

Partition 0 type is Other (0x1c)
Partition is NOT ACTIVE.
Partition starts at LBA: 63 Numsec = 40965687

Partition 1 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 40965752 Numsec = 244193280
Partition file system is NTFS
Partition is bootable

Partition 2 type is Extended with LBA (0xf)
Partition is NOT ACTIVE.
Partition starts at LBA: 285159424 Numsec = 691611648

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 500107862016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-976753168-976773168)...
Done!
Scan finished
=======================================


Removal queue found; removal started
Removing c:\programdata\malwarebytes' anti-malware (portable)\mbr_0_i.mbam...
Removing c:\programdata\malwarebytes' anti-malware (portable)\bootstrap_0_1_40965752_i.mbam...
Removing c:\programdata\malwarebytes' anti-malware (portable)\mbr_0_r.mbam...
Removal finished


Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.02.05

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
Luci :: LUCKY-PC [administrátor]

Ochrana: Povolena

2.6.2013 22:30:45
mbam-log-2013-06-02 (22-30-45).txt

Typ: Kompletní kontrola (C:\|D:\|E:\|Q:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 466302
Uplynulý čas: 1 hodin, 11 minut, 57 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[vyosek]

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

[stacik]

OTL Extras logfile created on: 6/4/2013 5:34:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Luci\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4.00 Gb Total Physical Memory | 1.88 Gb Available Physical Memory | 46.94% Memory free
8.00 Gb Paging File | 5.56 Gb Available in Paging File | 69.53% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116.44 Gb Total Space | 29.49 Gb Free Space | 25.32% Space Free | Partition Type: NTFS
Drive D: | 329.79 Gb Total Space | 162.07 Gb Free Space | 49.14% Space Free | Partition Type: NTFS

Computer Name: LUCKY-PC | User Name: Luci | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{423A89FE-1869-42CD-8B15-50477A4E9779}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{429C7646-959F-4150-9916-3FDDD79E7B7D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{9A0DCA30-273E-403B-844F-8C983A152AA1}" = lport=5353 | protocol=17 | dir=in | name=java(tm) platform se binary |
"{AC5B27A0-760F-4733-BFC9-BBF9C8A48658}" = lport=8182 | protocol=6 | dir=in | name=java(tm) platform se binary |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05B5B9A7-D47E-4E90-AB9A-2BCBC8E2814B}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{31374C9A-AC1A-48E0-A62E-CDF6FF720497}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{40D443F6-80A1-45B7-996D-974049EF684D}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{51EB3694-B518-48EB-B92C-B0716E7966E2}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\panprocess.exe |
"{72748EA5-FB84-4AFC-B1CC-4C4FA4840CC4}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{77A801FA-20C3-4FF6-B86B-9D5D367AA644}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{79501A8E-A0AE-4759-A179-1FE082F230EA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{82830168-2112-4A06-ABA7-52535B43B95D}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe |
"{8671AC7F-D0EE-45B4-AF32-BF751778413F}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\panprocess.exe |
"{BA909047-F60B-4A45-A191-97C2DBD0DA02}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"TCP Query User{1045DEE6-0579-49D2-A799-2A25C0427098}C:\program files (x86)\strongdc++\strongdc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\strongdc++\strongdc.exe |
"TCP Query User{590E6FD5-CEC4-449F-80E8-5255FDADF642}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe |
"TCP Query User{738FBEFB-B0B9-4F64-9835-E65296CD82DA}C:\program files (x86)\connectify\connectify.exe" = protocol=6 | dir=in | app=c:\program files (x86)\connectify\connectify.exe |
"UDP Query User{08DC3695-B0CD-451D-9D9F-8044EE7B5B4A}C:\program files (x86)\strongdc++\strongdc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\strongdc++\strongdc.exe |
"UDP Query User{0AF5CB31-BC8E-4252-923B-0ECD4AF810C3}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe |
"UDP Query User{2E1C3BCE-49DA-4CEB-B40D-7AEEB1A2D66E}C:\program files (x86)\connectify\connectify.exe" = protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectify.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{48B0F24F-B828-4B1A-A22E-C65454B32A7A}" = Windows Live Family Safety
"{4C880C2B-0E63-4AFF-AC19-C6F352F5F166}" = STATGRAPHICS Centurion XVI.I - x64
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{90140000-006D-0405-1000-0000000FF1CE}" = Microsoft Office Klikni a spusť 2010
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}" = SRS Premium Sound Control Panel
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"ASUS USB2.0 UVC VGA WebCam" = ASUS USB2.0 UVC VGA WebCam
"Elantech" = ETDWare PS/2-x64 7.0.5.11_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"NVIDIA Drivers" = NVIDIA Drivers

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{020D8396-D6D9-4B53-A9A1-83C47E2E27AA}" = Windows Live Call
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{0CAD76D9-1BDE-4BD0-AD02-063B3A3675E3}" = JOS - WEPOS
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}" = Bing Bar
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{3B05F2FB-745B-4012-ADF2-439F36B2E70B}" = ATKOSD2
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{63C1109E-D977-49ED-BCE3-D00D0BF187D6}" = Windows Live Mail
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}" = Windows Live Writer
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}" = Chicken Invaders 2
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}" = Dream Day Wedding Married in Manhattan
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}" = Piggly FREE
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}" = Smileyville FREE
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_HOMESTUDENTR_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_HOMESTUDENTR_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0405-1000-0000000FF1CE}_HOMESTUDENTR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_HOMESTUDENTR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00B0-0405-0000-0000000FF1CE}" = Doplněk Microsoft Save as PDF pro aplikace sady Microsoft Office 2007
"{90140011-0066-0405-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - čeština
"{90850405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{95140000-00AF-0405-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A6F5703D-A4B1-4857-9EDD-DC0ABBBB0D96}" = TuneUp Utilities Language Pack (en-US)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Czech
"{B653A2EC-D816-4498-A4FD-651047AB9DC9}" = Boingo Wi-Fi
"{BBED4F90-7AE5-40BF-AFB7-1B495692F4AB}" = syncables desktop SE
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BD86C297-41C7-4DB5-82C4-98DE3399A2EF}" = Asistent pro přihlášení ke službě Windows Live
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1" = Game Park Console
"{D1E5870E-E3E5-4475-98A6-ADD614524ADF}" = ATK Media
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{D9D754A1-EAC5-406C-A28B-C49B1E846711}" = Windows Live Essentials
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{F73A5B18-EB75-4B2C-B32D-9457576E2417}" = Windows Live Photo Gallery
"{FA2092C5-7979-412D-A962-6485274AE1EE}" = ASUS Data Security Manager
"{FDD810CA-D5E3-40E9-AB7B-36440B0D41EF}" = Windows Live Sync
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ASUS AP Bank_is1" = ASUS AP Bank
"ASUS WebStorage" = ASUS WebStorage
"ASUS_Screensaver" = ASUS_Screensaver
"avast" = avast! Free Antivirus
"BSPlayerf" = BS.Player FREE
"Google Chrome" = Google Chrome
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.75.0.1300
"Mozilla Firefox 21.0 (x86 cs)" = Mozilla Firefox 21.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Office14.Click2Run" = Microsoft Office Klikni a spusť 2010
"StrongDC++" = StrongDC++ 2.41
"The KMPlayer" = The KMPlayer (remove only)
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"VLC media player" = VLC media player 2.0.4
"WinLiveSuite_Wave3" = Windows Live Essentials

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 5/25/2013 10:35:44 AM | Computer Name = Lucky-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: sgwin.exe, verze: 16.1.18.0, časové razítko:
0x50073264 Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód
výjimky: 0xc0000005 Posun chyby: 0x0000000000000000 ID chybujícího procesu: 0x11f8
Čas
spuštění chybující aplikace: 0x01ce59510f863600 Cesta k chybující aplikaci: C:\Program
Files\Statgraphics\STATGRAPHICS Centurion XVI.I\sgwin.exe Cesta k chybujícímu modulu:
unknown ID zprávy: 614d76c0-c548-11e2-be44-bcaec54aaa9c

Error - 5/25/2013 11:39:29 AM | Computer Name = Lucky-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku
3. Hodnota MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu
version v prvku assemblyIdentity je neplatná.

Error - 5/25/2013 11:44:28 AM | Computer Name = Lucky-PC | Source = System Restore | ID = 8193
Description =

Error - 5/25/2013 6:00:01 PM | Computer Name = Lucky-PC | Source = System Restore | ID = 8193
Description =

Error - 5/26/2013 8:03:31 PM | Computer Name = Lucky-PC | Source = System Restore | ID = 8193
Description =

Error - 5/26/2013 8:04:32 PM | Computer Name = Lucky-PC | Source = System Restore | ID = 8193
Description =

Error - 5/27/2013 2:49:58 AM | Computer Name = Lucky-PC | Source = PandoraService.exe | ID = 0
Description =

Error - 5/27/2013 4:55:04 AM | Computer Name = Lucky-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku
3. Hodnota MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu
version v prvku assemblyIdentity je neplatná.

Error - 5/27/2013 4:59:47 AM | Computer Name = Lucky-PC | Source = System Restore | ID = 8193
Description =

Error - 5/27/2013 1:10:14 PM | Computer Name = Lucky-PC | Source = PandoraService.exe | ID = 0
Description =

[ OSession Events ]
Error - 11/6/2012 4:56:56 AM | Computer Name = Lucky-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session
lasted 4651 seconds with 1980 seconds of active time. This session ended with a
crash.

[ System Events ]
Error - 3/27/2013 5:06:58 PM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby lmhosts bylo dosaženo časového
limitu (30000 ms).

Error - 3/27/2013 5:06:58 PM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).

Error - 4/4/2013 7:57:05 AM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby TuneUp.UtilitiesSvc bylo dosaženo
časového limitu (30000 ms).

Error - 4/4/2013 7:57:15 AM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7034
Description = Služba TuneUp Utilities Service byla neočekávaně ukončena. Tento stav
nastal již 1krát.

Error - 4/4/2013 8:44:35 AM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7038
Description = Služba WinHttpAutoProxySvc se nemohla přihlásit jako NT AUTHORITY\LocalService
s aktuálně konfigurovaným heslem z důvodu následující chyby: %%1352 Chcete-li zajistit
správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management
Console (MMC).

Error - 4/4/2013 8:44:35 AM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7000
Description = Služba Služba WinHTTP WPAD neuspěla při spuštění v důsledku následující
chyby: %%1069

Error - 4/9/2013 7:19:21 PM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Application Virtualization Client bylo
dosaženo časového limitu (30000 ms).

Error - 4/9/2013 7:19:21 PM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7000
Description = Služba Application Virtualization Client neuspěla při spuštění v důsledku
následující chyby: %%1053

Error - 4/9/2013 7:19:21 PM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7001
Description = Služba Client Virtualization Handler závisí na službě Application
Virtualization Client, která neuspěla při spuštění v důsledku následující chyby:
%%1053

Error - 4/9/2013 7:20:43 PM | Computer Name = Lucky-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby eventlog bylo dosaženo časového
limitu (30000 ms).


< End of report >

[stacik]

OTL logfile created on: 6/4/2013 5:34:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Luci\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4.00 Gb Total Physical Memory | 1.88 Gb Available Physical Memory | 46.94% Memory free
8.00 Gb Paging File | 5.56 Gb Available in Paging File | 69.53% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116.44 Gb Total Space | 29.49 Gb Free Space | 25.32% Space Free | Partition Type: NTFS
Drive D: | 329.79 Gb Total Space | 162.07 Gb Free Space | 49.14% Space Free | Partition Type: NTFS

Computer Name: LUCKY-PC | User Name: Luci | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013/06/04 17:32:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Luci\Downloads\OTL.exe
PRC - [2013/05/29 21:17:05 | 002,454,016 | ---- | M] () -- C:\Program Files (x86)\Kooperativa\Services\KoopPDFServer.exe
PRC - [2013/05/26 22:48:06 | 010,623,488 | ---- | M] () -- C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
PRC - [2013/05/23 07:44:09 | 000,825,808 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012/09/28 10:25:56 | 000,586,904 | ---- | M] (PandoraTV) -- C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
PRC - [2012/09/28 10:25:54 | 000,625,304 | ---- | M] (Pandora.TV) -- C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
PRC - [2012/08/21 11:12:26 | 004,282,728 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012/08/21 11:12:25 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012/06/11 17:22:16 | 000,240,208 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.EXE
PRC - [2012/06/11 17:22:16 | 000,193,616 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.EXE
PRC - [2011/10/01 08:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011/10/01 08:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2010/08/12 01:19:25 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010/04/26 18:37:54 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2010/02/08 20:04:04 | 001,080,448 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
PRC - [2009/11/02 23:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009/08/20 05:31:48 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
PRC - [2009/08/17 18:58:46 | 006,859,392 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2009/08/12 23:20:46 | 000,178,816 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
PRC - [2009/08/12 21:32:56 | 000,365,936 | ---- | M] (Boingo Wireless, Inc.) -- C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
PRC - [2009/07/31 19:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2009/06/24 21:30:18 | 000,272,952 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
PRC - [2009/06/19 19:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
PRC - [2009/06/19 19:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2009/06/16 02:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2008/12/23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
PRC - [2008/08/14 06:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008/08/14 05:59:56 | 000,301,624 | ---- | M] () -- C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
PRC - [2008/03/31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007/11/30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
PRC - [2007/08/08 09:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe


========== Modules (No Company Name) ==========

MOD - [2013/05/26 22:48:06 | 010,623,488 | ---- | M] () -- C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
MOD - [2013/05/23 07:44:07 | 000,393,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppgooglenaclpluginchrome.dll
MOD - [2013/05/23 07:44:06 | 013,136,336 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
MOD - [2013/05/23 07:43:59 | 004,051,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll
MOD - [2013/05/23 07:43:06 | 000,599,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\libglesv2.dll
MOD - [2013/05/23 07:43:05 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\libegl.dll
MOD - [2013/05/23 07:43:03 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ffmpegsumo.dll
MOD - [2013/02/14 10:52:53 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\05682429807d34d6ff05a77ea153935f\System.Windows.Forms.ni.dll
MOD - [2013/01/10 11:04:21 | 000,997,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\ee4683cbfd60ee35d95e2e6d32fc3981\System.Management.ni.dll
MOD - [2013/01/10 10:54:07 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0aeaf4f1629dbe8eafc8f47b1795b18a\PresentationFramework.Aero.ni.dll
MOD - [2013/01/10 10:53:31 | 014,325,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36b839247bd1d22a7fd014a74abe9729\PresentationFramework.ni.dll
MOD - [2013/01/10 10:53:06 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e2ee5d77ebe0bd025e7a7a317a43d677\System.Drawing.ni.dll
MOD - [2013/01/10 10:53:02 | 012,218,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\549690bfac66934b7c7fd5cf8b120b7c\PresentationCore.ni.dll
MOD - [2013/01/10 10:52:50 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\82a4c4666ad83c3a375210247e69646b\WindowsBase.ni.dll
MOD - [2013/01/10 10:52:43 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\10aba2c167cc1119b80159fd9ac71ca8\System.Xml.ni.dll
MOD - [2013/01/10 10:52:38 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\96a3b737db1e72adaf32d2b350e50c23\System.Configuration.ni.dll
MOD - [2013/01/10 10:52:37 | 007,974,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c54750e64ba10d0fb7b6a636fb3695ca\System.ni.dll
MOD - [2013/01/10 10:52:31 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b0b8554c05f194f546a8ed531320760b\mscorlib.ni.dll
MOD - [2010/04/26 18:37:54 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
MOD - [2010/02/03 01:51:50 | 000,076,288 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
MOD - [2010/02/03 01:51:32 | 000,186,880 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
MOD - [2010/02/03 01:51:24 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll
MOD - [2010/02/03 01:51:14 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
MOD - [2010/02/03 01:51:10 | 000,071,680 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
MOD - [2009/11/02 23:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2009/11/02 23:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2009/08/03 22:00:00 | 000,106,496 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2007/11/30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
MOD - [2007/06/15 19:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
MOD - [2007/06/02 02:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll


========== Services (SafeList) ==========

SRV:64bit: - [2012/08/21 11:12:25 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2009/12/08 01:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2007/08/08 09:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2013/05/29 21:17:05 | 002,454,016 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Kooperativa\Services\KoopPDFServer.exe -- (KoopPdfService)
SRV - [2013/05/23 14:52:02 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/05/14 23:38:25 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/09/28 10:25:54 | 000,625,304 | ---- | M] (Pandora.TV) [Auto | Running] -- C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe -- (PanService)
SRV - [2012/09/19 13:10:58 | 002,365,792 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012/07/13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/06/11 17:22:16 | 000,240,208 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.EXE -- (BBUpdate)
SRV - [2012/06/11 17:22:16 | 000,193,616 | ---- | M] (Microsoft Corporation.) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.EXE -- (BBSvc)
SRV - [2011/10/01 08:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011/10/01 08:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/16 02:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/03/31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/08/21 11:13:13 | 000,969,200 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012/08/21 11:13:13 | 000,359,464 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012/08/21 11:13:13 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012/08/21 11:13:12 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012/08/21 11:13:12 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012/08/21 11:13:11 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2012/03/01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/10/01 08:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011/10/01 08:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011/10/01 08:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011/10/01 08:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011/03/11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/08/12 01:19:45 | 000,035,384 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm)
DRV:64bit: - [2010/04/13 12:15:03 | 000,135,560 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2009/10/05 03:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009/08/21 08:48:17 | 000,044,032 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:64bit: - [2009/08/18 05:44:19 | 000,236,544 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009/08/12 05:38:01 | 001,799,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
DRV:64bit: - [2009/07/20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/13 03:07:19 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2008/12/09 02:35:52 | 000,061,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2008/05/24 02:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2007/07/24 20:11:32 | 000,014,904 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2012/09/18 17:02:02 | 000,011,880 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=ASUBDF& ... -SearchBox
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/09/30 16:42:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/09/30 16:28:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Luci\AppData\Roaming\Mozilla\Extensions
[2013/05/31 19:52:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Luci\AppData\Roaming\Mozilla\Firefox\Profiles\fy162b2h.default\extensions
[2013/05/23 14:52:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/05/23 14:52:04 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com/ig/redirectdomain ... &bmod=ASUT
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: Dokumenty Google = C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: avast! WebRep = C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1466_0\
CHR - Extension: Gmail = C:\Users\Luci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.)
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Boingo Wi-Fi] C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [SafeQ Client] C:\Program Files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe ()
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Luci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 147.230.16.140 147.230.16.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{603BAAA9-5E06-49A6-AD57-CC920F8A6FCB}: DhcpNameServer = 147.230.16.140 147.230.16.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{72D510A5-EA2B-4BEC-A595-C2E3C98AA93C}: DhcpNameServer = 147.230.16.140 147.230.16.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[stacik]

CREATERESTOREPOINT
Restore point Set: OTL Restore Point


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2013/06/04 14:56:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
[2013/06/02 22:27:37 | 000,000,000 | ---D | C] -- C:\Users\Luci\AppData\Roaming\Malwarebytes
[2013/06/02 22:27:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/06/02 22:27:27 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013/06/02 22:27:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/06/02 22:27:09 | 000,000,000 | ---D | C] -- C:\Users\Luci\AppData\Local\Programs
[2013/06/01 14:49:24 | 000,000,000 | ---D | C] -- C:\Users\Luci\Desktop\flashka soubory
[2013/06/01 14:08:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2013/06/01 14:08:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/06/01 14:08:00 | 000,000,000 | ---D | C] -- C:\Users\Luci\Desktop\mbar
[2013/05/30 20:15:17 | 000,000,000 | ---D | C] -- C:\bb06622e3b208668b03ad3e9
[2013/05/29 23:33:51 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013/05/29 22:25:34 | 000,000,000 | ---D | C] -- C:\rsit

========== Files - Modified Within 7 Days ==========

[2013/06/04 17:38:45 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/06/04 17:38:38 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/06/04 17:38:01 | 000,020,112 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/04 17:38:01 | 000,020,112 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/04 17:24:06 | 000,000,962 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/06/04 17:22:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/06/04 17:22:47 | 3220,647,936 | -HS- | M] () -- C:\hiberfil.sys
[2013/06/04 14:56:00 | 000,000,966 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/06/03 13:52:31 | 000,001,253 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2013/06/02 22:27:29 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/01 14:51:34 | 001,471,574 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/06/01 14:51:34 | 000,631,736 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013/06/01 14:51:34 | 000,616,452 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/06/01 14:51:34 | 000,122,100 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013/06/01 14:51:34 | 000,106,574 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/05/29 23:33:25 | 000,000,824 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\tmvsthfud.bin
[2013/05/29 23:33:16 | 000,000,824 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\tmvsthfss.bin
[2013/05/29 21:17:02 | 000,001,326 | ---- | M] () -- C:\Users\Luci\Desktop\Kooperativa - Perspektiva 7BN Extern.lnk

========== Files Created - No Company Name ==========

[2013/06/04 17:38:45 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/06/02 22:27:29 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/04 19:26:13 | 001,495,982 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/08/12 00:57:46 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe

========== ZeroAccess Check ==========

[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 07:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012/09/30 07:50:23 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Asus WebStorage
[2013/05/31 18:09:00 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\BSplayer
[2012/11/21 01:09:11 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\BSplayer Pro
[2012/11/05 00:21:27 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\SoftGrid Client
[2012/10/04 19:27:14 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\TP
[2012/11/21 01:12:16 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\TuneUp Software

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009/07/14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 07:08:49 | 000,032,632 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010/08/12 00:56:53 | 000,000,962 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2010/08/12 00:56:54 | 000,000,966 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012/09/30 16:57:08 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: ATAPI.SYS >
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\SysWOW64\autochk.exe
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009/07/14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\SysNative\autochk.exe
[2009/07/14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysNative\drivers\cdrom.sys
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011/02/26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe
[2011/02/26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2010/08/12 01:09:29 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010/08/12 00:55:02 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/08/12 01:09:29 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010/08/12 00:55:02 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010/11/20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010/08/12 01:09:29 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2010/08/12 00:55:02 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2010/08/12 01:09:29 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2010/08/12 00:55:02 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009/07/14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\SysNative\hal.dll
[2009/07/14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll
[2009/07/14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009/07/14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009/07/14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2010/11/20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2010/11/20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013/01/04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\SysNative\drivers\tcpip.sys
[2013/01/04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2012/03/30 12:19:17 | 001,877,872 | ---- | M] (Microsoft Corporation) MD5=5EFD096DEF47F8B88EF591DA92143440 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_0faa5514992a39a7\tcpip.sys
[2012/03/30 13:09:53 | 001,895,280 | ---- | M] (Microsoft Corporation) MD5=624C5B3AA4C99B3184BB922D9ECE3FF0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_0f140fa780164fde\tcpip.sys
[2013/01/03 07:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2012/03/30 12:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2009/07/14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2012/03/30 13:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2013/01/03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013/01/04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009/07/14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\b8a7201eeb2c276ea5b615a7652ab2a0\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2010/08/12 01:09:29 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010/08/12 01:09:29 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2010/08/12 01:09:29 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< >

< %systemroot%*.* /U /s >
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[11 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp files -> C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp -> ]
[26874 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012/11/16 10:00:01 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Adobe
[2012/09/30 07:50:23 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Asus WebStorage
[2013/05/31 18:09:00 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\BSplayer
[2012/11/21 01:09:11 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\BSplayer Pro
[2012/09/03 14:15:10 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Identities
[2012/09/30 16:53:50 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Macromedia
[2013/06/02 22:27:37 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Malwarebytes
[2009/07/14 09:44:38 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Media Center Programs
[2012/11/19 02:16:45 | 000,000,000 | --SD | M] -- C:\Users\Luci\AppData\Roaming\Microsoft
[2012/09/30 16:28:05 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\Mozilla
[2012/11/05 00:21:27 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\SoftGrid Client
[2012/10/04 19:27:14 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\TP
[2012/11/21 01:12:16 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\TuneUp Software
[2013/05/31 18:07:25 | 000,000,000 | ---D | M] -- C:\Users\Luci\AppData\Roaming\vlc

< %APPDATA%\*.exe /s >
[2009/08/11 22:21:26 | 000,087,552 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\AC3 Filter\ac3config.exe
[2009/08/11 22:21:30 | 000,090,112 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\AC3 Filter\spdif_test.exe
[2010/03/22 15:52:04 | 000,697,690 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
[2012/10/11 10:01:20 | 001,175,371 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\FFDShow\unins000.exe
[2010/08/14 11:42:54 | 000,113,152 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\Haali media splitter\dsmux.exe
[2010/08/14 11:45:10 | 000,358,400 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\Haali media splitter\gdsmux.exe
[2010/08/14 11:42:06 | 000,137,728 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\Haali media splitter\mkv2vfr.exe
[2010/09/30 16:30:22 | 000,042,305 | ---- | M] () -- C:\Users\Luci\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2013/06/04 18:38:10 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013/06/04 17:56:55 | 000,000,962 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013/06/04 17:56:55 | 000,000,966 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2013/05/23 14:52:03 | 000,920,472 | ---- | M] (Mozilla Corporation) MD5=95110A1C5A1D228AC1DDF6AB67D00BEB -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2013/02/22 06:10:00 | 000,757,376 | ---- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2013/05/23 07:44:09 | 000,825,808 | ---- | M] (Google Inc.) MD5=51C392EC9DA1119EC86D562FF3E7344F -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013/06/04 17:38:45 | 000,000,512 | ---- | M] () MD5=535C3E64EDDB2150BC7D79F4752E1C79 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *loader* /s >
[2010/03/16 03:48:38 | 000,079,184 | ---- | M] () -- \Program Files (x86)\ASUS\ASUS WebStorage\EeeStorageUploader.exe
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\7.1.391.0\apps\chat\7.1.391\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\7.1.391.0\apps\facebook\7.1.391\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\7.1.391.0\apps\facebooklike\7.1.391\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\7.1.391.0\apps\fbsharedservices\7.1.391\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\7.1.391.0\apps\featured\7.1.391\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\7.1.391.0\apps\games\7.1.391\js\shared\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\7.1.391.0\scripts\io\downloader.js
[2008/02/25 08:05:22 | 000,856,064 | ---- | M] () -- \Program Files (x86)\The KMPlayer\ImLoader.dll
[2012/06/18 12:39:40 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012/06/18 12:39:40 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012/06/18 12:39:40 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012/06/18 12:39:40 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012/01/31 17:16:24 | 000,006,643 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\BingBar\Apps\Chat_cf57b0088a3b4f61a0bfaad0ba784240\7.1.361\js\downloader.js
[2013/03/21 23:31:52 | 000,006,643 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\BingBar\Apps\Facebook_76c7b5062c4e4be69d843ace834517ec\7.2.235\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\BingBar\Apps\FacebookLike_08e57417866d4faa981702780b0d36c4\7.1.391\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\BingBar\Apps\fbsharedservices_bb9c6e8b961d477e9ec95f9698bde610\7.1.391\js\downloader.js
[2011/10/12 16:04:18 | 000,006,643 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\BingBar\Apps\Featured_ce53daa069a4a3ad2e3d7d81081f340d\7.1.391\js\downloader.js
[2012/11/21 01:07:13 | 000,015,851 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XX42XTMF\universaldownloader-prefetch[1].htm
[2012/10/15 13:37:23 | 000,004,178 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8YX9TJI5\ajax-loader[1].gif
[2012/10/03 18:14:19 | 000,000,673 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8YX9TJI5\loader.white[1].gif
[2013/03/25 10:44:52 | 000,002,895 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8YX9TJI5\rmsloaderdelayed[1].js
[2013/04/09 21:12:51 | 000,002,895 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HDUYW2S9\rmsloaderdelayed[1].js
[2012/10/03 18:14:15 | 000,002,199 | ---- | M] () -- \Users\Luci\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IDLK6FRK\preloader[1].swf
[2012/11/21 01:06:42 | 000,373,416 | ---- | M] () -- \Users\Luci\Downloads\SoftonicDownloader_for_bs-player.exe
[2012/11/05 17:50:42 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2010/11/20 12:09:38 | 000,004,290 | ---- | M] () -- \Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483.manifest
[2010/11/20 14:33:18 | 000,004,338 | ---- | M] () -- \Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6.manifest
[2010/11/20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\SoftwareDistribution\Download\433767575943dacb697ee0558fc08c06\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2013/01/04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013/01/04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:04:54 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_66c2596d956d1920\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/18 17:22:27 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_66ff46fd953e6c5c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:28:57 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:41:11 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:06:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_67770e0aae6a7c68\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 20:46:36 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21306_none_6787e564ae5ceff6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 16:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:21:03 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 20:38:32 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:38:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 20:09:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/08/03 22:00:16 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009/08/03 22:00:16 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009/08/03 22:00:16 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009/08/03 22:00:16 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009/08/03 22:00:16 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2012/10/01 14:06:47 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2012/10/01 14:06:47 | 000,640,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66_winload.efi_75834aa0
[2012/10/01 14:06:47 | 000,603,976 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66_winload.exe_75835076
[2012/10/01 14:06:47 | 000,556,928 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66_winresume.efi_85cd069f
[2012/10/01 14:06:47 | 000,518,160 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66_winresume.exe_85cd1215
[2009/07/14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009/08/03 21:57:46 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009/07/14 04:44:20 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009/08/03 22:03:13 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_bc80fed7d50db43d.manifest
[2009/08/03 21:52:21 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_d1d5f78d6bdf46d5.manifest
[2009/07/14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011/02/05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011/02/05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010/11/20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/18 13:09:17 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_0ae0ab79dce0fb26\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:45:38 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:56:23 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:42:56 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21306_none_0b6949e0f5ff7ec0\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:15:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:32:13 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:45:15 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >

[vyosek]

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  SRV - [2012/09/28 10:25:54 | 000,625,304 | ---- | M] (Pandora.TV) [Auto | Running] -- C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe -- (PanService)
  IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
  IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  IE - HKLM\..\URLSearchHook: - No CLSID value found
  IE - HKLM\..\SearchScopes,DefaultScope =
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
  IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\URLSearchHook: - No CLSID value found
  IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes,DefaultScope =
  IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=ASUBDF&PC=MAAU&q={searchTerms}&src=IE-SearchBox
  CHR - homepage: http://www.google.com/ig/redirectdomain ... &bmod=ASUT
  O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O18:64bit: - Protocol\Handler\livecall - No CLSID value found
  O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
  O18:64bit: - Protocol\Handler\msnim - No CLSID value found
  O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
  O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  [2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [11 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp files -> C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp -> ]
  [26874 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
  [2013/06/04 18:38:10 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
  [2013/06/04 17:56:55 | 000,000,962 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  [2013/06/04 17:56:55 | 000,000,966 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  
  :reg
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "UfSeAgnt.exe"=-
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "UpdateLBPShortCut"=-
  "UpdateP2GoShortCut"=-
  "Adobe ARM"=-
  
  :files
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\*.lnk
  C:\Program Files (x86)\PANDORA.TV
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[stacik]

All processes killed
========== OTL ==========
Service PanService stopped successfully!
Service PanService deleted successfully!
C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe moved successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry value HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Use Chrome's Settings page to change the HomePage.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP39D4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2CAD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP4356.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP5072.tmp\mscorlib.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP5072.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP517B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP569A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP59C5.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP5A4F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPB9ED.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF9BA.tmp\Microsoft.PowerShell.GraphicalHost.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF9BA.tmp folder deleted successfully.
C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\wlt12C5.tmp deleted successfully.
C:\Windows\Temp\DMI222F.tmp deleted successfully.
C:\Windows\Temp\DMI2F3A.tmp deleted successfully.
C:\Windows\Temp\DMIA83F.tmp deleted successfully.
C:\Windows\Temp\SEP4CD7.tmp deleted successfully.
C:\Windows\Temp\TS_45A7.tmp deleted successfully.
C:\Windows\Temp\TS_4671.tmp deleted successfully.
C:\Windows\Temp\TS_4EEC.tmp deleted successfully.
C:\Windows\Temp\TS_59D5.tmp deleted successfully.
C:\Windows\Temp\TS_5C75.tmp deleted successfully.
C:\Windows\Temp\TS_680A.tmp deleted successfully.
C:\Windows\Temp\TS_6A2D.tmp deleted successfully.
C:\Windows\Temp\TS_7E3A.tmp deleted successfully.
C:\Windows\Temp\TS_84B1.tmp deleted successfully.
C:\Windows\Temp\~100.tmp deleted successfully.
C:\Windows\Temp\~1000.tmp deleted successfully.
C:\Windows\Temp\~1004.tmp deleted successfully.
C:\Windows\Temp\~1009.tmp deleted successfully.
C:\Windows\Temp\~100A.tmp deleted successfully.
C:\Windows\Temp\~100B.tmp deleted successfully.
C:\Windows\Temp\~100C.tmp deleted successfully.
C:\Windows\Temp\~100D.tmp deleted successfully.
C:\Windows\Temp\~100E.tmp deleted successfully.
C:\Windows\Temp\~101.tmp deleted successfully.
C:\Windows\Temp\~1018.tmp deleted successfully.
C:\Windows\Temp\~1019.tmp deleted successfully.
C:\Windows\Temp\~101A.tmp deleted successfully.
C:\Windows\Temp\~101B.tmp deleted successfully.
C:\Windows\Temp\~101C.tmp deleted successfully.
C:\Windows\Temp\~102.tmp deleted successfully.
C:\Windows\Temp\~1028.tmp deleted successfully.
C:\Windows\Temp\~102A.tmp deleted successfully.
C:\Windows\Temp\~102B.tmp deleted successfully.
C:\Windows\Temp\~102D.tmp deleted successfully.
C:\Windows\Temp\~1030.tmp deleted successfully.
C:\Windows\Temp\~1037.tmp deleted successfully.
C:\Windows\Temp\~1038.tmp deleted successfully.
C:\Windows\Temp\~1039.tmp deleted successfully.
C:\Windows\Temp\~103B.tmp deleted successfully.
C:\Windows\Temp\~103C.tmp deleted successfully.
C:\Windows\Temp\~1047.tmp deleted successfully.
C:\Windows\Temp\~1048.tmp deleted successfully.
C:\Windows\Temp\~1049.tmp deleted successfully.
C:\Windows\Temp\~104A.tmp deleted successfully.
C:\Windows\Temp\~104B.tmp deleted successfully.
C:\Windows\Temp\~104C.tmp deleted successfully.
C:\Windows\Temp\~104F.tmp deleted successfully.
C:\Windows\Temp\~1050.tmp deleted successfully.
C:\Windows\Temp\~1051.tmp deleted successfully.
C:\Windows\Temp\~1057.tmp deleted successfully.
C:\Windows\Temp\~1058.tmp deleted successfully.
C:\Windows\Temp\~1059.tmp deleted successfully.
C:\Windows\Temp\~105D.tmp deleted successfully.
C:\Windows\Temp\~105E.tmp deleted successfully.
C:\Windows\Temp\~1066.tmp deleted successfully.
C:\Windows\Temp\~1067.tmp deleted successfully.
C:\Windows\Temp\~1068.tmp deleted successfully.
C:\Windows\Temp\~1069.tmp deleted successfully.
C:\Windows\Temp\~1072.tmp deleted successfully.
C:\Windows\Temp\~1076.tmp deleted successfully.
C:\Windows\Temp\~1078.tmp deleted successfully.
C:\Windows\Temp\~107B.tmp deleted successfully.
C:\Windows\Temp\~107C.tmp deleted successfully.
C:\Windows\Temp\~1085.tmp deleted successfully.
C:\Windows\Temp\~1086.tmp deleted successfully.
C:\Windows\Temp\~1087.tmp deleted successfully.
C:\Windows\Temp\~1088.tmp deleted successfully.
C:\Windows\Temp\~1089.tmp deleted successfully.
C:\Windows\Temp\~108A.tmp deleted successfully.
C:\Windows\Temp\~108B.tmp deleted successfully.
C:\Windows\Temp\~108C.tmp deleted successfully.
C:\Windows\Temp\~108D.tmp deleted successfully.
C:\Windows\Temp\~108E.tmp deleted successfully.
C:\Windows\Temp\~1097.tmp deleted successfully.
C:\Windows\Temp\~1098.tmp deleted successfully.
C:\Windows\Temp\~1099.tmp deleted successfully.
C:\Windows\Temp\~109A.tmp deleted successfully.
C:\Windows\Temp\~109B.tmp deleted successfully.
C:\Windows\Temp\~10A5.tmp deleted successfully.
C:\Windows\Temp\~10A6.tmp deleted successfully.
C:\Windows\Temp\~10A7.tmp deleted successfully.
C:\Windows\Temp\~10A8.tmp deleted successfully.
C:\Windows\Temp\~10A9.tmp deleted successfully.
C:\Windows\Temp\~10AA.tmp deleted successfully.
C:\Windows\Temp\~10AB.tmp deleted successfully.
C:\Windows\Temp\~10AD.tmp deleted successfully.
C:\Windows\Temp\~10AE.tmp deleted successfully.
C:\Windows\Temp\~10B.tmp deleted successfully.
C:\Windows\Temp\~10B4.tmp deleted successfully.
C:\Windows\Temp\~10B5.tmp deleted successfully.
C:\Windows\Temp\~10B6.tmp deleted successfully.
C:\Windows\Temp\~10B7.tmp deleted successfully.
C:\Windows\Temp\~10B8.tmp deleted successfully.
C:\Windows\Temp\~10C.tmp deleted successfully.
C:\Windows\Temp\~10C4.tmp deleted successfully.
C:\Windows\Temp\~10C5.tmp deleted successfully.
C:\Windows\Temp\~10C6.tmp deleted successfully.
C:\Windows\Temp\~10C7.tmp deleted successfully.
C:\Windows\Temp\~10C8.tmp deleted successfully.
C:\Windows\Temp\~10CE.tmp deleted successfully.
C:\Windows\Temp\~10CF.tmp deleted successfully.
C:\Windows\Temp\~10D.tmp deleted successfully.
C:\Windows\Temp\~10D0.tmp deleted successfully.
C:\Windows\Temp\~10D3.tmp deleted successfully.
C:\Windows\Temp\~10D4.tmp deleted successfully.
C:\Windows\Temp\~10D5.tmp deleted successfully.
C:\Windows\Temp\~10E.tmp deleted successfully.
C:\Windows\Temp\~10E2.tmp deleted successfully.
C:\Windows\Temp\~10E3.tmp deleted successfully.
C:\Windows\Temp\~10E4.tmp deleted successfully.
C:\Windows\Temp\~10E5.tmp deleted successfully.
C:\Windows\Temp\~10E6.tmp deleted successfully.
C:\Windows\Temp\~10EA.tmp deleted successfully.
C:\Windows\Temp\~10F3.tmp deleted successfully.
C:\Windows\Temp\~10F4.tmp deleted successfully.
C:\Windows\Temp\~10F5.tmp deleted successfully.
C:\Windows\Temp\~10F6.tmp deleted successfully.
C:\Windows\Temp\~10F7.tmp deleted successfully.
C:\Windows\Temp\~10F8.tmp deleted successfully.
C:\Windows\Temp\~10F9.tmp deleted successfully.
C:\Windows\Temp\~10FA.tmp deleted successfully.
C:\Windows\Temp\~11.tmp deleted successfully.
C:\Windows\Temp\~1102.tmp deleted successfully.
C:\Windows\Temp\~1103.tmp deleted successfully.
C:\Windows\Temp\~1104.tmp deleted successfully.
C:\Windows\Temp\~1105.tmp deleted successfully.
C:\Windows\Temp\~1106.tmp deleted successfully.
C:\Windows\Temp\~1107.tmp deleted successfully.
C:\Windows\Temp\~1112.tmp deleted successfully.
C:\Windows\Temp\~1113.tmp deleted successfully.
C:\Windows\Temp\~1114.tmp deleted successfully.
C:\Windows\Temp\~1115.tmp deleted successfully.
C:\Windows\Temp\~1118.tmp deleted successfully.
C:\Windows\Temp\~112.tmp deleted successfully.
C:\Windows\Temp\~1121.tmp deleted successfully.
C:\Windows\Temp\~1122.tmp deleted successfully.
C:\Windows\Temp\~1123.tmp deleted successfully.
C:\Windows\Temp\~1124.tmp deleted successfully.
C:\Windows\Temp\~1125.tmp deleted successfully.
C:\Windows\Temp\~113.tmp deleted successfully.
C:\Windows\Temp\~1131.tmp deleted successfully.
C:\Windows\Temp\~1132.tmp deleted successfully.
C:\Windows\Temp\~1133.tmp deleted successfully.
C:\Windows\Temp\~1134.tmp deleted successfully.
C:\Windows\Temp\~1136.tmp deleted successfully.
C:\Windows\Temp\~1137.tmp deleted successfully.
C:\Windows\Temp\~1141.tmp deleted successfully.
C:\Windows\Temp\~1142.tmp deleted successfully.
C:\Windows\Temp\~1143.tmp deleted successfully.
C:\Windows\Temp\~1147.tmp deleted successfully.
C:\Windows\Temp\~1148.tmp deleted successfully.
C:\Windows\Temp\~1150.tmp deleted successfully.
C:\Windows\Temp\~1151.tmp deleted successfully.
C:\Windows\Temp\~1152.tmp deleted successfully.
C:\Windows\Temp\~1158.tmp deleted successfully.
C:\Windows\Temp\~1160.tmp deleted successfully.
C:\Windows\Temp\~1161.tmp deleted successfully.
C:\Windows\Temp\~1162.tmp deleted successfully.
C:\Windows\Temp\~1164.tmp deleted successfully.
C:\Windows\Temp\~1166.tmp deleted successfully.
C:\Windows\Temp\~116F.tmp deleted successfully.
C:\Windows\Temp\~1171.tmp deleted successfully.
C:\Windows\Temp\~1172.tmp deleted successfully.
C:\Windows\Temp\~1173.tmp deleted successfully.
C:\Windows\Temp\~1177.tmp deleted successfully.
C:\Windows\Temp\~1178.tmp deleted successfully.
C:\Windows\Temp\~117F.tmp deleted successfully.
C:\Windows\Temp\~1180.tmp deleted successfully.
C:\Windows\Temp\~1181.tmp deleted successfully.
C:\Windows\Temp\~1182.tmp deleted successfully.
C:\Windows\Temp\~1183.tmp deleted successfully.
C:\Windows\Temp\~1184.tmp deleted successfully.
C:\Windows\Temp\~118F.tmp deleted successfully.
C:\Windows\Temp\~1190.tmp deleted successfully.
C:\Windows\Temp\~119E.tmp deleted successfully.
C:\Windows\Temp\~119F.tmp deleted successfully.
C:\Windows\Temp\~11A0.tmp deleted successfully.
C:\Windows\Temp\~11A1.tmp deleted successfully.
C:\Windows\Temp\~11A2.tmp deleted successfully.
C:\Windows\Temp\~11A3.tmp deleted successfully.
C:\Windows\Temp\~11A4.tmp deleted successfully.
C:\Windows\Temp\~11A5.tmp deleted successfully.
C:\Windows\Temp\~11A6.tmp deleted successfully.
C:\Windows\Temp\~11A7.tmp deleted successfully.
C:\Windows\Temp\~11AE.tmp deleted successfully.
C:\Windows\Temp\~11AF.tmp deleted successfully.
C:\Windows\Temp\~11B.tmp deleted successfully.
C:\Windows\Temp\~11B0.tmp deleted successfully.
C:\Windows\Temp\~11B1.tmp deleted successfully.
C:\Windows\Temp\~11B5.tmp deleted successfully.
C:\Windows\Temp\~11BD.tmp deleted successfully.
C:\Windows\Temp\~11BE.tmp deleted successfully.
C:\Windows\Temp\~11BF.tmp deleted successfully.
C:\Windows\Temp\~11C0.tmp deleted successfully.
C:\Windows\Temp\~11C1.tmp deleted successfully.
C:\Windows\Temp\~11C2.tmp deleted successfully.
C:\Windows\Temp\~11C3.tmp deleted successfully.
C:\Windows\Temp\~11C4.tmp deleted successfully.
C:\Windows\Temp\~11C5.tmp deleted successfully.
C:\Windows\Temp\~11C6.tmp deleted successfully.
C:\Windows\Temp\~11C7.tmp deleted successfully.
C:\Windows\Temp\~11CD.tmp deleted successfully.
C:\Windows\Temp\~11CE.tmp deleted successfully.
C:\Windows\Temp\~11D0.tmp deleted successfully.
C:\Windows\Temp\~11D1.tmp deleted successfully.
C:\Windows\Temp\~11D8.tmp deleted successfully.
C:\Windows\Temp\~11DD.tmp deleted successfully.
C:\Windows\Temp\~11DF.tmp deleted successfully.
C:\Windows\Temp\~11E0.tmp deleted successfully.
C:\Windows\Temp\~11E3.tmp deleted successfully.
C:\Windows\Temp\~11E6.tmp deleted successfully.
C:\Windows\Temp\~11EC.tmp deleted successfully.
C:\Windows\Temp\~11ED.tmp deleted successfully.
C:\Windows\Temp\~11EE.tmp deleted successfully.
C:\Windows\Temp\~11F3.tmp deleted successfully.
C:\Windows\Temp\~11FC.tmp deleted successfully.
C:\Windows\Temp\~11FD.tmp deleted successfully.
C:\Windows\Temp\~11FE.tmp deleted successfully.
C:\Windows\Temp\~11FF.tmp deleted successfully.
C:\Windows\Temp\~12.tmp deleted successfully.
C:\Windows\Temp\~120.tmp deleted successfully.
C:\Windows\Temp\~1200.tmp deleted successfully.
C:\Windows\Temp\~1201.tmp deleted successfully.
C:\Windows\Temp\~1202.tmp deleted successfully.
C:\Windows\Temp\~1209.tmp deleted successfully.
C:\Windows\Temp\~120D.tmp deleted successfully.
C:\Windows\Temp\~120E.tmp deleted successfully.
C:\Windows\Temp\~120F.tmp deleted successfully.
C:\Windows\Temp\~121.tmp deleted successfully.
C:\Windows\Temp\~1212.tmp deleted successfully.
C:\Windows\Temp\~1215.tmp deleted successfully.
C:\Windows\Temp\~121B.tmp deleted successfully.
C:\Windows\Temp\~121C.tmp deleted successfully.
C:\Windows\Temp\~121D.tmp deleted successfully.
C:\Windows\Temp\~121E.tmp deleted successfully.
C:\Windows\Temp\~122B.tmp deleted successfully.
C:\Windows\Temp\~122C.tmp deleted successfully.
C:\Windows\Temp\~122D.tmp deleted successfully.
C:\Windows\Temp\~123.tmp deleted successfully.
C:\Windows\Temp\~1233.tmp deleted successfully.
C:\Windows\Temp\~123A.tmp deleted successfully.
C:\Windows\Temp\~123D.tmp deleted successfully.
C:\Windows\Temp\~124A.tmp deleted successfully.
C:\Windows\Temp\~124B.tmp deleted successfully.
C:\Windows\Temp\~124C.tmp deleted successfully.
C:\Windows\Temp\~124D.tmp deleted successfully.
C:\Windows\Temp\~124E.tmp deleted successfully.
C:\Windows\Temp\~124F.tmp deleted successfully.
C:\Windows\Temp\~1250.tmp deleted successfully.
C:\Windows\Temp\~1251.tmp deleted successfully.
C:\Windows\Temp\~1252.tmp deleted successfully.
C:\Windows\Temp\~1256.tmp deleted successfully.
C:\Windows\Temp\~125A.tmp deleted successfully.
C:\Windows\Temp\~125B.tmp deleted successfully.
C:\Windows\Temp\~1269.tmp deleted successfully.
C:\Windows\Temp\~1270.tmp deleted successfully.
C:\Windows\Temp\~1271.tmp deleted successfully.
C:\Windows\Temp\~1272.tmp deleted successfully.
C:\Windows\Temp\~1276.tmp deleted successfully.
C:\Windows\Temp\~1277.tmp deleted successfully.
C:\Windows\Temp\~1278.tmp deleted successfully.
C:\Windows\Temp\~1279.tmp deleted successfully.
C:\Windows\Temp\~127A.tmp deleted successfully.
C:\Windows\Temp\~127B.tmp deleted successfully.
C:\Windows\Temp\~127C.tmp deleted successfully.
C:\Windows\Temp\~127D.tmp deleted successfully.
C:\Windows\Temp\~1288.tmp deleted successfully.
C:\Windows\Temp\~1289.tmp deleted successfully.
C:\Windows\Temp\~128A.tmp deleted successfully.
C:\Windows\Temp\~128B.tmp deleted successfully.
C:\Windows\Temp\~128C.tmp deleted successfully.
C:\Windows\Temp\~128D.tmp deleted successfully.
C:\Windows\Temp\~128E.tmp deleted successfully.
C:\Windows\Temp\~128F.tmp deleted successfully.
C:\Windows\Temp\~1290.tmp deleted successfully.
C:\Windows\Temp\~1291.tmp deleted successfully.
C:\Windows\Temp\~1292.tmp deleted successfully.
C:\Windows\Temp\~1298.tmp deleted successfully.
C:\Windows\Temp\~1299.tmp deleted successfully.
C:\Windows\Temp\~129A.tmp deleted successfully.
C:\Windows\Temp\~129B.tmp deleted successfully.
C:\Windows\Temp\~129C.tmp deleted successfully.
C:\Windows\Temp\~129D.tmp deleted successfully.
C:\Windows\Temp\~12A3.tmp deleted successfully.
C:\Windows\Temp\~12A7.tmp deleted successfully.
C:\Windows\Temp\~12B.tmp deleted successfully.
C:\Windows\Temp\~12B0.tmp deleted successfully.
C:\Windows\Temp\~12B2.tmp deleted successfully.
C:\Windows\Temp\~12B7.tmp deleted successfully.
C:\Windows\Temp\~12B8.tmp deleted successfully.
C:\Windows\Temp\~12B9.tmp deleted successfully.
C:\Windows\Temp\~12BA.tmp deleted successfully.
C:\Windows\Temp\~12BB.tmp deleted successfully.
C:\Windows\Temp\~12BC.tmp deleted successfully.
C:\Windows\Temp\~12BD.tmp deleted successfully.
C:\Windows\Temp\~12BE.tmp deleted successfully.
C:\Windows\Temp\~12C.tmp deleted successfully.
C:\Windows\Temp\~12C7.tmp deleted successfully.
C:\Windows\Temp\~12C8.tmp deleted successfully.
C:\Windows\Temp\~12C9.tmp deleted successfully.
C:\Windows\Temp\~12CA.tmp deleted successfully.
C:\Windows\Temp\~12CB.tmp deleted successfully.
C:\Windows\Temp\~12CC.tmp deleted successfully.
C:\Windows\Temp\~12CD.tmp deleted successfully.
C:\Windows\Temp\~12CE.tmp deleted successfully.
C:\Windows\Temp\~12D.tmp deleted successfully.
C:\Windows\Temp\~12D6.tmp deleted successfully.
C:\Windows\Temp\~12D7.tmp deleted successfully.
C:\Windows\Temp\~12D8.tmp deleted successfully.
C:\Windows\Temp\~12D9.tmp deleted successfully.
C:\Windows\Temp\~12DA.tmp deleted successfully.
C:\Windows\Temp\~12DB.tmp deleted successfully.
C:\Windows\Temp\~12DC.tmp deleted successfully.
C:\Windows\Temp\~12DD.tmp deleted successfully.
C:\Windows\Temp\~12DE.tmp deleted successfully.
C:\Windows\Temp\~12DF.tmp deleted successfully.
C:\Windows\Temp\~12E.tmp deleted successfully.
C:\Windows\Temp\~12E6.tmp deleted successfully.
C:\Windows\Temp\~12E7.tmp deleted successfully.
C:\Windows\Temp\~12E8.tmp deleted successfully.
C:\Windows\Temp\~12E9.tmp deleted successfully.
C:\Windows\Temp\~12EA.tmp deleted successfully.
C:\Windows\Temp\~12EB.tmp deleted successfully.
C:\Windows\Temp\~12ED.tmp deleted successfully.
C:\Windows\Temp\~12F.tmp deleted successfully.
C:\Windows\Temp\~12F5.tmp deleted successfully.
C:\Windows\Temp\~12F6.tmp deleted successfully.
C:\Windows\Temp\~12F7.tmp deleted successfully.
C:\Windows\Temp\~12F8.tmp deleted successfully.
C:\Windows\Temp\~12F9.tmp deleted successfully.
C:\Windows\Temp\~12FA.tmp deleted successfully.
C:\Windows\Temp\~12FB.tmp deleted successfully.
C:\Windows\Temp\~12FC.tmp deleted successfully.
C:\Windows\Temp\~12FD.tmp deleted successfully.
C:\Windows\Temp\~13.tmp deleted successfully.
C:\Windows\Temp\~1305.tmp deleted successfully.
C:\Windows\Temp\~1306.tmp deleted successfully.
C:\Windows\Temp\~1307.tmp deleted successfully.
C:\Windows\Temp\~1308.tmp deleted successfully.
C:\Windows\Temp\~1309.tmp deleted successfully.
C:\Windows\Temp\~130A.tmp deleted successfully.
C:\Windows\Temp\~130B.tmp deleted successfully.
C:\Windows\Temp\~130C.tmp deleted successfully.
C:\Windows\Temp\~130D.tmp deleted successfully.
C:\Windows\Temp\~130E.tmp deleted successfully.
C:\Windows\Temp\~131.tmp deleted successfully.
C:\Windows\Temp\~1315.tmp deleted successfully.
C:\Windows\Temp\~1316.tmp deleted successfully.
C:\Windows\Temp\~1317.tmp deleted successfully.
C:\Windows\Temp\~1318.tmp deleted successfully.
C:\Windows\Temp\~1319.tmp deleted successfully.
C:\Windows\Temp\~1324.tmp deleted successfully.
C:\Windows\Temp\~1325.tmp deleted successfully.
C:\Windows\Temp\~1326.tmp deleted successfully.
C:\Windows\Temp\~1327.tmp deleted successfully.
C:\Windows\Temp\~1328.tmp deleted successfully.
C:\Windows\Temp\~1329.tmp deleted successfully.
C:\Windows\Temp\~132C.tmp deleted successfully.
C:\Windows\Temp\~1334.tmp deleted successfully.
C:\Windows\Temp\~1335.tmp deleted successfully.
C:\Windows\Temp\~1336.tmp deleted successfully.
C:\Windows\Temp\~1337.tmp deleted successfully.
C:\Windows\Temp\~1338.tmp deleted successfully.
C:\Windows\Temp\~1339.tmp deleted successfully.
C:\Windows\Temp\~133A.tmp deleted successfully.
C:\Windows\Temp\~133C.tmp deleted successfully.
C:\Windows\Temp\~134.tmp deleted successfully.
C:\Windows\Temp\~1340.tmp deleted successfully.
C:\Windows\Temp\~1344.tmp deleted successfully.
C:\Windows\Temp\~1345.tmp deleted successfully.
C:\Windows\Temp\~1347.tmp deleted successfully.
C:\Windows\Temp\~1349.tmp deleted successfully.
C:\Windows\Temp\~134A.tmp deleted successfully.
C:\Windows\Temp\~1353.tmp deleted successfully.
C:\Windows\Temp\~1354.tmp deleted successfully.
C:\Windows\Temp\~1355.tmp deleted successfully.
C:\Windows\Temp\~1356.tmp deleted successfully.
C:\Windows\Temp\~1357.tmp deleted successfully.
C:\Windows\Temp\~1358.tmp deleted successfully.
C:\Windows\Temp\~1359.tmp deleted successfully.
C:\Windows\Temp\~135A.tmp deleted successfully.
C:\Windows\Temp\~135B.tmp deleted successfully.
C:\Windows\Temp\~135C.tmp deleted successfully.
C:\Windows\Temp\~1363.tmp deleted successfully.
C:\Windows\Temp\~1364.tmp deleted successfully.
C:\Windows\Temp\~1365.tmp deleted successfully.
C:\Windows\Temp\~1366.tmp deleted successfully.
C:\Windows\Temp\~1367.tmp deleted successfully.
C:\Windows\Temp\~1368.tmp deleted successfully.
C:\Windows\Temp\~1372.tmp deleted successfully.
C:\Windows\Temp\~1373.tmp deleted successfully.
C:\Windows\Temp\~1374.tmp deleted successfully.
C:\Windows\Temp\~1375.tmp deleted successfully.
C:\Windows\Temp\~1376.tmp deleted successfully.
C:\Windows\Temp\~1377.tmp deleted successfully.
C:\Windows\Temp\~1378.tmp deleted successfully.
C:\Windows\Temp\~1382.tmp deleted successfully.
C:\Windows\Temp\~1383.tmp deleted successfully.
C:\Windows\Temp\~1384.tmp deleted successfully.
C:\Windows\Temp\~1385.tmp deleted successfully.
C:\Windows\Temp\~1386.tmp deleted successfully.
C:\Windows\Temp\~1387.tmp deleted successfully.
C:\Windows\Temp\~1388.tmp deleted successfully.
C:\Windows\Temp\~1389.tmp deleted successfully.
C:\Windows\Temp\~138A.tmp deleted successfully.
C:\Windows\Temp\~138B.tmp deleted successfully.
C:\Windows\Temp\~138C.tmp deleted successfully.
C:\Windows\Temp\~138D.tmp deleted successfully.
C:\Windows\Temp\~1392.tmp deleted successfully.
C:\Windows\Temp\~1393.tmp deleted successfully.
C:\Windows\Temp\~1394.tmp deleted successfully.
C:\Windows\Temp\~1395.tmp deleted successfully.
C:\Windows\Temp\~1396.tmp deleted successfully.
C:\Windows\Temp\~1397.tmp deleted successfully.
C:\Windows\Temp\~1398.tmp deleted successfully.
C:\Windows\Temp\~139B.tmp deleted successfully.
C:\Windows\Temp\~13A.tmp deleted successfully.
C:\Windows\Temp\~13A1.tmp deleted successfully.
C:\Windows\Temp\~13A2.tmp deleted successfully.
C:\Windows\Temp\~13A3.tmp deleted successfully.
C:\Windows\Temp\~13A4.tmp deleted successfully.
C:\Windows\Temp\~13B.tmp deleted successfully.
C:\Windows\Temp\~13B1.tmp deleted successfully.
C:\Windows\Temp\~13B2.tmp deleted successfully.
C:\Windows\Temp\~13B3.tmp deleted successfully.
C:\Windows\Temp\~13B4.tmp deleted successfully.
C:\Windows\Temp\~13B5.tmp deleted successfully.
C:\Windows\Temp\~13B6.tmp deleted successfully.
C:\Windows\Temp\~13B7.tmp deleted successfully.
C:\Windows\Temp\~13BC.tmp deleted successfully.
C:\Windows\Temp\~13BE.tmp deleted successfully.
C:\Windows\Temp\~13C0.tmp deleted successfully.
C:\Windows\Temp\~13C1.tmp deleted successfully.
C:\Windows\Temp\~13C2.tmp deleted successfully.
C:\Windows\Temp\~13C3.tmp deleted successfully.
C:\Windows\Temp\~13C4.tmp deleted successfully.
C:\Windows\Temp\~13D.tmp deleted successfully.
C:\Windows\Temp\~13D0.tmp deleted successfully.
C:\Windows\Temp\~13D1.tmp deleted successfully.
C:\Windows\Temp\~13D2.tmp deleted successfully.
C:\Windows\Temp\~13D3.tmp deleted successfully.
C:\Windows\Temp\~13D4.tmp deleted successfully.
C:\Windows\Temp\~13D5.tmp deleted successfully.
C:\Windows\Temp\~13D6.tmp deleted successfully.
C:\Windows\Temp\~13D7.tmp deleted successfully.
C:\Windows\Temp\~13D8.tmp deleted successfully.
C:\Windows\Temp\~13D9.tmp deleted successfully.
C:\Windows\Temp\~13DF.tmp deleted successfully.
C:\Windows\Temp\~13E.tmp deleted successfully.
C:\Windows\Temp\~13E0.tmp deleted successfully.
C:\Windows\Temp\~13E1.tmp deleted successfully.
C:\Windows\Temp\~13E2.tmp deleted successfully.
C:\Windows\Temp\~13E3.tmp deleted successfully.
C:\Windows\Temp\~13E4.tmp deleted successfully.
C:\Windows\Temp\~13E5.tmp deleted successfully.
C:\Windows\Temp\~13E6.tmp deleted successfully.
C:\Windows\Temp\~13E7.tmp deleted successfully.
C:\Windows\Temp\~13E8.tmp deleted successfully.
C:\Windows\Temp\~13E9.tmp deleted successfully.
C:\Windows\Temp\~13EA.tmp deleted successfully.
C:\Windows\Temp\~13EF.tmp deleted successfully.
C:\Windows\Temp\~13F0.tmp deleted successfully.
C:\Windows\Temp\~13F1.tmp deleted successfully.
C:\Windows\Temp\~13F2.tmp deleted successfully.
C:\Windows\Temp\~13F3.tmp deleted successfully.
C:\Windows\Temp\~13F4.tmp deleted successfully.
C:\Windows\Temp\~14.tmp deleted successfully.
C:\Windows\Temp\~1400.tmp deleted successfully.
C:\Windows\Temp\~1401.tmp deleted successfully.
C:\Windows\Temp\~1405.tmp deleted successfully.
C:\Windows\Temp\~140F.tmp deleted successfully.
C:\Windows\Temp\~1411.tmp deleted successfully.
C:\Windows\Temp\~1412.tmp deleted successfully.
C:\Windows\Temp\~1413.tmp deleted successfully.
C:\Windows\Temp\~1414.tmp deleted successfully.
C:\Windows\Temp\~1415.tmp deleted successfully.
C:\Windows\Temp\~1417.tmp deleted successfully.
C:\Windows\Temp\~141E.tmp deleted successfully.
C:\Windows\Temp\~141F.tmp deleted successfully.
C:\Windows\Temp\~1420.tmp deleted successfully.
C:\Windows\Temp\~1421.tmp deleted successfully.
C:\Windows\Temp\~1425.tmp deleted successfully.
C:\Windows\Temp\~1429.tmp deleted successfully.
C:\Windows\Temp\~142E.tmp deleted successfully.
C:\Windows\Temp\~142F.tmp deleted successfully.
C:\Windows\Temp\~143.tmp deleted successfully.
C:\Windows\Temp\~1430.tmp deleted successfully.
C:\Windows\Temp\~1431.tmp deleted successfully.
C:\Windows\Temp\~1432.tmp deleted successfully.
C:\Windows\Temp\~1433.tmp deleted successfully.
C:\Windows\Temp\~1434.tmp deleted successfully.
C:\Windows\Temp\~1435.tmp deleted successfully.
C:\Windows\Temp\~1436.tmp deleted successfully.
C:\Windows\Temp\~1443.tmp deleted successfully.
C:\Windows\Temp\~1445.tmp deleted successfully.
C:\Windows\Temp\~144D.tmp deleted successfully.
C:\Windows\Temp\~144E.tmp deleted successfully.
C:\Windows\Temp\~144F.tmp deleted successfully.
C:\Windows\Temp\~1450.tmp deleted successfully.
C:\Windows\Temp\~1451.tmp deleted successfully.
C:\Windows\Temp\~1452.tmp deleted successfully.
C:\Windows\Temp\~1453.tmp deleted successfully.
C:\Windows\Temp\~145D.tmp deleted successfully.
C:\Windows\Temp\~145E.tmp deleted successfully.
C:\Windows\Temp\~145F.tmp deleted successfully.
C:\Windows\Temp\~1462.tmp deleted successfully.
C:\Windows\Temp\~1464.tmp deleted successfully.
C:\Windows\Temp\~146A.tmp deleted successfully.
C:\Windows\Temp\~146C.tmp deleted successfully.
C:\Windows\Temp\~146D.tmp deleted successfully.
C:\Windows\Temp\~146E.tmp deleted successfully.
C:\Windows\Temp\~146F.tmp deleted successfully.
C:\Windows\Temp\~1470.tmp deleted successfully.
C:\Windows\Temp\~1471.tmp deleted successfully.
C:\Windows\Temp\~147B.tmp deleted successfully.
C:\Windows\Temp\~147C.tmp deleted successfully.
C:\Windows\Temp\~147D.tmp deleted successfully.
C:\Windows\Temp\~147E.tmp deleted successfully.
C:\Windows\Temp\~147F.tmp deleted successfully.
C:\Windows\Temp\~1480.tmp deleted successfully.
C:\Windows\Temp\~1484.tmp deleted successfully.
C:\Windows\Temp\~148B.tmp deleted successfully.
C:\Windows\Temp\~148C.tmp deleted successfully.
C:\Windows\Temp\~148D.tmp deleted successfully.
C:\Windows\Temp\~148E.tmp deleted successfully.
C:\Windows\Temp\~148F.tmp deleted successfully.
C:\Windows\Temp\~149.tmp deleted successfully.
C:\Windows\Temp\~1490.tmp deleted successfully.
C:\Windows\Temp\~1491.tmp deleted successfully.
C:\Windows\Temp\~1492.tmp deleted successfully.
C:\Windows\Temp\~1493.tmp deleted successfully.
C:\Windows\Temp\~149B.tmp deleted successfully.
C:\Windows\Temp\~149C.tmp deleted successfully.
C:\Windows\Temp\~149D.tmp deleted successfully.
C:\Windows\Temp\~14A.tmp deleted successfully.
C:\Windows\Temp\~14A2.tmp deleted successfully.
C:\Windows\Temp\~14A4.tmp deleted successfully.
C:\Windows\Temp\~14AB.tmp deleted successfully.
C:\Windows\Temp\~14AC.tmp deleted successfully.
C:\Windows\Temp\~14AD.tmp deleted successfully.
C:\Windows\Temp\~14AE.tmp deleted successfully.
C:\Windows\Temp\~14B.tmp deleted successfully.
C:\Windows\Temp\~14B1.tmp deleted successfully.
C:\Windows\Temp\~14BA.tmp deleted successfully.
C:\Windows\Temp\~14BB.tmp deleted successfully.
C:\Windows\Temp\~14BC.tmp deleted successfully.
C:\Windows\Temp\~14BD.tmp deleted successfully.
C:\Windows\Temp\~14BE.tmp deleted successfully.
C:\Windows\Temp\~14C.tmp deleted successfully.
C:\Windows\Temp\~14C2.tmp deleted successfully.
C:\Windows\Temp\~14C3.tmp deleted successfully.
C:\Windows\Temp\~14C7.tmp deleted successfully.
C:\Windows\Temp\~14C8.tmp deleted successfully.
C:\Windows\Temp\~14CC.tmp deleted successfully.
C:\Windows\Temp\~14CD.tmp deleted successfully.
C:\Windows\Temp\~14D.tmp deleted successfully.
C:\Windows\Temp\~14D0.tmp deleted successfully.
C:\Windows\Temp\~14D3.tmp deleted successfully.
C:\Windows\Temp\~14D8.tmp deleted successfully.
C:\Windows\Temp\~14D9.tmp deleted successfully.
C:\Windows\Temp\~14DA.tmp deleted successfully.
C:\Windows\Temp\~14DB.tmp deleted successfully.
C:\Windows\Temp\~14DE.tmp deleted successfully.
C:\Windows\Temp\~14E.tmp deleted successfully.
C:\Windows\Temp\~14E9.tmp deleted successfully.
C:\Windows\Temp\~14EA.tmp deleted successfully.
C:\Windows\Temp\~14EB.tmp deleted successfully.
C:\Windows\Temp\~14EC.tmp deleted successfully.
C:\Windows\Temp\~14ED.tmp deleted successfully.
C:\Windows\Temp\~14EE.tmp deleted successfully.
C:\Windows\Temp\~14EF.tmp deleted successfully.
C:\Windows\Temp\~14F0.tmp deleted successfully.
C:\Windows\Temp\~14F1.tmp deleted successfully.
C:\Windows\Temp\~14F8.tmp deleted successfully.
C:\Windows\Temp\~14F9.tmp deleted successfully.
C:\Windows\Temp\~14FA.tmp deleted successfully.
C:\Windows\Temp\~14FB.tmp deleted successfully.
C:\Windows\Temp\~14FC.tmp deleted successfully.
C:\Windows\Temp\~14FD.tmp deleted successfully.
C:\Windows\Temp\~14FE.tmp deleted successfully.
C:\Windows\Temp\~14FF.tmp deleted successfully.
C:\Windows\Temp\~15.tmp deleted successfully.
C:\Windows\Temp\~150A.tmp deleted successfully.
C:\Windows\Temp\~150B.tmp deleted successfully.
C:\Windows\Temp\~150C.tmp deleted successfully.
C:\Windows\Temp\~150D.tmp deleted successfully.
C:\Windows\Temp\~150E.tmp deleted successfully.
C:\Windows\Temp\~1518.tmp deleted successfully.
C:\Windows\Temp\~1519.tmp deleted successfully.
C:\Windows\Temp\~151A.tmp deleted successfully.
C:\Windows\Temp\~151B.tmp deleted successfully.
C:\Windows\Temp\~151C.tmp deleted successfully.
C:\Windows\Temp\~151D.tmp deleted successfully.
C:\Windows\Temp\~151E.tmp deleted successfully.
C:\Windows\Temp\~1527.tmp deleted successfully.
C:\Windows\Temp\~1528.tmp deleted successfully.
C:\Windows\Temp\~1529.tmp deleted successfully.
C:\Windows\Temp\~152A.tmp deleted successfully.
C:\Windows\Temp\~152B.tmp deleted successfully.
C:\Windows\Temp\~152C.tmp deleted successfully.
C:\Windows\Temp\~1537.tmp deleted successfully.
C:\Windows\Temp\~1538.tmp deleted successfully.
C:\Windows\Temp\~1539.tmp deleted successfully.
C:\Windows\Temp\~153F.tmp deleted successfully.
C:\Windows\Temp\~1546.tmp deleted successfully.
C:\Windows\Temp\~1547.tmp deleted successfully.
C:\Windows\Temp\~1548.tmp deleted successfully.
C:\Windows\Temp\~1549.tmp deleted successfully.
C:\Windows\Temp\~154A.tmp deleted successfully.
C:\Windows\Temp\~154D.tmp deleted successfully.
C:\Windows\Temp\~154F.tmp deleted successfully.
C:\Windows\Temp\~1556.tmp deleted successfully.
C:\Windows\Temp\~1557.tmp deleted successfully.
C:\Windows\Temp\~1558.tmp deleted successfully.
C:\Windows\Temp\~1559.tmp deleted successfully.
C:\Windows\Temp\~155A.tmp deleted successfully.
C:\Windows\Temp\~1560.tmp deleted successfully.
C:\Windows\Temp\~1565.tmp deleted successfully.
C:\Windows\Temp\~1566.tmp deleted successfully.
C:\Windows\Temp\~1567.tmp deleted successfully.
C:\Windows\Temp\~1568.tmp deleted successfully.
C:\Windows\Temp\~1569.tmp deleted successfully.
C:\Windows\Temp\~156A.tmp deleted successfully.
C:\Windows\Temp\~156B.tmp deleted successfully.
C:\Windows\Temp\~156C.tmp deleted successfully.
C:\Windows\Temp\~1575.tmp deleted successfully.
C:\Windows\Temp\~1578.tmp deleted successfully.
C:\Windows\Temp\~1584.tmp deleted successfully.
C:\Windows\Temp\~1585.tmp deleted successfully.
C:\Windows\Temp\~1586.tmp deleted successfully.
C:\Windows\Temp\~1587.tmp deleted successfully.
C:\Windows\Temp\~158A.tmp deleted successfully.
C:\Windows\Temp\~159.tmp deleted successfully.
C:\Windows\Temp\~1594.tmp deleted successfully.
C:\Windows\Temp\~1595.tmp deleted successfully.
C:\Windows\Temp\~1596.tmp deleted successfully.
C:\Windows\Temp\~1597.tmp deleted successfully.
C:\Windows\Temp\~1598.tmp deleted successfully.
C:\Windows\Temp\~1599.tmp deleted successfully.
C:\Windows\Temp\~159B.tmp deleted successfully.
C:\Windows\Temp\~159E.tmp deleted successfully.
C:\Windows\Temp\~15A4.tmp deleted successfully.
C:\Windows\Temp\~15A5.tmp deleted successfully.
C:\Windows\Temp\~15A6.tmp deleted successfully.
C:\Windows\Temp\~15A7.tmp deleted successfully.
C:\Windows\Temp\~15A8.tmp deleted successfully.
C:\Windows\Temp\~15A9.tmp deleted successfully.
C:\Windows\Temp\~15AA.tmp deleted successfully.
C:\Windows\Temp\~15B4.tmp deleted successfully.
C:\Windows\Temp\~15B7.tmp deleted successfully.
C:\Windows\Temp\~15B8.tmp deleted successfully.
C:\Windows\Temp\~15B9.tmp deleted successfully.
C:\Windows\Temp\~15BD.tmp deleted successfully.
C:\Windows\Temp\~15C.tmp deleted successfully.
C:\Windows\Temp\~15C3.tmp deleted successfully.
C:\Windows\Temp\~15C4.tmp deleted successfully.
C:\Windows\Temp\~15C5.tmp deleted successfully.
C:\Windows\Temp\~15C6.tmp deleted successfully.
C:\Windows\Temp\~15C7.tmp deleted successfully.
C:\Windows\Temp\~15CA.tmp deleted successfully.
C:\Windows\Temp\~15D2.tmp deleted successfully.
C:\Windows\Temp\~15D3.tmp deleted successfully.
C:\Windows\Temp\~15D4.tmp deleted successfully.
C:\Windows\Temp\~15D5.tmp deleted successfully.
C:\Windows\Temp\~15D6.tmp deleted successfully.
C:\Windows\Temp\~15D7.tmp deleted successfully.
C:\Windows\Temp\~15E.tmp deleted successfully.
C:\Windows\Temp\~15E2.tmp deleted successfully.
C:\Windows\Temp\~15E3.tmp deleted successfully.
C:\Windows\Temp\~15E4.tmp deleted successfully.
C:\Windows\Temp\~15E5.tmp deleted successfully.
C:\Windows\Temp\~15E6.tmp deleted successfully.
C:\Windows\Temp\~15E7.tmp deleted successfully.
C:\Windows\Temp\~15E8.tmp deleted successfully.
C:\Windows\Temp\~15E9.tmp deleted successfully.
C:\Windows\Temp\~15EA.tmp deleted successfully.
C:\Windows\Temp\~15EB.tmp deleted successfully.
C:\Windows\Temp\~15EC.tmp deleted successfully.
C:\Windows\Temp\~15EE.tmp deleted successfully.
C:\Windows\Temp\~15F2.tmp deleted successfully.
C:\Windows\Temp\~15F3.tmp deleted successfully.
C:\Windows\Temp\~15F4.tmp deleted successfully.
C:\Windows\Temp\~15F5.tmp deleted successfully.
C:\Windows\Temp\~15F6.tmp deleted successfully.
C:\Windows\Temp\~15F7.tmp deleted successfully.
C:\Windows\Temp\~15F8.tmp deleted successfully.
C:\Windows\Temp\~15FB.tmp deleted successfully.
C:\Windows\Temp\~16.tmp deleted successfully.
C:\Windows\Temp\~1601.tmp deleted successfully.
C:\Windows\Temp\~1602.tmp deleted successfully.
C:\Windows\Temp\~1603.tmp deleted successfully.
C:\Windows\Temp\~1604.tmp deleted successfully.
C:\Windows\Temp\~1606.tmp deleted successfully.
C:\Windows\Temp\~1608.tmp deleted successfully.
C:\Windows\Temp\~160E.tmp deleted successfully.
C:\Windows\Temp\~161.tmp deleted successfully.
C:\Windows\Temp\~1611.tmp deleted successfully.
C:\Windows\Temp\~1612.tmp deleted successfully.
C:\Windows\Temp\~1613.tmp deleted successfully.
C:\Windows\Temp\~1614.tmp deleted successfully.
C:\Windows\Temp\~1615.tmp deleted successfully.
C:\Windows\Temp\~1616.tmp deleted successfully.
C:\Windows\Temp\~1617.tmp deleted successfully.
C:\Windows\Temp\~1618.tmp deleted successfully.
C:\Windows\Temp\~1619.tmp deleted successfully.
C:\Windows\Temp\~161A.tmp deleted successfully.
C:\Windows\Temp\~161B.tmp deleted successfully.
C:\Windows\Temp\~1621.tmp deleted successfully.
C:\Windows\Temp\~1622.tmp deleted successfully.
C:\Windows\Temp\~1623.tmp deleted successfully.
C:\Windows\Temp\~1624.tmp deleted successfully.
C:\Windows\Temp\~1625.tmp deleted successfully.
C:\Windows\Temp\~1629.tmp deleted successfully.
C:\Windows\Temp\~1630.tmp deleted successfully.
C:\Windows\Temp\~1632.tmp deleted successfully.
C:\Windows\Temp\~1633.tmp deleted successfully.
C:\Windows\Temp\~1638.tmp deleted successfully.
C:\Windows\Temp\~1640.tmp deleted successfully.
C:\Windows\Temp\~1641.tmp deleted successfully.
C:\Windows\Temp\~1642.tmp deleted successfully.
C:\Windows\Temp\~1643.tmp deleted successfully.
C:\Windows\Temp\~1644.tmp deleted successfully.
C:\Windows\Temp\~1645.tmp deleted successfully.
C:\Windows\Temp\~1646.tmp deleted successfully.
C:\Windows\Temp\~1647.tmp deleted successfully.
C:\Windows\Temp\~1648.tmp deleted successfully.
C:\Windows\Temp\~164F.tmp deleted successfully.
C:\Windows\Temp\~1650.tmp deleted successfully.
C:\Windows\Temp\~1651.tmp deleted successfully.
C:\Windows\Temp\~1652.tmp deleted successfully.
C:\Windows\Temp\~1653.tmp deleted successfully.
C:\Windows\Temp\~1654.tmp deleted successfully.
C:\Windows\Temp\~1655.tmp deleted successfully.
C:\Windows\Temp\~165F.tmp deleted successfully.
C:\Windows\Temp\~1660.tmp deleted successfully.
C:\Windows\Temp\~1661.tmp deleted successfully.
C:\Windows\Temp\~1662.tmp deleted successfully.
C:\Windows\Temp\~1663.tmp deleted successfully.
C:\Windows\Temp\~1664.tmp deleted successfully.
C:\Windows\Temp\~166B.tmp deleted successfully.
C:\Windows\Temp\~166F.tmp deleted successfully.
C:\Windows\Temp\~1670.tmp deleted successfully.
C:\Windows\Temp\~1671.tmp deleted successfully.
C:\Windows\Temp\~1672.tmp deleted successfully.
C:\Windows\Temp\~1673.tmp deleted successfully.
C:\Windows\Temp\~1674.tmp deleted successfully.
C:\Windows\Temp\~1675.tmp deleted successfully.
C:\Windows\Temp\~1676.tmp deleted successfully.
C:\Windows\Temp\~1677.tmp deleted successfully.
C:\Windows\Temp\~168.tmp deleted successfully.
C:\Windows\Temp\~1680.tmp deleted successfully.
C:\Windows\Temp\~1681.tmp deleted successfully.
C:\Windows\Temp\~1682.tmp deleted successfully.
C:\Windows\Temp\~1683.tmp deleted successfully.
C:\Windows\Temp\~1685.tmp deleted successfully.
C:\Windows\Temp\~168E.tmp deleted successfully.
C:\Windows\Temp\~168F.tmp deleted successfully.
C:\Windows\Temp\~1690.tmp deleted successfully.
C:\Windows\Temp\~1691.tmp deleted successfully.
C:\Windows\Temp\~1692.tmp deleted successfully.
C:\Windows\Temp\~1693.tmp deleted successfully.
C:\Windows\Temp\~1694.tmp deleted successfully.
C:\Windows\Temp\~1695.tmp deleted successfully.
C:\Windows\Temp\~1696.tmp deleted successfully.
C:\Windows\Temp\~169F.tmp deleted successfully.
C:\Windows\Temp\~16A.tmp deleted successfully.
C:\Windows\Temp\~16A1.tmp deleted successfully.
C:\Windows\Temp\~16A2.tmp deleted successfully.
C:\Windows\Temp\~16A4.tmp deleted successfully.
C:\Windows\Temp\~16AD.tmp deleted successfully.
C:\Windows\Temp\~16AE.tmp deleted successfully.
C:\Windows\Temp\~16AF.tmp deleted successfully.
C:\Windows\Temp\~16B.tmp deleted successfully.
C:\Windows\Temp\~16B0.tmp deleted successfully.
C:\Windows\Temp\~16B1.tmp deleted successfully.
C:\Windows\Temp\~16B3.tmp deleted successfully.
C:\Windows\Temp\~16B5.tmp deleted successfully.
C:\Windows\Temp\~16BD.tmp deleted successfully.
C:\Windows\Temp\~16BE.tmp deleted successfully.
C:\Windows\Temp\~16BF.tmp deleted successfully.
C:\Windows\Temp\~16C0.tmp deleted successfully.
C:\Windows\Temp\~16C2.tmp deleted successfully.
C:\Windows\Temp\~16C3.tmp deleted successfully.
C:\Windows\Temp\~16CC.tmp deleted successfully.
C:\Windows\Temp\~16CD.tmp deleted successfully.
C:\Windows\Temp\~16CE.tmp deleted successfully.
C:\Windows\Temp\~16CF.tmp deleted successfully.
C:\Windows\Temp\~16D0.tmp deleted successfully.
C:\Windows\Temp\~16D2.tmp deleted successfully.
C:\Windows\Temp\~16D9.tmp deleted successfully.
C:\Windows\Temp\~16DC.tmp deleted successfully.
C:\Windows\Temp\~16DD.tmp deleted successfully.
C:\Windows\Temp\~16DE.tmp deleted successfully.
C:\Windows\Temp\~16DF.tmp deleted successfully.
C:\Windows\Temp\~16E0.tmp deleted successfully.
C:\Windows\Temp\~16E1.tmp deleted successfully.
C:\Windows\Temp\~16E3.tmp deleted successfully.
C:\Windows\Temp\~16EC.tmp deleted successfully.
C:\Windows\Temp\~16ED.tmp deleted successfully.
C:\Windows\Temp\~16EE.tmp deleted successfully.
C:\Windows\Temp\~16EF.tmp deleted successfully.
C:\Windows\Temp\~16F9.tmp deleted successfully.
C:\Windows\Temp\~16FB.tmp deleted successfully.
C:\Windows\Temp\~16FC.tmp deleted successfully.
C:\Windows\Temp\~16FD.tmp deleted successfully.
C:\Windows\Temp\~16FE.tmp deleted successfully.
C:\Windows\Temp\~16FF.tmp deleted successfully.
C:\Windows\Temp\~17.tmp deleted successfully.
C:\Windows\Temp\~170.tmp deleted successfully.
C:\Windows\Temp\~1700.tmp deleted successfully.
C:\Windows\Temp\~1701.tmp deleted successfully.
C:\Windows\Temp\~1702.tmp deleted successfully.
C:\Windows\Temp\~1703.tmp deleted successfully.
C:\Windows\Temp\~1704.tmp deleted successfully.
C:\Windows\Temp\~1706.tmp deleted successfully.
C:\Windows\Temp\~170B.tmp deleted successfully.
C:\Windows\Temp\~170C.tmp deleted successfully.
C:\Windows\Temp\~170D.tmp deleted successfully.
C:\Windows\Temp\~170E.tmp deleted successfully.
C:\Windows\Temp\~170F.tmp deleted successfully.
C:\Windows\Temp\~1710.tmp deleted successfully.
C:\Windows\Temp\~1711.tmp deleted successfully.
C:\Windows\Temp\~1713.tmp deleted successfully.
C:\Windows\Temp\~171C.tmp deleted successfully.
C:\Windows\Temp\~171D.tmp deleted successfully.
C:\Windows\Temp\~1721.tmp deleted successfully.
C:\Windows\Temp\~173.tmp deleted successfully.
C:\Windows\Temp\~1739.tmp deleted successfully.
C:\Windows\Temp\~173A.tmp deleted successfully.
C:\Windows\Temp\~173B.tmp deleted successfully.
C:\Windows\Temp\~173C.tmp deleted successfully.
C:\Windows\Temp\~173D.tmp deleted successfully.
C:\Windows\Temp\~173E.tmp deleted successfully.
C:\Windows\Temp\~173F.tmp deleted successfully.
C:\Windows\Temp\~174.tmp deleted successfully.
C:\Windows\Temp\~1740.tmp deleted successfully.
C:\Windows\Temp\~1741.tmp deleted successfully.
C:\Windows\Temp\~1749.tmp deleted successfully.
C:\Windows\Temp\~174A.tmp deleted successfully.
C:\Windows\Temp\~174B.tmp deleted successfully.
C:\Windows\Temp\~174D.tmp deleted successfully.
C:\Windows\Temp\~1751.tmp deleted successfully.
C:\Windows\Temp\~1752.tmp deleted successfully.
C:\Windows\Temp\~1755.tmp deleted successfully.
C:\Windows\Temp\~1759.tmp deleted successfully.
C:\Windows\Temp\~175A.tmp deleted successfully.
C:\Windows\Temp\~175B.tmp deleted successfully.
C:\Windows\Temp\~175C.tmp deleted successfully.

[stacik]

C:\Windows\Temp\~175D.tmp deleted successfully.
C:\Windows\Temp\~175E.tmp deleted successfully.
C:\Windows\Temp\~175F.tmp deleted successfully.
C:\Windows\Temp\~1768.tmp deleted successfully.
C:\Windows\Temp\~1769.tmp deleted successfully.
C:\Windows\Temp\~176A.tmp deleted successfully.
C:\Windows\Temp\~176B.tmp deleted successfully.
C:\Windows\Temp\~176C.tmp deleted successfully.
C:\Windows\Temp\~176D.tmp deleted successfully.
C:\Windows\Temp\~176E.tmp deleted successfully.
C:\Windows\Temp\~176F.tmp deleted successfully.
C:\Windows\Temp\~1770.tmp deleted successfully.
C:\Windows\Temp\~1771.tmp deleted successfully.
C:\Windows\Temp\~1772.tmp deleted successfully.
C:\Windows\Temp\~1778.tmp deleted successfully.
C:\Windows\Temp\~1779.tmp deleted successfully.
C:\Windows\Temp\~177A.tmp deleted successfully.
C:\Windows\Temp\~177B.tmp deleted successfully.
C:\Windows\Temp\~177C.tmp deleted successfully.
C:\Windows\Temp\~177D.tmp deleted successfully.
C:\Windows\Temp\~177E.tmp deleted successfully.
C:\Windows\Temp\~177F.tmp deleted successfully.
C:\Windows\Temp\~1780.tmp deleted successfully.
C:\Windows\Temp\~1787.tmp deleted successfully.
C:\Windows\Temp\~1788.tmp deleted successfully.
C:\Windows\Temp\~1789.tmp deleted successfully.
C:\Windows\Temp\~178A.tmp deleted successfully.
C:\Windows\Temp\~178B.tmp deleted successfully.
C:\Windows\Temp\~178C.tmp deleted successfully.
C:\Windows\Temp\~178F.tmp deleted successfully.
C:\Windows\Temp\~1790.tmp deleted successfully.
C:\Windows\Temp\~1797.tmp deleted successfully.
C:\Windows\Temp\~1798.tmp deleted successfully.
C:\Windows\Temp\~1799.tmp deleted successfully.
C:\Windows\Temp\~179A.tmp deleted successfully.
C:\Windows\Temp\~179B.tmp deleted successfully.
C:\Windows\Temp\~179C.tmp deleted successfully.
C:\Windows\Temp\~179D.tmp deleted successfully.
C:\Windows\Temp\~179E.tmp deleted successfully.
C:\Windows\Temp\~17A.tmp deleted successfully.
C:\Windows\Temp\~17A6.tmp deleted successfully.
C:\Windows\Temp\~17A7.tmp deleted successfully.
C:\Windows\Temp\~17A8.tmp deleted successfully.
C:\Windows\Temp\~17A9.tmp deleted successfully.
C:\Windows\Temp\~17AA.tmp deleted successfully.
C:\Windows\Temp\~17AB.tmp deleted successfully.
C:\Windows\Temp\~17B.tmp deleted successfully.
C:\Windows\Temp\~17B3.tmp deleted successfully.
C:\Windows\Temp\~17B6.tmp deleted successfully.
C:\Windows\Temp\~17B7.tmp deleted successfully.
C:\Windows\Temp\~17B8.tmp deleted successfully.
C:\Windows\Temp\~17B9.tmp deleted successfully.
C:\Windows\Temp\~17BA.tmp deleted successfully.
C:\Windows\Temp\~17BB.tmp deleted successfully.
C:\Windows\Temp\~17BC.tmp deleted successfully.
C:\Windows\Temp\~17C.tmp deleted successfully.
C:\Windows\Temp\~17C6.tmp deleted successfully.
C:\Windows\Temp\~17C7.tmp deleted successfully.
C:\Windows\Temp\~17CC.tmp deleted successfully.
C:\Windows\Temp\~17CD.tmp deleted successfully.
C:\Windows\Temp\~17D.tmp deleted successfully.
C:\Windows\Temp\~17D6.tmp deleted successfully.
C:\Windows\Temp\~17D7.tmp deleted successfully.
C:\Windows\Temp\~17D8.tmp deleted successfully.
C:\Windows\Temp\~17D9.tmp deleted successfully.
C:\Windows\Temp\~17DA.tmp deleted successfully.
C:\Windows\Temp\~17DB.tmp deleted successfully.
C:\Windows\Temp\~17DC.tmp deleted successfully.
C:\Windows\Temp\~17DE.tmp deleted successfully.
C:\Windows\Temp\~17DF.tmp deleted successfully.
C:\Windows\Temp\~17E0.tmp deleted successfully.
C:\Windows\Temp\~17E9.tmp deleted successfully.
C:\Windows\Temp\~17EA.tmp deleted successfully.
C:\Windows\Temp\~17F.tmp deleted successfully.
C:\Windows\Temp\~17F1.tmp deleted successfully.
C:\Windows\Temp\~17F5.tmp deleted successfully.
C:\Windows\Temp\~17FA.tmp deleted successfully.
C:\Windows\Temp\~17FB.tmp deleted successfully.
C:\Windows\Temp\~17FC.tmp deleted successfully.
C:\Windows\Temp\~18.tmp deleted successfully.
C:\Windows\Temp\~180.tmp deleted successfully.
C:\Windows\Temp\~1804.tmp deleted successfully.
C:\Windows\Temp\~1805.tmp deleted successfully.
C:\Windows\Temp\~1806.tmp deleted successfully.
C:\Windows\Temp\~1807.tmp deleted successfully.
C:\Windows\Temp\~1808.tmp deleted successfully.
C:\Windows\Temp\~1809.tmp deleted successfully.
C:\Windows\Temp\~180A.tmp deleted successfully.
C:\Windows\Temp\~180B.tmp deleted successfully.
C:\Windows\Temp\~180C.tmp deleted successfully.
C:\Windows\Temp\~180D.tmp deleted successfully.
C:\Windows\Temp\~1814.tmp deleted successfully.
C:\Windows\Temp\~1815.tmp deleted successfully.
C:\Windows\Temp\~1816.tmp deleted successfully.
C:\Windows\Temp\~1817.tmp deleted successfully.
C:\Windows\Temp\~1818.tmp deleted successfully.
C:\Windows\Temp\~1819.tmp deleted successfully.
C:\Windows\Temp\~181A.tmp deleted successfully.
C:\Windows\Temp\~181B.tmp deleted successfully.
C:\Windows\Temp\~181C.tmp deleted successfully.
C:\Windows\Temp\~181D.tmp deleted successfully.
C:\Windows\Temp\~181E.tmp deleted successfully.
C:\Windows\Temp\~1823.tmp deleted successfully.
C:\Windows\Temp\~1828.tmp deleted successfully.
C:\Windows\Temp\~1829.tmp deleted successfully.
C:\Windows\Temp\~183.tmp deleted successfully.
C:\Windows\Temp\~1833.tmp deleted successfully.
C:\Windows\Temp\~1834.tmp deleted successfully.
C:\Windows\Temp\~1835.tmp deleted successfully.
C:\Windows\Temp\~1836.tmp deleted successfully.
C:\Windows\Temp\~1837.tmp deleted successfully.
C:\Windows\Temp\~1838.tmp deleted successfully.
C:\Windows\Temp\~1839.tmp deleted successfully.
C:\Windows\Temp\~1843.tmp deleted successfully.
C:\Windows\Temp\~1844.tmp deleted successfully.
C:\Windows\Temp\~1846.tmp deleted successfully.
C:\Windows\Temp\~1849.tmp deleted successfully.
C:\Windows\Temp\~1850.tmp deleted successfully.
C:\Windows\Temp\~1852.tmp deleted successfully.
C:\Windows\Temp\~1853.tmp deleted successfully.
C:\Windows\Temp\~1854.tmp deleted successfully.
C:\Windows\Temp\~1855.tmp deleted successfully.
C:\Windows\Temp\~1856.tmp deleted successfully.
C:\Windows\Temp\~1857.tmp deleted successfully.
C:\Windows\Temp\~1858.tmp deleted successfully.
C:\Windows\Temp\~1859.tmp deleted successfully.
C:\Windows\Temp\~185A.tmp deleted successfully.
C:\Windows\Temp\~185B.tmp deleted successfully.
C:\Windows\Temp\~1862.tmp deleted successfully.
C:\Windows\Temp\~1863.tmp deleted successfully.
C:\Windows\Temp\~1864.tmp deleted successfully.
C:\Windows\Temp\~1865.tmp deleted successfully.
C:\Windows\Temp\~1866.tmp deleted successfully.
C:\Windows\Temp\~1867.tmp deleted successfully.
C:\Windows\Temp\~1868.tmp deleted successfully.
C:\Windows\Temp\~1869.tmp deleted successfully.
C:\Windows\Temp\~186A.tmp deleted successfully.
C:\Windows\Temp\~186B.tmp deleted successfully.
C:\Windows\Temp\~186C.tmp deleted successfully.
C:\Windows\Temp\~186D.tmp deleted successfully.
C:\Windows\Temp\~1872.tmp deleted successfully.
C:\Windows\Temp\~1873.tmp deleted successfully.
C:\Windows\Temp\~1874.tmp deleted successfully.
C:\Windows\Temp\~1875.tmp deleted successfully.
C:\Windows\Temp\~1876.tmp deleted successfully.
C:\Windows\Temp\~1877.tmp deleted successfully.
C:\Windows\Temp\~1878.tmp deleted successfully.
C:\Windows\Temp\~1879.tmp deleted successfully.
C:\Windows\Temp\~187A.tmp deleted successfully.
C:\Windows\Temp\~187B.tmp deleted successfully.
C:\Windows\Temp\~187C.tmp deleted successfully.
C:\Windows\Temp\~187D.tmp deleted successfully.
C:\Windows\Temp\~187E.tmp deleted successfully.
C:\Windows\Temp\~188.tmp deleted successfully.
C:\Windows\Temp\~1881.tmp deleted successfully.
C:\Windows\Temp\~1882.tmp deleted successfully.
C:\Windows\Temp\~1883.tmp deleted successfully.
C:\Windows\Temp\~1889.tmp deleted successfully.
C:\Windows\Temp\~189.tmp deleted successfully.
C:\Windows\Temp\~1890.tmp deleted successfully.
C:\Windows\Temp\~1891.tmp deleted successfully.
C:\Windows\Temp\~1892.tmp deleted successfully.
C:\Windows\Temp\~1893.tmp deleted successfully.
C:\Windows\Temp\~1894.tmp deleted successfully.
C:\Windows\Temp\~1895.tmp deleted successfully.
C:\Windows\Temp\~1896.tmp deleted successfully.
C:\Windows\Temp\~1897.tmp deleted successfully.
C:\Windows\Temp\~1898.tmp deleted successfully.
C:\Windows\Temp\~18A2.tmp deleted successfully.
C:\Windows\Temp\~18A3.tmp deleted successfully.
C:\Windows\Temp\~18A4.tmp deleted successfully.
C:\Windows\Temp\~18A5.tmp deleted successfully.
C:\Windows\Temp\~18A9.tmp deleted successfully.
C:\Windows\Temp\~18AB.tmp deleted successfully.
C:\Windows\Temp\~18B0.tmp deleted successfully.
C:\Windows\Temp\~18B1.tmp deleted successfully.
C:\Windows\Temp\~18B5.tmp deleted successfully.
C:\Windows\Temp\~18B6.tmp deleted successfully.
C:\Windows\Temp\~18B7.tmp deleted successfully.
C:\Windows\Temp\~18B8.tmp deleted successfully.
C:\Windows\Temp\~18BB.tmp deleted successfully.
C:\Windows\Temp\~18BF.tmp deleted successfully.
C:\Windows\Temp\~18C0.tmp deleted successfully.
C:\Windows\Temp\~18C1.tmp deleted successfully.
C:\Windows\Temp\~18C2.tmp deleted successfully.
C:\Windows\Temp\~18C3.tmp deleted successfully.
C:\Windows\Temp\~18C4.tmp deleted successfully.
C:\Windows\Temp\~18C5.tmp deleted successfully.
C:\Windows\Temp\~18C9.tmp deleted successfully.
C:\Windows\Temp\~18CF.tmp deleted successfully.
C:\Windows\Temp\~18D.tmp deleted successfully.
C:\Windows\Temp\~18D0.tmp deleted successfully.
C:\Windows\Temp\~18D1.tmp deleted successfully.
C:\Windows\Temp\~18D2.tmp deleted successfully.
C:\Windows\Temp\~18D3.tmp deleted successfully.
C:\Windows\Temp\~18D4.tmp deleted successfully.
C:\Windows\Temp\~18D5.tmp deleted successfully.
C:\Windows\Temp\~18D6.tmp deleted successfully.
C:\Windows\Temp\~18D7.tmp deleted successfully.
C:\Windows\Temp\~18DF.tmp deleted successfully.
C:\Windows\Temp\~18E.tmp deleted successfully.
C:\Windows\Temp\~18E1.tmp deleted successfully.
C:\Windows\Temp\~18E3.tmp deleted successfully.
C:\Windows\Temp\~18E7.tmp deleted successfully.
C:\Windows\Temp\~18E8.tmp deleted successfully.
C:\Windows\Temp\~18EE.tmp deleted successfully.
C:\Windows\Temp\~18EF.tmp deleted successfully.
C:\Windows\Temp\~18F.tmp deleted successfully.
C:\Windows\Temp\~18F0.tmp deleted successfully.
C:\Windows\Temp\~18F1.tmp deleted successfully.
C:\Windows\Temp\~18F2.tmp deleted successfully.
C:\Windows\Temp\~18F4.tmp deleted successfully.
C:\Windows\Temp\~18F7.tmp deleted successfully.
C:\Windows\Temp\~18FF.tmp deleted successfully.
C:\Windows\Temp\~19.tmp deleted successfully.
C:\Windows\Temp\~190.tmp deleted successfully.
C:\Windows\Temp\~1900.tmp deleted successfully.
C:\Windows\Temp\~1904.tmp deleted successfully.
C:\Windows\Temp\~190D.tmp deleted successfully.
C:\Windows\Temp\~190E.tmp deleted successfully.
C:\Windows\Temp\~190F.tmp deleted successfully.
C:\Windows\Temp\~1910.tmp deleted successfully.
C:\Windows\Temp\~1911.tmp deleted successfully.
C:\Windows\Temp\~1912.tmp deleted successfully.
C:\Windows\Temp\~1913.tmp deleted successfully.
C:\Windows\Temp\~1914.tmp deleted successfully.
C:\Windows\Temp\~1915.tmp deleted successfully.
C:\Windows\Temp\~191D.tmp deleted successfully.
C:\Windows\Temp\~191E.tmp deleted successfully.
C:\Windows\Temp\~191F.tmp deleted successfully.
C:\Windows\Temp\~1920.tmp deleted successfully.
C:\Windows\Temp\~1921.tmp deleted successfully.
C:\Windows\Temp\~1922.tmp deleted successfully.
C:\Windows\Temp\~1923.tmp deleted successfully.
C:\Windows\Temp\~1927.tmp deleted successfully.
C:\Windows\Temp\~192D.tmp deleted successfully.
C:\Windows\Temp\~192E.tmp deleted successfully.
C:\Windows\Temp\~192F.tmp deleted successfully.
C:\Windows\Temp\~1930.tmp deleted successfully.
C:\Windows\Temp\~1931.tmp deleted successfully.
C:\Windows\Temp\~1932.tmp deleted successfully.
C:\Windows\Temp\~1933.tmp deleted successfully.
C:\Windows\Temp\~1934.tmp deleted successfully.
C:\Windows\Temp\~1935.tmp deleted successfully.
C:\Windows\Temp\~193C.tmp deleted successfully.
C:\Windows\Temp\~193D.tmp deleted successfully.
C:\Windows\Temp\~193E.tmp deleted successfully.
C:\Windows\Temp\~193F.tmp deleted successfully.
C:\Windows\Temp\~1940.tmp deleted successfully.
C:\Windows\Temp\~1941.tmp deleted successfully.
C:\Windows\Temp\~194C.tmp deleted successfully.
C:\Windows\Temp\~194D.tmp deleted successfully.
C:\Windows\Temp\~195D.tmp deleted successfully.
C:\Windows\Temp\~195F.tmp deleted successfully.
C:\Windows\Temp\~1961.tmp deleted successfully.
C:\Windows\Temp\~196B.tmp deleted successfully.
C:\Windows\Temp\~196C.tmp deleted successfully.
C:\Windows\Temp\~196D.tmp deleted successfully.
C:\Windows\Temp\~196E.tmp deleted successfully.
C:\Windows\Temp\~196F.tmp deleted successfully.
C:\Windows\Temp\~197.tmp deleted successfully.
C:\Windows\Temp\~1970.tmp deleted successfully.
C:\Windows\Temp\~1971.tmp deleted successfully.
C:\Windows\Temp\~1972.tmp deleted successfully.
C:\Windows\Temp\~1973.tmp deleted successfully.
C:\Windows\Temp\~1974.tmp deleted successfully.
C:\Windows\Temp\~1976.tmp deleted successfully.
C:\Windows\Temp\~197A.tmp deleted successfully.
C:\Windows\Temp\~197B.tmp deleted successfully.
C:\Windows\Temp\~197C.tmp deleted successfully.
C:\Windows\Temp\~197D.tmp deleted successfully.
C:\Windows\Temp\~197E.tmp deleted successfully.
C:\Windows\Temp\~197F.tmp deleted successfully.
C:\Windows\Temp\~198.tmp deleted successfully.
C:\Windows\Temp\~1980.tmp deleted successfully.
C:\Windows\Temp\~1981.tmp deleted successfully.
C:\Windows\Temp\~1983.tmp deleted successfully.
C:\Windows\Temp\~198A.tmp deleted successfully.
C:\Windows\Temp\~198B.tmp deleted successfully.
C:\Windows\Temp\~198C.tmp deleted successfully.
C:\Windows\Temp\~199.tmp deleted successfully.
C:\Windows\Temp\~1992.tmp deleted successfully.
C:\Windows\Temp\~1997.tmp deleted successfully.
C:\Windows\Temp\~199C.tmp deleted successfully.
C:\Windows\Temp\~199D.tmp deleted successfully.
C:\Windows\Temp\~199E.tmp deleted successfully.
C:\Windows\Temp\~199F.tmp deleted successfully.
C:\Windows\Temp\~19A0.tmp deleted successfully.
C:\Windows\Temp\~19AA.tmp deleted successfully.
C:\Windows\Temp\~19AD.tmp deleted successfully.
C:\Windows\Temp\~19B.tmp deleted successfully.
C:\Windows\Temp\~19B2.tmp deleted successfully.
C:\Windows\Temp\~19B9.tmp deleted successfully.
C:\Windows\Temp\~19BA.tmp deleted successfully.
C:\Windows\Temp\~19BB.tmp deleted successfully.
C:\Windows\Temp\~19BC.tmp deleted successfully.
C:\Windows\Temp\~19BD.tmp deleted successfully.
C:\Windows\Temp\~19BE.tmp deleted successfully.
C:\Windows\Temp\~19BF.tmp deleted successfully.
C:\Windows\Temp\~19C0.tmp deleted successfully.
C:\Windows\Temp\~19C1.tmp deleted successfully.
C:\Windows\Temp\~19C9.tmp deleted successfully.
C:\Windows\Temp\~19CA.tmp deleted successfully.
C:\Windows\Temp\~19CC.tmp deleted successfully.
C:\Windows\Temp\~19CD.tmp deleted successfully.
C:\Windows\Temp\~19CE.tmp deleted successfully.
C:\Windows\Temp\~19CF.tmp deleted successfully.
C:\Windows\Temp\~19D0.tmp deleted successfully.
C:\Windows\Temp\~19D1.tmp deleted successfully.
C:\Windows\Temp\~19D2.tmp deleted successfully.
C:\Windows\Temp\~19D3.tmp deleted successfully.
C:\Windows\Temp\~19D9.tmp deleted successfully.
C:\Windows\Temp\~19DA.tmp deleted successfully.
C:\Windows\Temp\~19DB.tmp deleted successfully.
C:\Windows\Temp\~19DC.tmp deleted successfully.
C:\Windows\Temp\~19DD.tmp deleted successfully.
C:\Windows\Temp\~19DE.tmp deleted successfully.
C:\Windows\Temp\~19E0.tmp deleted successfully.
C:\Windows\Temp\~19E5.tmp deleted successfully.
C:\Windows\Temp\~19E8.tmp deleted successfully.
C:\Windows\Temp\~19E9.tmp deleted successfully.
C:\Windows\Temp\~19EA.tmp deleted successfully.
C:\Windows\Temp\~19EC.tmp deleted successfully.
C:\Windows\Temp\~19EF.tmp deleted successfully.
C:\Windows\Temp\~19F0.tmp deleted successfully.
C:\Windows\Temp\~19F1.tmp deleted successfully.
C:\Windows\Temp\~19F7.tmp deleted successfully.
C:\Windows\Temp\~19F8.tmp deleted successfully.
C:\Windows\Temp\~19F9.tmp deleted successfully.
C:\Windows\Temp\~19FA.tmp deleted successfully.
C:\Windows\Temp\~19FB.tmp deleted successfully.
C:\Windows\Temp\~19FC.tmp deleted successfully.
C:\Windows\Temp\~19FD.tmp deleted successfully.
C:\Windows\Temp\~19FE.tmp deleted successfully.
C:\Windows\Temp\~19FF.tmp deleted successfully.
C:\Windows\Temp\~1A00.tmp deleted successfully.
C:\Windows\Temp\~1A07.tmp deleted successfully.
C:\Windows\Temp\~1A08.tmp deleted successfully.
C:\Windows\Temp\~1A09.tmp deleted successfully.
C:\Windows\Temp\~1A0D.tmp deleted successfully.
C:\Windows\Temp\~1A1.tmp deleted successfully.
C:\Windows\Temp\~1A17.tmp deleted successfully.
C:\Windows\Temp\~1A18.tmp deleted successfully.
C:\Windows\Temp\~1A19.tmp deleted successfully.
C:\Windows\Temp\~1A1A.tmp deleted successfully.
C:\Windows\Temp\~1A1B.tmp deleted successfully.
C:\Windows\Temp\~1A1C.tmp deleted successfully.
C:\Windows\Temp\~1A1D.tmp deleted successfully.
C:\Windows\Temp\~1A1F.tmp deleted successfully.
C:\Windows\Temp\~1A20.tmp deleted successfully.
C:\Windows\Temp\~1A2C.tmp deleted successfully.
C:\Windows\Temp\~1A2D.tmp deleted successfully.
C:\Windows\Temp\~1A31.tmp deleted successfully.
C:\Windows\Temp\~1A36.tmp deleted successfully.
C:\Windows\Temp\~1A37.tmp deleted successfully.
C:\Windows\Temp\~1A3A.tmp deleted successfully.
C:\Windows\Temp\~1A3B.tmp deleted successfully.
C:\Windows\Temp\~1A3C.tmp deleted successfully.
C:\Windows\Temp\~1A3E.tmp deleted successfully.
C:\Windows\Temp\~1A46.tmp deleted successfully.
C:\Windows\Temp\~1A47.tmp deleted successfully.
C:\Windows\Temp\~1A48.tmp deleted successfully.
C:\Windows\Temp\~1A49.tmp deleted successfully.
C:\Windows\Temp\~1A4A.tmp deleted successfully.
C:\Windows\Temp\~1A55.tmp deleted successfully.
C:\Windows\Temp\~1A56.tmp deleted successfully.
C:\Windows\Temp\~1A57.tmp deleted successfully.
C:\Windows\Temp\~1A58.tmp deleted successfully.
C:\Windows\Temp\~1A59.tmp deleted successfully.
C:\Windows\Temp\~1A5A.tmp deleted successfully.
C:\Windows\Temp\~1A5B.tmp deleted successfully.
C:\Windows\Temp\~1A5C.tmp deleted successfully.
C:\Windows\Temp\~1A5D.tmp deleted successfully.
C:\Windows\Temp\~1A5E.tmp deleted successfully.
C:\Windows\Temp\~1A5F.tmp deleted successfully.
C:\Windows\Temp\~1A6.tmp deleted successfully.
C:\Windows\Temp\~1A60.tmp deleted successfully.
C:\Windows\Temp\~1A65.tmp deleted successfully.
C:\Windows\Temp\~1A66.tmp deleted successfully.
C:\Windows\Temp\~1A67.tmp deleted successfully.
C:\Windows\Temp\~1A68.tmp deleted successfully.
C:\Windows\Temp\~1A69.tmp deleted successfully.
C:\Windows\Temp\~1A6A.tmp deleted successfully.
C:\Windows\Temp\~1A6B.tmp deleted successfully.
C:\Windows\Temp\~1A6D.tmp deleted successfully.
C:\Windows\Temp\~1A7.tmp deleted successfully.
C:\Windows\Temp\~1A74.tmp deleted successfully.
C:\Windows\Temp\~1A75.tmp deleted successfully.
C:\Windows\Temp\~1A76.tmp deleted successfully.
C:\Windows\Temp\~1A77.tmp deleted successfully.
C:\Windows\Temp\~1A78.tmp deleted successfully.
C:\Windows\Temp\~1A79.tmp deleted successfully.
C:\Windows\Temp\~1A7A.tmp deleted successfully.
C:\Windows\Temp\~1A7B.tmp deleted successfully.
C:\Windows\Temp\~1A8.tmp deleted successfully.
C:\Windows\Temp\~1A84.tmp deleted successfully.
C:\Windows\Temp\~1A89.tmp deleted successfully.
C:\Windows\Temp\~1A9.tmp deleted successfully.
C:\Windows\Temp\~1A94.tmp deleted successfully.
C:\Windows\Temp\~1A95.tmp deleted successfully.
C:\Windows\Temp\~1A96.tmp deleted successfully.
C:\Windows\Temp\~1A97.tmp deleted successfully.
C:\Windows\Temp\~1A98.tmp deleted successfully.
C:\Windows\Temp\~1A99.tmp deleted successfully.
C:\Windows\Temp\~1AA.tmp deleted successfully.
C:\Windows\Temp\~1AA4.tmp deleted successfully.
C:\Windows\Temp\~1AA5.tmp deleted successfully.
C:\Windows\Temp\~1AA6.tmp deleted successfully.
C:\Windows\Temp\~1AA7.tmp deleted successfully.
C:\Windows\Temp\~1AA8.tmp deleted successfully.
C:\Windows\Temp\~1AA9.tmp deleted successfully.
C:\Windows\Temp\~1AAC.tmp deleted successfully.
C:\Windows\Temp\~1AAD.tmp deleted successfully.
C:\Windows\Temp\~1AAE.tmp deleted successfully.
C:\Windows\Temp\~1AB.tmp deleted successfully.
C:\Windows\Temp\~1AB3.tmp deleted successfully.
C:\Windows\Temp\~1AB4.tmp deleted successfully.
C:\Windows\Temp\~1AB5.tmp deleted successfully.
C:\Windows\Temp\~1AB6.tmp deleted successfully.
C:\Windows\Temp\~1AB7.tmp deleted successfully.
C:\Windows\Temp\~1AB8.tmp deleted successfully.
C:\Windows\Temp\~1AB9.tmp deleted successfully.
C:\Windows\Temp\~1ABA.tmp deleted successfully.
C:\Windows\Temp\~1AC.tmp deleted successfully.
C:\Windows\Temp\~1AC2.tmp deleted successfully.
C:\Windows\Temp\~1AC3.tmp deleted successfully.
C:\Windows\Temp\~1AC4.tmp deleted successfully.
C:\Windows\Temp\~1AC5.tmp deleted successfully.
C:\Windows\Temp\~1AC7.tmp deleted successfully.
C:\Windows\Temp\~1AC8.tmp deleted successfully.
C:\Windows\Temp\~1AC9.tmp deleted successfully.
C:\Windows\Temp\~1ACE.tmp deleted successfully.
C:\Windows\Temp\~1AD.tmp deleted successfully.
C:\Windows\Temp\~1AD2.tmp deleted successfully.
C:\Windows\Temp\~1AD3.tmp deleted successfully.
C:\Windows\Temp\~1AD4.tmp deleted successfully.
C:\Windows\Temp\~1AD9.tmp deleted successfully.
C:\Windows\Temp\~1ADA.tmp deleted successfully.
C:\Windows\Temp\~1AE1.tmp deleted successfully.
C:\Windows\Temp\~1AE2.tmp deleted successfully.
C:\Windows\Temp\~1AE3.tmp deleted successfully.
C:\Windows\Temp\~1AE4.tmp deleted successfully.
C:\Windows\Temp\~1AE5.tmp deleted successfully.
C:\Windows\Temp\~1AE6.tmp deleted successfully.
C:\Windows\Temp\~1AE7.tmp deleted successfully.
C:\Windows\Temp\~1AE8.tmp deleted successfully.
C:\Windows\Temp\~1AF1.tmp deleted successfully.
C:\Windows\Temp\~1AF2.tmp deleted successfully.
C:\Windows\Temp\~1AF3.tmp deleted successfully.
C:\Windows\Temp\~1AF4.tmp deleted successfully.
C:\Windows\Temp\~1AF5.tmp deleted successfully.
C:\Windows\Temp\~1AF7.tmp deleted successfully.
C:\Windows\Temp\~1AF8.tmp deleted successfully.
C:\Windows\Temp\~1AF9.tmp deleted successfully.
C:\Windows\Temp\~1AFA.tmp deleted successfully.
C:\Windows\Temp\~1B00.tmp deleted successfully.
C:\Windows\Temp\~1B01.tmp deleted successfully.
C:\Windows\Temp\~1B03.tmp deleted successfully.
C:\Windows\Temp\~1B04.tmp deleted successfully.
C:\Windows\Temp\~1B05.tmp deleted successfully.
C:\Windows\Temp\~1B06.tmp deleted successfully.
C:\Windows\Temp\~1B07.tmp deleted successfully.
C:\Windows\Temp\~1B08.tmp deleted successfully.
C:\Windows\Temp\~1B09.tmp deleted successfully.
C:\Windows\Temp\~1B10.tmp deleted successfully.
C:\Windows\Temp\~1B11.tmp deleted successfully.
C:\Windows\Temp\~1B12.tmp deleted successfully.
C:\Windows\Temp\~1B13.tmp deleted successfully.
C:\Windows\Temp\~1B14.tmp deleted successfully.
C:\Windows\Temp\~1B15.tmp deleted successfully.
C:\Windows\Temp\~1B16.tmp deleted successfully.
C:\Windows\Temp\~1B17.tmp deleted successfully.
C:\Windows\Temp\~1B18.tmp deleted successfully.
C:\Windows\Temp\~1B19.tmp deleted successfully.
C:\Windows\Temp\~1B1A.tmp deleted successfully.
C:\Windows\Temp\~1B20.tmp deleted successfully.
C:\Windows\Temp\~1B21.tmp deleted successfully.
C:\Windows\Temp\~1B22.tmp deleted successfully.
C:\Windows\Temp\~1B25.tmp deleted successfully.
C:\Windows\Temp\~1B26.tmp deleted successfully.
C:\Windows\Temp\~1B28.tmp deleted successfully.
C:\Windows\Temp\~1B29.tmp deleted successfully.
C:\Windows\Temp\~1B2D.tmp deleted successfully.
C:\Windows\Temp\~1B30.tmp deleted successfully.
C:\Windows\Temp\~1B31.tmp deleted successfully.
C:\Windows\Temp\~1B32.tmp deleted successfully.
C:\Windows\Temp\~1B33.tmp deleted successfully.
C:\Windows\Temp\~1B34.tmp deleted successfully.
C:\Windows\Temp\~1B35.tmp deleted successfully.
C:\Windows\Temp\~1B36.tmp deleted successfully.
C:\Windows\Temp\~1B3A.tmp deleted successfully.
C:\Windows\Temp\~1B3F.tmp deleted successfully.
C:\Windows\Temp\~1B40.tmp deleted successfully.
C:\Windows\Temp\~1B41.tmp deleted successfully.
C:\Windows\Temp\~1B42.tmp deleted successfully.
C:\Windows\Temp\~1B46.tmp deleted successfully.
C:\Windows\Temp\~1B48.tmp deleted successfully.
C:\Windows\Temp\~1B4A.tmp deleted successfully.
C:\Windows\Temp\~1B4F.tmp deleted successfully.
C:\Windows\Temp\~1B50.tmp deleted successfully.
C:\Windows\Temp\~1B51.tmp deleted successfully.
C:\Windows\Temp\~1B52.tmp deleted successfully.
C:\Windows\Temp\~1B5E.tmp deleted successfully.
C:\Windows\Temp\~1B5F.tmp deleted successfully.
C:\Windows\Temp\~1B6.tmp deleted successfully.
C:\Windows\Temp\~1B60.tmp deleted successfully.
C:\Windows\Temp\~1B61.tmp deleted successfully.
C:\Windows\Temp\~1B62.tmp deleted successfully.
C:\Windows\Temp\~1B63.tmp deleted successfully.
C:\Windows\Temp\~1B64.tmp deleted successfully.
C:\Windows\Temp\~1B65.tmp deleted successfully.
C:\Windows\Temp\~1B6E.tmp deleted successfully.
C:\Windows\Temp\~1B7.tmp deleted successfully.
C:\Windows\Temp\~1B72.tmp deleted successfully.
C:\Windows\Temp\~1B74.tmp deleted successfully.
C:\Windows\Temp\~1B76.tmp deleted successfully.
C:\Windows\Temp\~1B7F.tmp deleted successfully.
C:\Windows\Temp\~1B8.tmp deleted successfully.
C:\Windows\Temp\~1B80.tmp deleted successfully.
C:\Windows\Temp\~1B86.tmp deleted successfully.
C:\Windows\Temp\~1B8D.tmp deleted successfully.
C:\Windows\Temp\~1B8E.tmp deleted successfully.
C:\Windows\Temp\~1B8F.tmp deleted successfully.
C:\Windows\Temp\~1B9.tmp deleted successfully.
C:\Windows\Temp\~1B90.tmp deleted successfully.
C:\Windows\Temp\~1B92.tmp deleted successfully.
C:\Windows\Temp\~1B9D.tmp deleted successfully.
C:\Windows\Temp\~1B9E.tmp deleted successfully.
C:\Windows\Temp\~1B9F.tmp deleted successfully.
C:\Windows\Temp\~1BA.tmp deleted successfully.
C:\Windows\Temp\~1BA0.tmp deleted successfully.
C:\Windows\Temp\~1BA1.tmp deleted successfully.
C:\Windows\Temp\~1BAC.tmp deleted successfully.
C:\Windows\Temp\~1BAD.tmp deleted successfully.
C:\Windows\Temp\~1BAE.tmp deleted successfully.
C:\Windows\Temp\~1BB0.tmp deleted successfully.
C:\Windows\Temp\~1BB1.tmp deleted successfully.
C:\Windows\Temp\~1BB2.tmp deleted successfully.
C:\Windows\Temp\~1BB4.tmp deleted successfully.
C:\Windows\Temp\~1BBC.tmp deleted successfully.
C:\Windows\Temp\~1BBD.tmp deleted successfully.
C:\Windows\Temp\~1BBE.tmp deleted successfully.
C:\Windows\Temp\~1BBF.tmp deleted successfully.
C:\Windows\Temp\~1BC0.tmp deleted successfully.
C:\Windows\Temp\~1BC1.tmp deleted successfully.
C:\Windows\Temp\~1BCC.tmp deleted successfully.
C:\Windows\Temp\~1BD1.tmp deleted successfully.
C:\Windows\Temp\~1BD8.tmp deleted successfully.
C:\Windows\Temp\~1BDB.tmp deleted successfully.
C:\Windows\Temp\~1BDC.tmp deleted successfully.
C:\Windows\Temp\~1BDD.tmp deleted successfully.
C:\Windows\Temp\~1BDE.tmp deleted successfully.
C:\Windows\Temp\~1BDF.tmp deleted successfully.
C:\Windows\Temp\~1BE.tmp deleted successfully.
C:\Windows\Temp\~1BE0.tmp deleted successfully.
C:\Windows\Temp\~1BE1.tmp deleted successfully.
C:\Windows\Temp\~1BE2.tmp deleted successfully.
C:\Windows\Temp\~1BE3.tmp deleted successfully.
C:\Windows\Temp\~1BEA.tmp deleted successfully.
C:\Windows\Temp\~1BEB.tmp deleted successfully.
C:\Windows\Temp\~1BEC.tmp deleted successfully.
C:\Windows\Temp\~1BED.tmp deleted successfully.
C:\Windows\Temp\~1BF4.tmp deleted successfully.
C:\Windows\Temp\~1BFA.tmp deleted successfully.
C:\Windows\Temp\~1BFB.tmp deleted successfully.
C:\Windows\Temp\~1BFC.tmp deleted successfully.
C:\Windows\Temp\~1BFD.tmp deleted successfully.
C:\Windows\Temp\~1BFE.tmp deleted successfully.
C:\Windows\Temp\~1C00.tmp deleted successfully.
C:\Windows\Temp\~1C0A.tmp deleted successfully.
C:\Windows\Temp\~1C0B.tmp deleted successfully.
C:\Windows\Temp\~1C0C.tmp deleted successfully.
C:\Windows\Temp\~1C0D.tmp deleted successfully.
C:\Windows\Temp\~1C1A.tmp deleted successfully.
C:\Windows\Temp\~1C1B.tmp deleted successfully.
C:\Windows\Temp\~1C1C.tmp deleted successfully.
C:\Windows\Temp\~1C1D.tmp deleted successfully.
C:\Windows\Temp\~1C1E.tmp deleted successfully.
C:\Windows\Temp\~1C1F.tmp deleted successfully.
C:\Windows\Temp\~1C21.tmp deleted successfully.
C:\Windows\Temp\~1C22.tmp deleted successfully.
C:\Windows\Temp\~1C2B.tmp deleted successfully.
C:\Windows\Temp\~1C2D.tmp deleted successfully.
C:\Windows\Temp\~1C2F.tmp deleted successfully.
C:\Windows\Temp\~1C30.tmp deleted successfully.
C:\Windows\Temp\~1C38.tmp deleted successfully.
C:\Windows\Temp\~1C39.tmp deleted successfully.
C:\Windows\Temp\~1C3A.tmp deleted successfully.
C:\Windows\Temp\~1C3B.tmp deleted successfully.
C:\Windows\Temp\~1C3C.tmp deleted successfully.
C:\Windows\Temp\~1C3D.tmp deleted successfully.
C:\Windows\Temp\~1C4.tmp deleted successfully.
C:\Windows\Temp\~1C42.tmp deleted successfully.
C:\Windows\Temp\~1C48.tmp deleted successfully.
C:\Windows\Temp\~1C49.tmp deleted successfully.
C:\Windows\Temp\~1C4A.tmp deleted successfully.
C:\Windows\Temp\~1C4C.tmp deleted successfully.
C:\Windows\Temp\~1C4D.tmp deleted successfully.
C:\Windows\Temp\~1C4E.tmp deleted successfully.
C:\Windows\Temp\~1C50.tmp deleted successfully.
C:\Windows\Temp\~1C52.tmp deleted successfully.
C:\Windows\Temp\~1C58.tmp deleted successfully.
C:\Windows\Temp\~1C59.tmp deleted successfully.
C:\Windows\Temp\~1C5A.tmp deleted successfully.
C:\Windows\Temp\~1C5B.tmp deleted successfully.
C:\Windows\Temp\~1C5C.tmp deleted successfully.
C:\Windows\Temp\~1C5D.tmp deleted successfully.
C:\Windows\Temp\~1C5F.tmp deleted successfully.
C:\Windows\Temp\~1C6.tmp deleted successfully.
C:\Windows\Temp\~1C62.tmp deleted successfully.
C:\Windows\Temp\~1C67.tmp deleted successfully.
C:\Windows\Temp\~1C68.tmp deleted successfully.
C:\Windows\Temp\~1C69.tmp deleted successfully.
C:\Windows\Temp\~1C6A.tmp deleted successfully.
C:\Windows\Temp\~1C6B.tmp deleted successfully.
C:\Windows\Temp\~1C6C.tmp deleted successfully.
C:\Windows\Temp\~1C6D.tmp deleted successfully.
C:\Windows\Temp\~1C6E.tmp deleted successfully.
C:\Windows\Temp\~1C7.tmp deleted successfully.
C:\Windows\Temp\~1C78.tmp deleted successfully.
C:\Windows\Temp\~1C79.tmp deleted successfully.
C:\Windows\Temp\~1C7D.tmp deleted successfully.
C:\Windows\Temp\~1C7F.tmp deleted successfully.
C:\Windows\Temp\~1C8.tmp deleted successfully.
C:\Windows\Temp\~1C80.tmp deleted successfully.
C:\Windows\Temp\~1C81.tmp deleted successfully.
C:\Windows\Temp\~1C86.tmp deleted successfully.
C:\Windows\Temp\~1C87.tmp deleted successfully.
C:\Windows\Temp\~1C88.tmp deleted successfully.
C:\Windows\Temp\~1C89.tmp deleted successfully.
C:\Windows\Temp\~1C8A.tmp deleted successfully.
C:\Windows\Temp\~1C8B.tmp deleted successfully.
C:\Windows\Temp\~1C8C.tmp deleted successfully.
C:\Windows\Temp\~1C8D.tmp deleted successfully.
C:\Windows\Temp\~1C8E.tmp deleted successfully.
C:\Windows\Temp\~1C8F.tmp deleted successfully.
C:\Windows\Temp\~1C9.tmp deleted successfully.
C:\Windows\Temp\~1C90.tmp deleted successfully.
C:\Windows\Temp\~1C91.tmp deleted successfully.
C:\Windows\Temp\~1C93.tmp deleted successfully.
C:\Windows\Temp\~1C96.tmp deleted successfully.
C:\Windows\Temp\~1C97.tmp deleted successfully.
C:\Windows\Temp\~1C98.tmp deleted successfully.
C:\Windows\Temp\~1C9B.tmp deleted successfully.
C:\Windows\Temp\~1C9C.tmp deleted successfully.
C:\Windows\Temp\~1C9D.tmp deleted successfully.
C:\Windows\Temp\~1CA6.tmp deleted successfully.
C:\Windows\Temp\~1CA8.tmp deleted successfully.
C:\Windows\Temp\~1CA9.tmp deleted successfully.
C:\Windows\Temp\~1CAB.tmp deleted successfully.
C:\Windows\Temp\~1CAE.tmp deleted successfully.
C:\Windows\Temp\~1CB5.tmp deleted successfully.
C:\Windows\Temp\~1CB6.tmp deleted successfully.
C:\Windows\Temp\~1CB7.tmp deleted successfully.
C:\Windows\Temp\~1CB8.tmp deleted successfully.
C:\Windows\Temp\~1CB9.tmp deleted successfully.
C:\Windows\Temp\~1CBA.tmp deleted successfully.
C:\Windows\Temp\~1CBD.tmp deleted successfully.
C:\Windows\Temp\~1CBF.tmp deleted successfully.
C:\Windows\Temp\~1CC5.tmp deleted successfully.
C:\Windows\Temp\~1CC6.tmp deleted successfully.
C:\Windows\Temp\~1CC8.tmp deleted successfully.
C:\Windows\Temp\~1CC9.tmp deleted successfully.
C:\Windows\Temp\~1CCA.tmp deleted successfully.
C:\Windows\Temp\~1CD4.tmp deleted successfully.
C:\Windows\Temp\~1CD5.tmp deleted successfully.
C:\Windows\Temp\~1CD6.tmp deleted successfully.
C:\Windows\Temp\~1CD7.tmp deleted successfully.
C:\Windows\Temp\~1CD8.tmp deleted successfully.
C:\Windows\Temp\~1CD9.tmp deleted successfully.
C:\Windows\Temp\~1CDA.tmp deleted successfully.
C:\Windows\Temp\~1CE6.tmp deleted successfully.
C:\Windows\Temp\~1CE8.tmp deleted successfully.
C:\Windows\Temp\~1CE9.tmp deleted successfully.
C:\Windows\Temp\~1CEE.tmp deleted successfully.
C:\Windows\Temp\~1CF4.tmp deleted successfully.
C:\Windows\Temp\~1CF5.tmp deleted successfully.
C:\Windows\Temp\~1CF8.tmp deleted successfully.
C:\Windows\Temp\~1D03.tmp deleted successfully.
C:\Windows\Temp\~1D06.tmp deleted successfully.
C:\Windows\Temp\~1D07.tmp deleted successfully.
C:\Windows\Temp\~1D13.tmp deleted successfully.
C:\Windows\Temp\~1D14.tmp deleted successfully.
C:\Windows\Temp\~1D15.tmp deleted successfully.
C:\Windows\Temp\~1D16.tmp deleted successfully.
C:\Windows\Temp\~1D17.tmp deleted successfully.
C:\Windows\Temp\~1D18.tmp deleted successfully.
C:\Windows\Temp\~1D23.tmp deleted successfully.
C:\Windows\Temp\~1D24.tmp deleted successfully.
C:\Windows\Temp\~1D2B.tmp deleted successfully.
C:\Windows\Temp\~1D2F.tmp deleted successfully.
C:\Windows\Temp\~1D32.tmp deleted successfully.
C:\Windows\Temp\~1D33.tmp deleted successfully.
C:\Windows\Temp\~1D34.tmp deleted successfully.
C:\Windows\Temp\~1D35.tmp deleted successfully.
C:\Windows\Temp\~1D3C.tmp deleted successfully.
C:\Windows\Temp\~1D42.tmp deleted successfully.
C:\Windows\Temp\~1D43.tmp deleted successfully.
C:\Windows\Temp\~1D44.tmp deleted successfully.
C:\Windows\Temp\~1D45.tmp deleted successfully.
C:\Windows\Temp\~1D46.tmp deleted successfully.
C:\Windows\Temp\~1D48.tmp deleted successfully.
C:\Windows\Temp\~1D4A.tmp deleted successfully.
C:\Windows\Temp\~1D4B.tmp deleted successfully.
C:\Windows\Temp\~1D51.tmp deleted successfully.
C:\Windows\Temp\~1D52.tmp deleted successfully.
C:\Windows\Temp\~1D53.tmp deleted successfully.
C:\Windows\Temp\~1D54.tmp deleted successfully.
C:\Windows\Temp\~1D5A.tmp deleted successfully.
C:\Windows\Temp\~1D5B.tmp deleted successfully.
C:\Windows\Temp\~1D5C.tmp deleted successfully.
C:\Windows\Temp\~1D6.tmp deleted successfully.
C:\Windows\Temp\~1D60.tmp deleted successfully.
C:\Windows\Temp\~1D61.tmp deleted successfully.
C:\Windows\Temp\~1D62.tmp deleted successfully.
C:\Windows\Temp\~1D64.tmp deleted successfully.
C:\Windows\Temp\~1D65.tmp deleted successfully.
C:\Windows\Temp\~1D69.tmp deleted successfully.
C:\Windows\Temp\~1D6C.tmp deleted successfully.
C:\Windows\Temp\~1D7.tmp deleted successfully.
C:\Windows\Temp\~1D71.tmp deleted successfully.
C:\Windows\Temp\~1D72.tmp deleted successfully.
C:\Windows\Temp\~1D73.tmp deleted successfully.
C:\Windows\Temp\~1D76.tmp deleted successfully.
C:\Windows\Temp\~1D7B.tmp deleted successfully.
C:\Windows\Temp\~1D8.tmp deleted successfully.
C:\Windows\Temp\~1D82.tmp deleted successfully.
C:\Windows\Temp\~1D85.tmp deleted successfully.
C:\Windows\Temp\~1D9.tmp deleted successfully.
C:\Windows\Temp\~1D90.tmp deleted successfully.
C:\Windows\Temp\~1D91.tmp deleted successfully.
C:\Windows\Temp\~1D92.tmp deleted successfully.
C:\Windows\Temp\~1D93.tmp deleted successfully.
C:\Windows\Temp\~1D94.tmp deleted successfully.
C:\Windows\Temp\~1D95.tmp deleted successfully.
C:\Windows\Temp\~1D97.tmp deleted successfully.
C:\Windows\Temp\~1D9F.tmp deleted successfully.
C:\Windows\Temp\~1DA.tmp deleted successfully.
C:\Windows\Temp\~1DA0.tmp deleted successfully.
C:\Windows\Temp\~1DA1.tmp deleted successfully.
C:\Windows\Temp\~1DA2.tmp deleted successfully.
C:\Windows\Temp\~1DA3.tmp deleted successfully.
C:\Windows\Temp\~1DA4.tmp deleted successfully.
C:\Windows\Temp\~1DA5.tmp deleted successfully.
C:\Windows\Temp\~1DA6.tmp deleted successfully.
C:\Windows\Temp\~1DAA.tmp deleted successfully.
C:\Windows\Temp\~1DAF.tmp deleted successfully.
C:\Windows\Temp\~1DB.tmp deleted successfully.
C:\Windows\Temp\~1DB0.tmp deleted successfully.
C:\Windows\Temp\~1DB1.tmp deleted successfully.
C:\Windows\Temp\~1DB3.tmp deleted successfully.
C:\Windows\Temp\~1DB4.tmp deleted successfully.
C:\Windows\Temp\~1DB5.tmp deleted successfully.
C:\Windows\Temp\~1DB6.tmp deleted successfully.
C:\Windows\Temp\~1DB7.tmp deleted successfully.
C:\Windows\Temp\~1DB8.tmp deleted successfully.
C:\Windows\Temp\~1DB9.tmp deleted successfully.
C:\Windows\Temp\~1DC.tmp deleted successfully.
C:\Windows\Temp\~1DC2.tmp deleted successfully.
C:\Windows\Temp\~1DC3.tmp deleted successfully.
C:\Windows\Temp\~1DC4.tmp deleted successfully.
C:\Windows\Temp\~1DC6.tmp deleted successfully.
C:\Windows\Temp\~1DC7.tmp deleted successfully.
C:\Windows\Temp\~1DCE.tmp deleted successfully.
C:\Windows\Temp\~1DD.tmp deleted successfully.
C:\Windows\Temp\~1DD0.tmp deleted successfully.
C:\Windows\Temp\~1DD1.tmp deleted successfully.
C:\Windows\Temp\~1DD2.tmp deleted successfully.
C:\Windows\Temp\~1DD3.tmp deleted successfully.
C:\Windows\Temp\~1DD4.tmp deleted successfully.
C:\Windows\Temp\~1DDE.tmp deleted successfully.
C:\Windows\Temp\~1DDF.tmp deleted successfully.
C:\Windows\Temp\~1DE.tmp deleted successfully.
C:\Windows\Temp\~1DE0.tmp deleted successfully.
C:\Windows\Temp\~1DE1.tmp deleted successfully.
C:\Windows\Temp\~1DE2.tmp deleted successfully.
C:\Windows\Temp\~1DE3.tmp deleted successfully.
C:\Windows\Temp\~1DE4.tmp deleted successfully.
C:\Windows\Temp\~1DE7.tmp deleted successfully.
C:\Windows\Temp\~1DE8.tmp deleted successfully.
C:\Windows\Temp\~1DEB.tmp deleted successfully.
C:\Windows\Temp\~1DED.tmp deleted successfully.
C:\Windows\Temp\~1DEE.tmp deleted successfully.
C:\Windows\Temp\~1DEF.tmp deleted successfully.
C:\Windows\Temp\~1DF.tmp deleted successfully.
C:\Windows\Temp\~1DF0.tmp deleted successfully.
C:\Windows\Temp\~1DF1.tmp deleted successfully.
C:\Windows\Temp\~1DF2.tmp deleted successfully.
C:\Windows\Temp\~1DFD.tmp deleted successfully.
C:\Windows\Temp\~1DFE.tmp deleted successfully.
C:\Windows\Temp\~1DFF.tmp deleted successfully.
C:\Windows\Temp\~1E0.tmp deleted successfully.
C:\Windows\Temp\~1E00.tmp deleted successfully.
C:\Windows\Temp\~1E04.tmp deleted successfully.
C:\Windows\Temp\~1E0D.tmp deleted successfully.
C:\Windows\Temp\~1E0E.tmp deleted successfully.
C:\Windows\Temp\~1E0F.tmp deleted successfully.
C:\Windows\Temp\~1E1.tmp deleted successfully.
C:\Windows\Temp\~1E10.tmp deleted successfully.
C:\Windows\Temp\~1E11.tmp deleted successfully.
C:\Windows\Temp\~1E12.tmp deleted successfully.
C:\Windows\Temp\~1E14.tmp deleted successfully.
C:\Windows\Temp\~1E17.tmp deleted successfully.
C:\Windows\Temp\~1E18.tmp deleted successfully.
C:\Windows\Temp\~1E1C.tmp deleted successfully.
C:\Windows\Temp\~1E1D.tmp deleted successfully.
C:\Windows\Temp\~1E1E.tmp deleted successfully.
C:\Windows\Temp\~1E1F.tmp deleted successfully.
C:\Windows\Temp\~1E20.tmp deleted successfully.
C:\Windows\Temp\~1E21.tmp deleted successfully.
C:\Windows\Temp\~1E24.tmp deleted successfully.
C:\Windows\Temp\~1E25.tmp deleted successfully.
C:\Windows\Temp\~1E2C.tmp deleted successfully.
C:\Windows\Temp\~1E2D.tmp deleted successfully.
C:\Windows\Temp\~1E2E.tmp deleted successfully.
C:\Windows\Temp\~1E2F.tmp deleted successfully.
C:\Windows\Temp\~1E30.tmp deleted successfully.
C:\Windows\Temp\~1E31.tmp deleted successfully.
C:\Windows\Temp\~1E38.tmp deleted successfully.
C:\Windows\Temp\~1E3B.tmp deleted successfully.
C:\Windows\Temp\~1E3C.tmp deleted successfully.
C:\Windows\Temp\~1E3D.tmp deleted successfully.
C:\Windows\Temp\~1E3E.tmp deleted successfully.
C:\Windows\Temp\~1E3F.tmp deleted successfully.
C:\Windows\Temp\~1E44.tmp deleted successfully.
C:\Windows\Temp\~1E46.tmp deleted successfully.
C:\Windows\Temp\~1E4B.tmp deleted successfully.
C:\Windows\Temp\~1E4D.tmp deleted successfully.
C:\Windows\Temp\~1E4E.tmp deleted successfully.
C:\Windows\Temp\~1E51.tmp deleted successfully.
C:\Windows\Temp\~1E53.tmp deleted successfully.
C:\Windows\Temp\~1E54.tmp deleted successfully.
C:\Windows\Temp\~1E5A.tmp deleted successfully.
C:\Windows\Temp\~1E5B.tmp deleted successfully.
C:\Windows\Temp\~1E5C.tmp deleted successfully.
C:\Windows\Temp\~1E5D.tmp deleted successfully.
C:\Windows\Temp\~1E5E.tmp deleted successfully.
C:\Windows\Temp\~1E5F.tmp deleted successfully.
C:\Windows\Temp\~1E6.tmp deleted successfully.
C:\Windows\Temp\~1E60.tmp deleted successfully.
C:\Windows\Temp\~1E61.tmp deleted successfully.
C:\Windows\Temp\~1E62.tmp deleted successfully.
C:\Windows\Temp\~1E6B.tmp deleted successfully.
C:\Windows\Temp\~1E6C.tmp deleted successfully.
C:\Windows\Temp\~1E6D.tmp deleted successfully.
C:\Windows\Temp\~1E6E.tmp deleted successfully.
C:\Windows\Temp\~1E6F.tmp deleted successfully.
C:\Windows\Temp\~1E70.tmp deleted successfully.
C:\Windows\Temp\~1E71.tmp deleted successfully.
C:\Windows\Temp\~1E72.tmp deleted successfully.
C:\Windows\Temp\~1E73.tmp deleted successfully.
C:\Windows\Temp\~1E7A.tmp deleted successfully.
C:\Windows\Temp\~1E7B.tmp deleted successfully.
C:\Windows\Temp\~1E7C.tmp deleted successfully.
C:\Windows\Temp\~1E7D.tmp deleted successfully.
C:\Windows\Temp\~1E7E.tmp deleted successfully.
C:\Windows\Temp\~1E7F.tmp deleted successfully.
C:\Windows\Temp\~1E80.tmp deleted successfully.
C:\Windows\Temp\~1E81.tmp deleted successfully.
C:\Windows\Temp\~1E82.tmp deleted successfully.
C:\Windows\Temp\~1E8A.tmp deleted successfully.
C:\Windows\Temp\~1E8B.tmp deleted successfully.
C:\Windows\Temp\~1E99.tmp deleted successfully.
C:\Windows\Temp\~1E9C.tmp deleted successfully.
C:\Windows\Temp\~1E9D.tmp deleted successfully.
C:\Windows\Temp\~1E9F.tmp deleted successfully.
C:\Windows\Temp\~1EA.tmp deleted successfully.
C:\Windows\Temp\~1EA1.tmp deleted successfully.
C:\Windows\Temp\~1EA6.tmp deleted successfully.
C:\Windows\Temp\~1EA9.tmp deleted successfully.
C:\Windows\Temp\~1EAA.tmp deleted successfully.
C:\Windows\Temp\~1EAB.tmp deleted successfully.
C:\Windows\Temp\~1EAC.tmp deleted successfully.
C:\Windows\Temp\~1EB9.tmp deleted successfully.
C:\Windows\Temp\~1EBA.tmp deleted successfully.
C:\Windows\Temp\~1EBB.tmp deleted successfully.
C:\Windows\Temp\~1EBC.tmp deleted successfully.
C:\Windows\Temp\~1EC8.tmp deleted successfully.
C:\Windows\Temp\~1EC9.tmp deleted successfully.
C:\Windows\Temp\~1ECA.tmp deleted successfully.
C:\Windows\Temp\~1ECB.tmp deleted successfully.
C:\Windows\Temp\~1ECD.tmp deleted successfully.
C:\Windows\Temp\~1ECE.tmp deleted successfully.
C:\Windows\Temp\~1ED.tmp deleted successfully.
C:\Windows\Temp\~1ED7.tmp deleted successfully.
C:\Windows\Temp\~1ED8.tmp deleted successfully.
C:\Windows\Temp\~1ED9.tmp deleted successfully.
C:\Windows\Temp\~1EDA.tmp deleted successfully.
C:\Windows\Temp\~1EDB.tmp deleted successfully.
C:\Windows\Temp\~1EDE.tmp deleted successfully.
C:\Windows\Temp\~1EDF.tmp deleted successfully.
C:\Windows\Temp\~1EE1.tmp deleted successfully.
C:\Windows\Temp\~1EE7.tmp deleted successfully.
C:\Windows\Temp\~1EE8.tmp deleted successfully.
C:\Windows\Temp\~1EE9.tmp deleted successfully.
C:\Windows\Temp\~1EEA.tmp deleted successfully.
C:\Windows\Temp\~1EEB.tmp deleted successfully.
C:\Windows\Temp\~1EEF.tmp deleted successfully.
C:\Windows\Temp\~1EF.tmp deleted successfully.
C:\Windows\Temp\~1EF6.tmp deleted successfully.
C:\Windows\Temp\~1EF8.tmp deleted successfully.
C:\Windows\Temp\~1EF9.tmp deleted successfully.
C:\Windows\Temp\~1EFB.tmp deleted successfully.
C:\Windows\Temp\~1EFC.tmp deleted successfully.
C:\Windows\Temp\~1F00.tmp deleted successfully.
C:\Windows\Temp\~1F06.tmp deleted successfully.
C:\Windows\Temp\~1F07.tmp deleted successfully.
C:\Windows\Temp\~1F08.tmp deleted successfully.
C:\Windows\Temp\~1F09.tmp deleted successfully.
C:\Windows\Temp\~1F0A.tmp deleted successfully.
C:\Windows\Temp\~1F0B.tmp deleted successfully.
C:\Windows\Temp\~1F0C.tmp deleted successfully.
C:\Windows\Temp\~1F0E.tmp deleted successfully.
C:\Windows\Temp\~1F0F.tmp deleted successfully.
C:\Windows\Temp\~1F17.tmp deleted successfully.
C:\Windows\Temp\~1F18.tmp deleted successfully.
C:\Windows\Temp\~1F19.tmp deleted successfully.
C:\Windows\Temp\~1F1A.tmp deleted successfully.
C:\Windows\Temp\~1F1B.tmp deleted successfully.
C:\Windows\Temp\~1F20.tmp deleted successfully.
C:\Windows\Temp\~1F26.tmp deleted successfully.
C:\Windows\Temp\~1F28.tmp deleted successfully.
C:\Windows\Temp\~1F2D.tmp deleted successfully.
C:\Windows\Temp\~1F2E.tmp deleted successfully.
C:\Windows\Temp\~1F31.tmp deleted successfully.
C:\Windows\Temp\~1F35.tmp deleted successfully.
C:\Windows\Temp\~1F36.tmp deleted successfully.
C:\Windows\Temp\~1F37.tmp deleted successfully.
C:\Windows\Temp\~1F38.tmp deleted successfully.
C:\Windows\Temp\~1F39.tmp deleted successfully.
C:\Windows\Temp\~1F3A.tmp deleted successfully.
C:\Windows\Temp\~1F3F.tmp deleted successfully.
C:\Windows\Temp\~1F46.tmp deleted successfully.
C:\Windows\Temp\~1F49.tmp deleted successfully.
C:\Windows\Temp\~1F4C.tmp deleted successfully.
C:\Windows\Temp\~1F5.tmp deleted successfully.
C:\Windows\Temp\~1F54.tmp deleted successfully.
C:\Windows\Temp\~1F55.tmp deleted successfully.
C:\Windows\Temp\~1F56.tmp deleted successfully.
C:\Windows\Temp\~1F57.tmp deleted successfully.
C:\Windows\Temp\~1F58.tmp deleted successfully.
C:\Windows\Temp\~1F59.tmp deleted successfully.
C:\Windows\Temp\~1F5A.tmp deleted successfully.
C:\Windows\Temp\~1F64.tmp deleted successfully.
C:\Windows\Temp\~1F65.tmp deleted successfully.
C:\Windows\Temp\~1F66.tmp deleted successfully.
C:\Windows\Temp\~1F67.tmp deleted successfully.
C:\Windows\Temp\~1F68.tmp deleted successfully.
C:\Windows\Temp\~1F6C.tmp deleted successfully.
C:\Windows\Temp\~1F70.tmp deleted successfully.
C:\Windows\Temp\~1F73.tmp deleted successfully.
C:\Windows\Temp\~1F74.tmp deleted successfully.
C:\Windows\Temp\~1F75.tmp deleted successfully.
C:\Windows\Temp\~1F76.tmp deleted successfully.
C:\Windows\Temp\~1F77.tmp deleted successfully.
C:\Windows\Temp\~1F78.tmp deleted successfully.
C:\Windows\Temp\~1F79.tmp deleted successfully.
C:\Windows\Temp\~1F7A.tmp deleted successfully.
C:\Windows\Temp\~1F7B.tmp deleted successfully.
C:\Windows\Temp\~1F7C.tmp deleted successfully.
C:\Windows\Temp\~1F8.tmp deleted successfully.
C:\Windows\Temp\~1F83.tmp deleted successfully.
C:\Windows\Temp\~1F84.tmp deleted successfully.
C:\Windows\Temp\~1F85.tmp deleted successfully.
C:\Windows\Temp\~1F86.tmp deleted successfully.
C:\Windows\Temp\~1F87.tmp deleted successfully.
C:\Windows\Temp\~1F88.tmp deleted successfully.
C:\Windows\Temp\~1F8B.tmp deleted successfully.
C:\Windows\Temp\~1F8C.tmp deleted successfully.
C:\Windows\Temp\~1F9.tmp deleted successfully.
C:\Windows\Temp\~1F93.tmp deleted successfully.
C:\Windows\Temp\~1F94.tmp deleted successfully.
C:\Windows\Temp\~1F95.tmp deleted successfully.
C:\Windows\Temp\~1F96.tmp deleted successfully.
C:\Windows\Temp\~1F97.tmp deleted successfully.
C:\Windows\Temp\~1F98.tmp deleted successfully.
C:\Windows\Temp\~1F99.tmp deleted successfully.
C:\Windows\Temp\~1F9A.tmp deleted successfully.
C:\Windows\Temp\~1F9B.tmp deleted successfully.
C:\Windows\Temp\~1FA.tmp deleted successfully.
C:\Windows\Temp\~1FA3.tmp deleted successfully.
C:\Windows\Temp\~1FA4.tmp deleted successfully.
C:\Windows\Temp\~1FA5.tmp deleted successfully.
C:\Windows\Temp\~1FA6.tmp deleted successfully.
C:\Windows\Temp\~1FA7.tmp deleted successfully.
C:\Windows\Temp\~1FA8.tmp deleted successfully.
C:\Windows\Temp\~1FA9.tmp deleted successfully.
C:\Windows\Temp\~1FAA.tmp deleted successfully.
C:\Windows\Temp\~1FB1.tmp deleted successfully.
C:\Windows\Temp\~1FB5.tmp deleted successfully.
C:\Windows\Temp\~1FBA.tmp deleted successfully.
C:\Windows\Temp\~1FBB.tmp deleted successfully.
C:\Windows\Temp\~1FC0.tmp deleted successfully.
C:\Windows\Temp\~1FC1.tmp deleted successfully.
C:\Windows\Temp\~1FC3.tmp deleted successfully.
C:\Windows\Temp\~1FC6.tmp deleted successfully.
C:\Windows\Temp\~1FCC.tmp deleted successfully.
C:\Windows\Temp\~1FD1.tmp deleted successfully.
C:\Windows\Temp\~1FD2.tmp deleted successfully.
C:\Windows\Temp\~1FD3.tmp deleted successfully.
C:\Windows\Temp\~1FD4.tmp deleted successfully.
C:\Windows\Temp\~1FD5.tmp deleted successfully.
C:\Windows\Temp\~1FD6.tmp deleted successfully.
C:\Windows\Temp\~1FD7.tmp deleted successfully.
C:\Windows\Temp\~1FD9.tmp deleted successfully.
C:\Windows\Temp\~1FDA.tmp deleted successfully.
C:\Windows\Temp\~1FE0.tmp deleted successfully.
C:\Windows\Temp\~1FE1.tmp deleted successfully.
C:\Windows\Temp\~1FE2.tmp deleted successfully.
C:\Windows\Temp\~1FE3.tmp deleted successfully.
C:\Windows\Temp\~1FE4.tmp deleted successfully.
C:\Windows\Temp\~1FE5.tmp deleted successfully.
C:\Windows\Temp\~1FF.tmp deleted successfully.
C:\Windows\Temp\~1FF0.tmp deleted successfully.
C:\Windows\Temp\~1FF1.tmp deleted successfully.
C:\Windows\Temp\~1FF2.tmp deleted successfully.
C:\Windows\Temp\~1FF3.tmp deleted successfully.
C:\Windows\Temp\~1FF4.tmp deleted successfully.
C:\Windows\Temp\~1FF5.tmp deleted successfully.
C:\Windows\Temp\~1FF6.tmp deleted successfully.
C:\Windows\Temp\~1FF7.tmp deleted successfully.
C:\Windows\Temp\~1FF8.tmp deleted successfully.
C:\Windows\Temp\~1FF9.tmp deleted successfully.
C:\Windows\Temp\~2000.tmp deleted successfully.
C:\Windows\Temp\~2001.tmp deleted successfully.
C:\Windows\Temp\~2002.tmp deleted successfully.
C:\Windows\Temp\~2003.tmp deleted successfully.
C:\Windows\Temp\~2004.tmp deleted successfully.
C:\Windows\Temp\~2005.tmp deleted successfully.
C:\Windows\Temp\~2006.tmp deleted successfully.
C:\Windows\Temp\~2007.tmp deleted successfully.
C:\Windows\Temp\~2008.tmp deleted successfully.
C:\Windows\Temp\~2009.tmp deleted successfully.
C:\Windows\Temp\~2010.tmp deleted successfully.
C:\Windows\Temp\~2011.tmp deleted successfully.
C:\Windows\Temp\~2012.tmp deleted successfully.
C:\Windows\Temp\~2013.tmp deleted successfully.
C:\Windows\Temp\~2014.tmp deleted successfully.
C:\Windows\Temp\~201F.tmp deleted successfully.
C:\Windows\Temp\~2020.tmp deleted successfully.
C:\Windows\Temp\~2021.tmp deleted successfully.
C:\Windows\Temp\~2022.tmp deleted successfully.
C:\Windows\Temp\~2023.tmp deleted successfully.
C:\Windows\Temp\~2024.tmp deleted successfully.
C:\Windows\Temp\~2025.tmp deleted successfully.
C:\Windows\Temp\~2027.tmp deleted successfully.
C:\Windows\Temp\~2029.tmp deleted successfully.
C:\Windows\Temp\~2031.tmp deleted successfully.
C:\Windows\Temp\~2037.tmp deleted successfully.
C:\Windows\Temp\~203E.tmp deleted successfully.
C:\Windows\Temp\~203F.tmp deleted successfully.
C:\Windows\Temp\~204.tmp deleted successfully.
C:\Windows\Temp\~2040.tmp deleted successfully.
C:\Windows\Temp\~2041.tmp deleted successfully.
C:\Windows\Temp\~2042.tmp deleted successfully.
C:\Windows\Temp\~2046.tmp deleted successfully.
C:\Windows\Temp\~204D.tmp deleted successfully.
C:\Windows\Temp\~204E.tmp deleted successfully.
C:\Windows\Temp\~204F.tmp deleted successfully.
C:\Windows\Temp\~205.tmp deleted successfully.
C:\Windows\Temp\~2050.tmp deleted successfully.
C:\Windows\Temp\~2051.tmp deleted successfully.
C:\Windows\Temp\~2052.tmp deleted successfully.
C:\Windows\Temp\~2054.tmp deleted successfully.
C:\Windows\Temp\~2055.tmp deleted successfully.
C:\Windows\Temp\~205D.tmp deleted successfully.
C:\Windows\Temp\~205E.tmp deleted successfully.
C:\Windows\Temp\~205F.tmp deleted successfully.
C:\Windows\Temp\~206.tmp deleted successfully.
C:\Windows\Temp\~2060.tmp deleted successfully.
C:\Windows\Temp\~2061.tmp deleted successfully.
C:\Windows\Temp\~2062.tmp deleted successfully.
C:\Windows\Temp\~2064.tmp deleted successfully.
C:\Windows\Temp\~206D.tmp deleted successfully.
C:\Windows\Temp\~206E.tmp deleted successfully.
C:\Windows\Temp\~207.tmp deleted successfully.
C:\Windows\Temp\~2072.tmp deleted successfully.
C:\Windows\Temp\~2075.tmp deleted successfully.
C:\Windows\Temp\~207C.tmp deleted successfully.
C:\Windows\Temp\~207D.tmp deleted successfully.
C:\Windows\Temp\~207E.tmp deleted successfully.
C:\Windows\Temp\~207F.tmp deleted successfully.
C:\Windows\Temp\~208.tmp deleted successfully.
C:\Windows\Temp\~2080.tmp deleted successfully.
C:\Windows\Temp\~2081.tmp deleted successfully.
C:\Windows\Temp\~2082.tmp deleted successfully.
C:\Windows\Temp\~2084.tmp deleted successfully.
C:\Windows\Temp\~2085.tmp deleted successfully.
C:\Windows\Temp\~208D.tmp deleted successfully.
C:\Windows\Temp\~208E.tmp deleted successfully.
C:\Windows\Temp\~208F.tmp deleted successfully.
C:\Windows\Temp\~209.tmp deleted successfully.
C:\Windows\Temp\~2090.tmp deleted successfully.
C:\Windows\Temp\~2091.tmp deleted successfully.
C:\Windows\Temp\~2094.tmp deleted successfully.
C:\Windows\Temp\~209C.tmp deleted successfully.
C:\Windows\Temp\~209D.tmp deleted successfully.
C:\Windows\Temp\~209E.tmp deleted successfully.
C:\Windows\Temp\~20A.tmp deleted successfully.
C:\Windows\Temp\~20A6.tmp deleted successfully.
C:\Windows\Temp\~20A7.tmp deleted successfully.
C:\Windows\Temp\~20AC.tmp deleted successfully.
C:\Windows\Temp\~20AE.tmp deleted successfully.
C:\Windows\Temp\~20AF.tmp deleted successfully.
C:\Windows\Temp\~20B0.tmp deleted successfully.
C:\Windows\Temp\~20B1.tmp deleted successfully.
C:\Windows\Temp\~20B3.tmp deleted successfully.
C:\Windows\Temp\~20B5.tmp deleted successfully.
C:\Windows\Temp\~20B6.tmp deleted successfully.
C:\Windows\Temp\~20BC.tmp deleted successfully.
C:\Windows\Temp\~20BD.tmp deleted successfully.
C:\Windows\Temp\~20BE.tmp deleted successfully.
C:\Windows\Temp\~20BF.tmp deleted successfully.
C:\Windows\Temp\~20C0.tmp deleted successfully.
C:\Windows\Temp\~20C4.tmp deleted successfully.
C:\Windows\Temp\~20C7.tmp deleted successfully.
C:\Windows\Temp\~20CB.tmp deleted successfully.
C:\Windows\Temp\~20CC.tmp deleted successfully.
C:\Windows\Temp\~20CD.tmp deleted successfully.
C:\Windows\Temp\~20CE.tmp deleted successfully.
C:\Windows\Temp\~20CF.tmp deleted successfully.
C:\Windows\Temp\~20D0.tmp deleted successfully.
C:\Windows\Temp\~20D1.tmp deleted successfully.
C:\Windows\Temp\~20D5.tmp deleted successfully.
C:\Windows\Temp\~20DA.tmp deleted successfully.
C:\Windows\Temp\~20DB.tmp deleted successfully.
C:\Windows\Temp\~20DC.tmp deleted successfully.
C:\Windows\Temp\~20DD.tmp deleted successfully.
C:\Windows\Temp\~20DE.tmp deleted successfully.
C:\Windows\Temp\~20E.tmp deleted successfully.
C:\Windows\Temp\~20EA.tmp deleted successfully.
C:\Windows\Temp\~20EB.tmp deleted successfully.
C:\Windows\Temp\~20ED.tmp deleted successfully.
C:\Windows\Temp\~20EF.tmp deleted successfully.
C:\Windows\Temp\~20F.tmp deleted successfully.
C:\Windows\Temp\~20FA.tmp deleted successfully.
C:\Windows\Temp\~20FB.tmp deleted successfully.
C:\Windows\Temp\~20FC.tmp deleted successfully.
C:\Windows\Temp\~20FD.tmp deleted successfully.
C:\Windows\Temp\~20FF.tmp deleted successfully.
C:\Windows\Temp\~21.tmp deleted successfully.
C:\Windows\Temp\~2100.tmp deleted successfully.
C:\Windows\Temp\~2109.tmp deleted successfully.
C:\Windows\Temp\~210A.tmp deleted successfully.
C:\Windows\Temp\~210B.tmp deleted successfully.
C:\Windows\Temp\~210C.tmp deleted successfully.
C:\Windows\Temp\~210D.tmp deleted successfully.
C:\Windows\Temp\~210E.tmp deleted successfully.
C:\Windows\Temp\~210F.tmp deleted successfully.
C:\Windows\Temp\~211.tmp deleted successfully.
C:\Windows\Temp\~2110.tmp deleted successfully.
C:\Windows\Temp\~2112.tmp deleted successfully.
C:\Windows\Temp\~2113.tmp deleted successfully.
C:\Windows\Temp\~2118.tmp deleted successfully.
C:\Windows\Temp\~2119.tmp deleted successfully.
C:\Windows\Temp\~211A.tmp deleted successfully.
C:\Windows\Temp\~211B.tmp deleted successfully.
C:\Windows\Temp\~211C.tmp deleted successfully.
C:\Windows\Temp\~211E.tmp deleted successfully.
C:\Windows\Temp\~2120.tmp deleted successfully.
C:\Windows\Temp\~2129.tmp deleted successfully.
C:\Windows\Temp\~212C.tmp deleted successfully.
C:\Windows\Temp\~213.tmp deleted successfully.
C:\Windows\Temp\~2130.tmp deleted successfully.
C:\Windows\Temp\~2131.tmp deleted successfully.
C:\Windows\Temp\~2138.tmp deleted successfully.
C:\Windows\Temp\~2139.tmp deleted successfully.
C:\Windows\Temp\~213A.tmp deleted successfully.
C:\Windows\Temp\~213B.tmp deleted successfully.
C:\Windows\Temp\~213C.tmp deleted successfully.
C:\Windows\Temp\~213D.tmp deleted successfully.
C:\Windows\Temp\~213E.tmp deleted successfully.
C:\Windows\Temp\~213F.tmp deleted successfully.
C:\Windows\Temp\~214.tmp deleted successfully.
C:\Windows\Temp\~2141.tmp deleted successfully.
C:\Windows\Temp\~2143.tmp deleted successfully.
C:\Windows\Temp\~2147.tmp deleted successfully.
C:\Windows\Temp\~2148.tmp deleted successfully.
C:\Windows\Temp\~214B.tmp deleted successfully.
C:\Windows\Temp\~214C.tmp deleted successfully.
C:\Windows\Temp\~215.tmp deleted successfully.
C:\Windows\Temp\~2156.tmp deleted successfully.
C:\Windows\Temp\~2157.tmp deleted successfully.
C:\Windows\Temp\~2158.tmp deleted successfully.
C:\Windows\Temp\~2159.tmp deleted successfully.
C:\Windows\Temp\~215A.tmp deleted successfully.
C:\Windows\Temp\~215B.tmp deleted successfully.
C:\Windows\Temp\~215C.tmp deleted successfully.
C:\Windows\Temp\~215F.tmp deleted successfully.
C:\Windows\Temp\~216.tmp deleted successfully.
C:\Windows\Temp\~2160.tmp deleted successfully.
C:\Windows\Temp\~2167.tmp deleted successfully.
C:\Windows\Temp\~2168.tmp deleted successfully.
C:\Windows\Temp\~2169.tmp deleted successfully.
C:\Windows\Temp\~216A.tmp deleted successfully.
C:\Windows\Temp\~216F.tmp deleted successfully.
C:\Windows\Temp\~217.tmp deleted successfully.
C:\Windows\Temp\~2176.tmp deleted successfully.
C:\Windows\Temp\~2177.tmp deleted successfully.
C:\Windows\Temp\~2178.tmp deleted successfully.
C:\Windows\Temp\~217A.tmp deleted successfully.
C:\Windows\Temp\~217B.tmp deleted successfully.
C:\Windows\Temp\~217C.tmp deleted successfully.
C:\Windows\Temp\~218.tmp deleted successfully.
C:\Windows\Temp\~2180.tmp deleted successfully.
C:\Windows\Temp\~2182.tmp deleted successfully.
C:\Windows\Temp\~2186.tmp deleted successfully.
C:\Windows\Temp\~2187.tmp deleted successfully.
C:\Windows\Temp\~2188.tmp deleted successfully.
C:\Windows\Temp\~2189.tmp deleted successfully.
C:\Windows\Temp\~218A.tmp deleted successfully.
C:\Windows\Temp\~218B.tmp deleted successfully.
C:\Windows\Temp\~218C.tmp deleted successfully.
C:\Windows\Temp\~2191.tmp deleted successfully.
C:\Windows\Temp\~2195.tmp deleted successfully.
C:\Windows\Temp\~2196.tmp deleted successfully.
C:\Windows\Temp\~2197.tmp deleted successfully.
C:\Windows\Temp\~2198.tmp deleted successfully.
C:\Windows\Temp\~2199.tmp deleted successfully.
C:\Windows\Temp\~21A5.tmp deleted successfully.
C:\Windows\Temp\~21A6.tmp deleted successfully.
C:\Windows\Temp\~21A7.tmp deleted successfully.
C:\Windows\Temp\~21A8.tmp deleted successfully.
C:\Windows\Temp\~21A9.tmp deleted successfully.
C:\Windows\Temp\~21AA.tmp deleted successfully.
C:\Windows\Temp\~21AB.tmp deleted successfully.
C:\Windows\Temp\~21AC.tmp deleted successfully.
C:\Windows\Temp\~21AD.tmp deleted successfully.
C:\Windows\Temp\~21AE.tmp deleted successfully.
C:\Windows\Temp\~21AF.tmp deleted successfully.
C:\Windows\Temp\~21B0.tmp deleted successfully.
C:\Windows\Temp\~21B1.tmp deleted successfully.
C:\Windows\Temp\~21B5.tmp deleted successfully.
C:\Windows\Temp\~21B6.tmp deleted successfully.
C:\Windows\Temp\~21B7.tmp deleted successfully.
C:\Windows\Temp\~21B8.tmp deleted successfully.
C:\Windows\Temp\~21B9.tmp deleted successfully.
C:\Windows\Temp\~21BA.tmp deleted successfully.
C:\Windows\Temp\~21BB.tmp deleted successfully.
C:\Windows\Temp\~21BC.tmp deleted successfully.
C:\Windows\Temp\~21BE.tmp deleted successfully.
C:\Windows\Temp\~21C4.tmp deleted successfully.
C:\Windows\Temp\~21C5.tmp deleted successfully.
C:\Windows\Temp\~21C6.tmp deleted successfully.
C:\Windows\Temp\~21C7.tmp deleted successfully.
C:\Windows\Temp\~21C8.tmp deleted successfully.
C:\Windows\Temp\~21C9.tmp deleted successfully.
C:\Windows\Temp\~21CA.tmp deleted successfully.
C:\Windows\Temp\~21CC.tmp deleted successfully.
C:\Windows\Temp\~21D.tmp deleted successfully.
C:\Windows\Temp\~21D8.tmp deleted successfully.
C:\Windows\Temp\~21E.tmp deleted successfully.
C:\Windows\Temp\~21E3.tmp deleted successfully.
C:\Windows\Temp\~21E4.tmp deleted successfully.
C:\Windows\Temp\~21E6.tmp deleted successfully.
C:\Windows\Temp\~21E7.tmp deleted successfully.
C:\Windows\Temp\~21E9.tmp deleted successfully.
C:\Windows\Temp\~21EB.tmp deleted successfully.
C:\Windows\Temp\~21EC.tmp deleted successfully.
C:\Windows\Temp\~21ED.tmp deleted successfully.
C:\Windows\Temp\~21F.tmp deleted successfully.
C:\Windows\Temp\~21F3.tmp deleted successfully.
C:\Windows\Temp\~21F4.tmp deleted successfully.
C:\Windows\Temp\~21F5.tmp deleted successfully.
C:\Windows\Temp\~21F6.tmp deleted successfully.
C:\Windows\Temp\~21F7.tmp deleted successfully.
C:\Windows\Temp\~21FA.tmp deleted successfully.
C:\Windows\Temp\~22.tmp deleted successfully.
C:\Windows\Temp\~220.tmp deleted successfully.
C:\Windows\Temp\~2202.tmp deleted successfully.
C:\Windows\Temp\~2203.tmp deleted successfully.

[stacik]

a takhle to pokračuje... má to přes milion znaků takže bych to sem dávala hrozně dlouho, ale jestli to je potřeba tak to sem pak hodím. Na konci už je tohle:

C:\Windows\Temp\~FFF2.tmp deleted successfully.
C:\Windows\Temp\~FFF3.tmp deleted successfully.
C:\Windows\Temp\~FFF4.tmp deleted successfully.
C:\Windows\Temp\~FFF5.tmp deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UfSeAgnt.exe not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\UpdateLBPShortCut deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GoShortCut deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
========== FILES ==========
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk moved successfully.
C:\Program Files (x86)\PANDORA.TV\PanService folder moved successfully.
C:\Program Files (x86)\PANDORA.TV folder moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Luci
->Temp folder emptied: 85753758 bytes
->Temporary Internet Files folder emptied: 222763862 bytes
->Java cache emptied: 7838864 bytes
->FireFox cache emptied: 436891655 bytes
->Google Chrome cache emptied: 209972790 bytes
->Flash cache emptied: 49605 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 248074851 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 54242 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1,155.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Luci
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Luci
->Java cache emptied: 0 bytes

User: Public

Total Java Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 06042013_232152

Files\Folders moved on Reboot...
C:\Users\Luci\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Luci\AppData\Local\Temp\SafeQClientUI.log moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...