OTL logfile created on: 1. 9. 2013 14:17:20 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\bondasko\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16660)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy
7,96 Gb Total Physical Memory | 5,62 Gb Available Physical Memory | 70,53% Memory free
15,92 Gb Paging File | 13,27 Gb Available in Paging File | 83,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 83,75 Gb Total Space | 30,74 Gb Free Space | 36,70% Space Free | Partition Type: NTFS
Drive D: | 999,83 Gb Total Space | 17,30 Gb Free Space | 1,73% Space Free | Partition Type: NTFS
Drive E: | 397,43 Gb Total Space | 214,38 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive F: | 281,49 Gb Total Space | 244,95 Gb Free Space | 87,02% Space Free | Partition Type: NTFS
Drive G: | 100,01 Gb Total Space | 96,19 Gb Free Space | 96,19% Space Free | Partition Type: NTFS
Drive H: | 500,01 Gb Total Space | 486,79 Gb Free Space | 97,36% Space Free | Partition Type: NTFS
Drive X: | 50,00 Gb Total Space | 6,18 Gb Free Space | 12,37% Space Free | Partition Type: NTFS
Computer Name: DOMA | User Name: bondasko | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/09/01 14:15:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\bondasko\Desktop\OTL.exe
PRC - [2013/08/24 19:49:56 | 000,829,392 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013/08/17 05:39:57 | 000,276,376 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2013/08/07 11:42:30 | 004,308,320 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013/08/07 11:42:29 | 011,737,952 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
PRC - [2013/08/07 11:28:08 | 000,195,936 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
PRC - [2013/07/23 07:13:59 | 001,861,512 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
PRC - [2013/06/18 19:40:39 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/05/09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/05/09 10:58:27 | 000,137,960 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe
PRC - [2013/04/08 18:44:12 | 001,320,496 | ---- | M] (pdfforge GmbH) -- C:\Program Files (x86)\PDF Architect\HelperService.exe
PRC - [2013/04/08 18:43:36 | 000,799,280 | ---- | M] (pdfforge GmbH) -- C:\Program Files (x86)\PDF Architect\ConversionService.exe
PRC - [2012/12/01 12:38:34 | 000,393,728 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2012/03/27 10:14:27 | 000,291,608 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2012/03/20 12:59:04 | 003,340,288 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
PRC - [2011/12/16 13:30:40 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2011/12/16 13:30:38 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2011/12/16 12:02:56 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
PRC - [2011/12/12 12:06:06 | 002,156,952 | ---- | M] () -- C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
PRC - [2008/09/30 13:48:28 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
========== Modules (No Company Name) ==========
MOD - [2013/08/24 19:49:53 | 000,410,576 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppgooglenaclpluginchrome.dll
MOD - [2013/08/24 19:49:51 | 004,053,456 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.dll
MOD - [2013/08/24 19:49:01 | 000,709,584 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\libglesv2.dll
MOD - [2013/08/24 19:49:00 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\libegl.dll
MOD - [2013/08/24 19:48:58 | 001,604,560 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ffmpegsumo.dll
MOD - [2013/08/17 05:39:56 | 003,551,640 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2013/07/23 07:13:59 | 016,166,280 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
MOD - [2012/03/20 12:59:04 | 003,340,288 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
MOD - [2012/02/07 12:20:12 | 002,413,568 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\ScreenCapture\ScreenCapture.dll
MOD - [2011/08/10 14:43:18 | 000,118,272 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\dll\DLL_Wheel4D.dll
MOD - [2011/04/12 16:14:04 | 000,063,488 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\dll\DLL_AnalyzeGesturesInRight.dll
MOD - [2011/03/21 20:33:16 | 000,999,424 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
MOD - [2011/01/09 21:45:54 | 000,088,064 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\dll\DLL_MouseDeviceManager.dll
MOD - [2010/12/02 18:56:52 | 000,815,104 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\OSD_Text\OSD_Text.dll
MOD - [2010/11/01 21:16:00 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\dll\DLL_AnalyzeGesturesInOne.dll
MOD - [2010/09/20 15:18:56 | 000,085,504 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\dll\DLL_ZoomControl.dll
MOD - [2010/09/20 15:18:54 | 000,054,272 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor X7\dll\DLL_ScrollbarControl.dll
========== Services (SafeList) ==========
SRV:64bit: - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013/05/09 10:58:27 | 000,137,960 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV:64bit: - [2012/12/19 21:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2012/05/04 13:33:20 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
SRV:64bit: - [2011/12/08 17:38:24 | 000,607,456 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV:64bit: - [2010/04/06 17:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV - [2013/08/17 05:39:57 | 000,117,656 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/08/07 11:42:30 | 004,308,320 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013/07/31 09:11:33 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/06/21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/06/18 19:40:39 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/05/04 01:35:30 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013/04/08 18:44:12 | 001,320,496 | ---- | M] (pdfforge GmbH) [Auto | Running] -- C:\Program Files (x86)\PDF Architect\HelperService.exe -- (PDF Architect Helper Service)
SRV - [2013/04/08 18:43:36 | 000,799,280 | ---- | M] (pdfforge GmbH) [Auto | Running] -- C:\Program Files (x86)\PDF Architect\ConversionService.exe -- (PDF Architect Service)
SRV - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2012/07/09 01:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2012/01/18 15:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011/12/16 13:30:40 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2011/12/16 13:30:38 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2011/12/16 12:02:56 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2011/12/12 12:06:06 | 002,156,952 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe -- (Správce výběru OS)
SRV - [2009/09/20 12:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/09/30 13:48:28 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2013/08/25 13:14:44 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013/06/27 21:41:31 | 001,030,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013/06/27 21:41:31 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2013/06/27 21:41:31 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013/05/09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013/05/09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013/05/09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013/05/09 10:59:06 | 000,270,824 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis2.sys -- (aswNdis2)
DRV:64bit: - [2013/05/09 10:59:06 | 000,131,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswFW.sys -- (aswFW)
DRV:64bit: - [2013/05/09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013/05/09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013/05/09 10:59:06 | 000,022,600 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd)
DRV:64bit: - [2013/03/13 19:01:59 | 000,012,368 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis.sys -- (aswNdis)
DRV:64bit: - [2012/12/19 22:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012/12/19 21:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012/12/02 17:08:12 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:64bit: - [2012/12/02 17:08:12 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:64bit: - [2012/12/01 13:02:21 | 000,310,368 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
DRV:64bit: - [2012/12/01 13:02:21 | 000,132,704 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fltsrv.sys -- (fltsrv)
DRV:64bit: - [2012/11/06 13:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012/05/04 13:33:12 | 002,196,592 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2012/03/27 10:13:18 | 000,789,272 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:64bit: - [2012/03/27 10:13:18 | 000,356,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:64bit: - [2012/03/27 10:13:17 | 000,019,224 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:64bit: - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/11/10 02:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2011/11/02 11:48:26 | 000,021,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2011/08/12 00:54:16 | 000,104,560 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE10SR
IE - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\..\SearchScopes\{237E0C77-ACE8-4197-ABD7-5A0AAA92B36F}: "URL" = http://search.conduit.com/ResultsExt.as ... =CT1750559
IE - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: 2conv%40hotger.com:1.8
FF - prefs.js..extensions.enabledAddons: youtube2mp3%40mondayx.de:1.2.3
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@nullsoft.com/winampDetector;version=1: C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/05/11 11:53:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/12/01 16:14:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFPDFArchitectConverter@pdfarchitect.com: C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013/08/25 13:16:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/08/25 12:37:54 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/12/01 16:14:03 | 000,000,000 | ---D | M]
[2012/12/01 00:07:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\bondasko\AppData\Roaming\mozilla\Extensions
[2013/05/11 04:09:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\bondasko\AppData\Roaming\mozilla\Firefox\Profiles\lmldlavy.default\extensions
[2013/02/01 15:44:29 | 000,005,780 | ---- | M] () (No name found) -- C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\extensions\2conv@hotger.com.xpi
[2013/02/01 17:18:04 | 000,011,510 | ---- | M] () (No name found) -- C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\extensions\youtube2mp3@mondayx.de.xpi
[2012/12/01 13:50:38 | 000,002,532 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\aol-search.xml
[2013/05/10 23:57:31 | 000,006,505 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\babylon.xml
[2013/08/17 05:39:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/08/17 05:39:54 | 000,000,000 | ---D | M] (Firefox) -- C:\Program Files (x86)\Mozilla Firefox\extensions\firefox@firefox.sk
[2013/08/17 05:39:54 | 000,000,000 | ---D | M] (Firefox.sk - SearchSuggest (Test)) -- C:\Program Files (x86)\Mozilla Firefox\extensions\searchsuggest@firefox.sk
[2013/08/17 05:39:54 | 000,000,000 | ---D | M] (Firefox.sk - UrlBox) -- C:\Program Files (x86)\Mozilla Firefox\extensions\urlbox@firefox.sk
[2013/08/17 05:39:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/08/17 05:39:57 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/09/21 22:03:16 | 000,003,270 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\vyhladavanie.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://google.sk/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Media Go Detector (Enabled) = C:\Program Files (x86)\Sony\Media Go\npmediago.dll
CHR - plugin: PlayStation(R)Network Downloader Check Plug-in (Enabled) = C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll
CHR - Extension: Angry Birds = C:\Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: YouTube = C:\Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: H\u013Eada\u0165 v Google = C:\Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Kontrola po\u0161ty Google = C:\Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0\
CHR - Extension: Gmail = C:\Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013/08/27 20:11:19 | 000,000,741 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (PDF Architect Helper) - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\..\Toolbar\WebBrowser: (no name) - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000..\Run: [OscarEditor] C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.34.133.21 212.186.211.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{63F31B18-1709-434F-B47A-1ED131F14D45}: DhcpNameServer = 195.34.133.21 212.186.211.21
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3c59b7e6-3c37-11e2-89fb-902b34550f7e}\Shell - "" = AutoRun
O33 - MountPoints2\{3c59b7e6-3c37-11e2-89fb-902b34550f7e}\Shell\AutoRun\command - "" = N:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.LAGS - C:\Windows\SysWow64\lagarith.dll ( )
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 30 Days ==========
[2013/09/01 14:16:05 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\bondasko\Desktop\OTL.exe
[2013/08/25 20:07:58 | 000,000,000 | ---D | C] -- C:\Users\bondasko\Documents\NeroBurnServer
[2013/08/25 20:02:16 | 000,000,000 | ---D | C] -- C:\Users\bondasko\Desktop\RK_Quarantine
[2013/08/25 17:27:22 | 000,000,000 | R--D | C] -- C:\Users\bondasko\Desktop\Nero
[2013/08/25 17:26:11 | 000,000,000 | ---D | C] -- C:\Users\bondasko\Documents\NeroVideo
[2013/08/25 16:48:35 | 000,000,000 | ---D | C] -- C:\Users\bondasko\AppData\Roaming\Malwarebytes
[2013/08/25 16:47:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/08/25 16:37:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2013/08/25 14:55:20 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/08/25 14:54:52 | 000,569,344 | ---- | C] (Pegasus Software,LLC) -- C:\Windows\SysWow64\imagr5.dll
[2013/08/25 14:54:52 | 000,544,768 | ---- | C] (Pegasus Software, LLC) -- C:\Windows\SysWow64\imagx5.dll
[2013/08/25 14:54:52 | 000,283,920 | ---- | C] (Pegasus Software, LLC) -- C:\Windows\SysWow64\ImagXpr5.dll
[2013/08/25 14:54:52 | 000,106,496 | ---- | C] (Pegasus Software) -- C:\Windows\SysWow64\TwnLib20.dll
[2013/08/25 14:54:52 | 000,038,912 | ---- | C] (Pegasus Imaging Corp.) -- C:\Windows\SysWow64\picn20.dll
[2013/08/25 14:54:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Ahead
[2013/08/25 14:54:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Ahead
[2013/08/25 14:06:23 | 000,000,000 | ---D | C] -- C:\Users\bondasko\AppData\Local\Nero
[2013/08/25 13:31:13 | 000,000,000 | ---D | C] -- C:\rsit
[2013/08/25 13:17:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
[2013/08/25 13:17:36 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCT2.OCX
[2013/08/25 13:17:36 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMAPI32.OCX
[2013/08/25 13:17:32 | 000,110,264 | ---- | C] (pdfforge GmbH) -- C:\Windows\SysNative\pdfcmon.dll
[2013/08/25 13:17:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator
[2013/08/25 13:16:34 | 000,000,000 | ---D | C] -- C:\Users\bondasko\AppData\Local\avgchrome
[2013/08/25 13:16:33 | 000,000,000 | ---D | C] -- C:\Users\bondasko\Documents\PDF Architect Files
[2013/08/25 13:16:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect
[2013/08/25 13:16:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDF Architect
[2013/08/25 13:14:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2013/08/25 13:14:44 | 000,283,064 | ---- | C] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2013/08/25 13:14:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2013/08/25 13:11:50 | 000,489,392 | ---- | C] (Ask Partner Network) -- C:\Users\bondasko\Documents\APNSetup.exe
[2013/08/25 13:11:46 | 000,000,000 | ---D | C] -- C:\Users\bondasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
[2013/08/25 12:17:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013/08/21 18:06:41 | 000,000,000 | ---D | C] -- C:\Users\bondasko\Documents\Nero
[2013/08/17 05:39:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013/08/15 03:02:33 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013/08/15 03:02:32 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013/08/15 03:02:32 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/08/15 03:02:32 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/08/15 03:02:32 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/08/15 03:02:32 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/08/15 03:02:32 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013/08/15 03:02:32 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/08/15 03:02:32 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013/08/15 03:02:32 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013/08/15 03:02:32 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/08/15 03:02:30 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/08/15 03:02:30 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/08/15 03:02:30 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/08/15 03:02:30 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/08/15 03:00:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013/08/14 21:55:07 | 001,472,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2013/08/14 21:55:07 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2013/08/14 21:55:07 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2013/08/14 21:55:02 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2013/08/14 21:55:02 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2013/08/14 21:55:02 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2013/08/14 21:55:01 | 003,913,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2013/08/14 21:55:00 | 005,550,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013/08/14 21:55:00 | 003,968,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2013/08/14 21:55:00 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2013/08/14 21:55:00 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2013/08/14 21:55:00 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2013/08/14 21:54:59 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2013/08/14 21:54:59 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2013/08/14 21:54:59 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2013/08/14 21:54:59 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2012/12/01 12:26:18 | 000,295,424 | ---- | C] (Tomas Zavodny) -- C:\Program Files (x86)\SubtitleToolCZ.exe
========== Files - Modified Within 30 Days ==========
[2013/09/01 14:18:34 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/09/01 14:15:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\bondasko\Desktop\OTL.exe
[2013/09/01 14:12:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/09/01 13:58:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/09/01 00:05:20 | 000,022,080 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/01 00:05:20 | 000,022,080 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/08/31 23:12:00 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/08/31 18:14:55 | 000,800,542 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/08/31 18:14:55 | 000,666,296 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/08/31 18:14:55 | 000,127,262 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/08/31 18:10:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/08/31 18:10:18 | 2117,844,991 | -HS- | M] () -- C:\hiberfil.sys
[2013/08/25 20:05:06 | 003,086,519 | ---- | M] () -- C:\Users\bondasko\Desktop\Untitled Project.nvc
[2013/08/25 19:46:44 | 000,923,136 | ---- | M] () -- C:\Users\bondasko\Desktop\RogueKiller.exe
[2013/08/25 14:34:08 | 000,994,642 | ---- | M] () -- C:\Users\bondasko\Desktop\adwcleaner.exe
[2013/08/25 13:31:08 | 000,935,175 | ---- | M] () -- C:\Users\bondasko\Desktop\RSITx64.exe
[2013/08/25 13:14:44 | 000,283,064 | ---- | M] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2013/08/25 13:07:24 | 000,001,234 | ---- | M] () -- C:\Users\Public\Desktop\NET Radio Rekorder.lnk
[2013/08/24 14:11:42 | 000,000,220 | ---- | M] () -- C:\Users\bondasko\Desktop\King's Bounty Armored Princess.url
[2013/08/19 13:35:58 | 000,281,688 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2013/08/19 13:35:58 | 000,281,688 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013/08/19 12:42:43 | 000,281,688 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2013/08/12 18:23:47 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2013/08/12 15:07:53 | 000,001,055 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
========== Files Created - No Company Name ==========
[2013/09/01 14:18:34 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/08/31 18:44:16 | 000,935,175 | ---- | C] () -- C:\Users\bondasko\Desktop\RSITx64.exe
[2013/08/25 19:47:26 | 000,923,136 | ---- | C] () -- C:\Users\bondasko\Desktop\RogueKiller.exe
[2013/08/25 18:16:27 | 003,086,519 | ---- | C] () -- C:\Users\bondasko\Desktop\Untitled Project.nvc
[2013/08/25 14:34:16 | 000,994,642 | ---- | C] () -- C:\Users\bondasko\Desktop\adwcleaner.exe
[2013/08/24 14:11:42 | 000,000,220 | ---- | C] () -- C:\Users\bondasko\Desktop\King's Bounty Armored Princess.url
[2013/06/18 19:40:41 | 000,281,688 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013/06/18 19:40:39 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013/05/29 19:49:31 | 000,003,584 | ---- | C] () -- C:\Users\bondasko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/03/11 13:45:45 | 000,000,096 | ---- | C] () -- C:\Users\bondasko\AppData\Local\fusioncache.dat
[2013/03/08 19:55:13 | 040,293,402 | ---- | C] () -- C:\Users\bondasko\AppData\Roaming\Legal.zip
[2013/03/08 19:55:06 | 000,772,425 | ---- | C] () -- C:\Users\bondasko\AppData\Roaming\ZakladL.zip
[2013/03/03 10:39:37 | 000,000,166 | ---- | C] () -- C:\Users\bondasko\AppData\Roaming\default.rss
[2013/03/01 18:56:06 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2012/12/27 22:22:42 | 000,669,184 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012/12/25 21:32:09 | 000,001,104 | ---- | C] () -- C:\Users\bondasko\AppData\Local\SRDownloader.nast
[2012/12/25 21:31:51 | 000,000,627 | ---- | C] () -- C:\Users\bondasko\AppData\Local\SRDownloader.err
[2012/12/02 10:05:31 | 000,007,597 | ---- | C] () -- C:\Users\bondasko\AppData\Local\Resmon.ResmonCfg
[2012/12/01 16:09:54 | 000,210,730 | ---- | C] () -- C:\Windows\hpoins21.dat
[2012/12/01 16:09:54 | 000,005,474 | ---- | C] () -- C:\Windows\hpomdl21.dat
[2012/12/01 12:14:24 | 000,001,231 | ---- | C] () -- C:\Program Files (x86)\czech.lng
[2012/12/01 12:14:20 | 000,562,176 | ---- | C] () -- C:\Program Files (x86)\Vypinac.exe
[2012/12/01 05:42:59 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2012/12/01 00:48:21 | 000,784,408 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012/11/30 23:49:35 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012/11/30 23:35:52 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2012/11/30 23:35:51 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012/11/30 23:35:51 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012/11/30 23:35:51 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012/11/30 23:35:49 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012/11/15 19:17:54 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012/11/15 19:17:54 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012/05/02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2011/12/08 17:14:58 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
[2011/09/13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
========== ZeroAccess Check ==========
[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/02/27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2012/12/01 14:02:34 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\ACD Systems
[2012/12/01 12:37:15 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\APP_NAME_NON_STRING
[2012/12/01 17:32:56 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\BSplayer
[2012/12/01 14:17:35 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\BSplayer Pro
[2013/03/01 18:11:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\DAEMON Tools Lite
[2013/01/03 20:29:17 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\DVDFab
[2013/05/11 12:43:08 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\EurekaLog
[2013/02/10 19:11:45 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\GetRightToGo
[2012/01/01 01:15:13 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\GHISLER
[2012/12/11 22:32:16 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\HellShare Upload Manager
[2013/03/08 19:55:10 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Install
[2013/03/11 14:24:00 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\LOVE
[2013/07/09 20:36:33 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Mumble
[2013/08/14 20:59:04 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Origin
[2013/03/03 17:46:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\PDF Architect
[2013/05/03 17:20:00 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Sony
[2013/01/01 16:45:47 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\TeamViewer
[2013/03/01 18:11:49 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\TS3Client
[2012/12/27 12:42:48 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\URSoft
[2013/05/09 10:52:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\UtilStudio
[2013/09/01 14:20:20 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\uTorrent
[2012/12/02 01:17:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\YoWindow
========== Purity Check ==========
========== Custom Scans ==========
< >
[2009/07/14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 07:08:49 | 000,032,520 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/11/30 22:57:30 | 000,000,936 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012/11/30 22:57:31 | 000,000,940 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012/12/01 12:15:58 | 000,000,830 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
< >
< MD5 for: AGP440.SYS >
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2010/11/21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010/11/21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe
< MD5 for: CDROM.SYS >
[2010/11/21 05:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/21 05:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/21 05:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys
< MD5 for: CNGAUDIT.DLL >
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
< MD5 for: CRYPTSVC.DLL >
[2012/06/02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2010/11/21 05:24:16 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2013/05/10 06:49:59 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=33ADF6E0853AB39EA1723BE82842C1D3 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_77d7a417f9359661\cryptsvc.dll
[2013/05/13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2013/07/09 16:47:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=434CCE8E7150CD1324C5FAA088D1D061 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll
[2013/07/09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\SysNative\cryptsvc.dll
[2013/07/09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll
[2013/07/09 15:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013/07/09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\SysWOW64\cryptsvc.dll
[2013/07/09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2012/06/04 09:52:35 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=7E7D2DACF65D750D466F36BD3D09AE20 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll
[2013/05/10 07:49:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=7FDC4626B01106A8EF328C88C7C0DEE3 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_d3f63f9bb1930797\cryptsvc.dll
[2013/05/11 07:18:23 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=8122252F0A4ACFA92FA0C1D50D18493B -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll
[2012/06/02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2012/06/02 07:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=9C01375BE382E834CC26D1B7EAF2C4FE -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll
[2010/11/21 05:24:32 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013/05/11 06:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2013/05/10 07:18:53 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=CA13C4F92BEE66DB48E58AB3223DDF6E -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_d4a14e5aca976a0c\cryptsvc.dll
[2013/05/13 07:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=D8129C49798CBBFB2E4351D4B7B8EF9C -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll
[2013/05/10 07:06:21 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=E122AA1C9A3CC46FF9DDDE46E5EB0C58 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_7882b2d71239f8d6\cryptsvc.dll
< MD5 for: EXPLORER.EXE >
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
< MD5 for: HAL.DLL >
[2010/11/21 05:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/21 05:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll
< MD5 for: IASTORV.SYS >
[2010/11/21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011/03/11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
< MD5 for: ISAPNP.SYS >
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys
< MD5 for: LSASS.EXE >
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011/11/17 08:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2012/06/04 09:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
[2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
[2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
< MD5 for: NDIS.SYS >
[2012/08/22 20:06:07 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=5E74508FCB5820B29EEAFE24E6035BCF -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_06232d534c0a8d67\ndis.sys
[2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\SysNative\drivers\ndis.sys
[2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_05dc9a6832ba428a\ndis.sys
[2010/11/21 05:23:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
< MD5 for: NETLOGON.DLL >
[2010/11/21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010/11/21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010/11/21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
< MD5 for: NVRAID.SYS >
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2010/11/21 05:23:47 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010/11/21 05:23:47 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011/03/11 08:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
< MD5 for: NVSTOR.SYS >
[2011/03/11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
< MD5 for: SCECLI.DLL >
[2010/11/21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
< MD5 for: SMSS.EXE >
[2009/07/14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe
[2013/03/19 04:57:17 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=498E2A20E145199709CD100CDBA8603D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe
[2013/07/08 04:50:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=E65601CF4BC0CF3718AFBE56A9AD846F -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22379_none_0aae4fa7491b124a\smss.exe
[2013/03/19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\SysNative\smss.exe
[2013/03/19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe
< MD5 for: SVCHOST.EXE >
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosim o preventivku
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
-
bondasko
- Vzorný návštěvník
- Příspěvky: 174
- Registrován: 18 čer 2012 16:37
- Bydliště: Presov, Slovensko
Re: Prosim o preventivku
nepouzivam diakritiku a pomoc si vazim 
-
bondasko
- Vzorný návštěvník
- Příspěvky: 174
- Registrován: 18 čer 2012 16:37
- Bydliště: Presov, Slovensko
Re: Prosim o preventivku
< MD5 for: TCPIP.SYS >
[2012/10/03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013/05/08 08:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
[2010/11/21 05:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2012/08/22 20:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
[2012/03/30 12:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2013/05/08 08:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
[2012/03/30 13:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2013/07/06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013/01/03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013/01/04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012/10/03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013/07/06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013/07/06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2012/08/22 20:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys
< MD5 for: USERINIT.EXE >
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
< MD5 for: WS2_32.DLL >
[2010/11/21 05:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010/11/21 05:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2010/11/21 05:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010/11/21 05:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
< >
< %systemroot%*.* /U /s >
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\*.tmp files -> C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\*.tmp files -> C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
[1 C:\Windows\Temp\avast_ash\uTorrent (all users)\*.tmp files -> C:\Windows\Temp\avast_ash\uTorrent (all users)\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2012/12/01 14:02:34 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\ACD Systems
[2012/12/01 01:08:03 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Adobe
[2012/12/01 12:37:15 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\APP_NAME_NON_STRING
[2012/11/30 23:50:11 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\ATI
[2012/12/01 17:32:56 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\BSplayer
[2012/12/01 14:17:35 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\BSplayer Pro
[2013/03/01 18:11:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\DAEMON Tools Lite
[2013/01/03 20:29:17 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\DVDFab
[2013/05/11 12:43:08 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\EurekaLog
[2013/02/10 19:11:45 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\GetRightToGo
[2012/01/01 01:15:13 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\GHISLER
[2012/12/11 22:32:16 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\HellShare Upload Manager
[2012/12/01 16:20:44 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\HP
[2012/12/01 05:40:53 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Identities
[2013/03/08 19:55:10 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Install
[2012/12/01 05:46:57 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\InstallShield
[2013/03/11 14:24:00 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\LOVE
[2012/12/01 12:13:13 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Macromedia
[2013/08/25 16:48:35 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Malwarebytes
[2011/04/12 15:40:51 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Media Center Programs
[2013/08/25 20:25:31 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Media Player Classic
[2013/06/30 13:56:07 | 000,000,000 | --SD | M] -- C:\Users\bondasko\AppData\Roaming\Microsoft
[2012/12/01 00:07:52 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Mozilla
[2013/07/09 20:36:33 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Mumble
[2013/05/11 12:54:09 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Nero
[2013/08/14 20:59:04 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Origin
[2013/03/03 17:46:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\PDF Architect
[2012/12/03 20:34:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Realtime Soft
[2013/03/10 19:49:23 | 000,000,000 | RH-D | M] -- C:\Users\bondasko\AppData\Roaming\SecuROM
[2013/09/01 14:20:49 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Skype
[2013/05/03 17:20:00 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Sony
[2013/01/01 16:45:47 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\TeamViewer
[2013/03/01 18:11:49 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\TS3Client
[2012/12/27 12:42:48 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\URSoft
[2013/05/09 10:52:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\UtilStudio
[2013/09/01 14:26:26 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\uTorrent
[2013/08/25 12:17:05 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\vlc
[2013/08/25 18:31:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Winamp
[2012/11/30 23:17:47 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\WinRAR
[2012/12/02 01:17:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\YoWindow
< %APPDATA%\*.exe /s >
[2013/02/17 00:47:30 | 000,334,336 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\Install\CustomCraftC.exe
[2013/02/17 00:46:31 | 000,022,472 | ---- | M] (Microsoft Corporation) -- C:\Users\bondasko\AppData\Roaming\Install\CustomCraftC.vshost.exe
[2013/02/15 03:22:13 | 000,005,120 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\Install\ShortCut.exe
[2013/02/15 03:10:58 | 000,022,472 | ---- | M] (Microsoft Corporation) -- C:\Users\bondasko\AppData\Roaming\Install\ShortCut.vshost.exe
[2013/02/15 10:56:13 | 000,005,632 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\Install\RunJava\RunJava.exe
[2013/02/15 10:56:09 | 000,022,472 | ---- | M] (Microsoft Corporation) -- C:\Users\bondasko\AppData\Roaming\Install\RunJava\RunJava.vshost.exe
[2013/01/03 20:34:15 | 000,005,430 | R--- | M] () -- C:\Users\bondasko\AppData\Roaming\Microsoft\Installer\{80074966-5231-428D-9AE7-B7D5D2DC3246}\_45E5F1A4BC29289B0B1E70.exe
[2013/01/03 20:34:15 | 000,005,430 | R--- | M] () -- C:\Users\bondasko\AppData\Roaming\Microsoft\Installer\{80074966-5231-428D-9AE7-B7D5D2DC3246}\_55F11AB420338FF650F1F4.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2013/07/26 05:11:59 | 013,761,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\ieframe.dll
[2013/05/29 02:05:49 | 000,117,248 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\iepeers.dll
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
[2013/07/26 05:11:59 | 013,761,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\ieframe.dll
[2013/05/29 02:05:49 | 000,117,248 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\iepeers.dll
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2013/08/31 18:12:25 | 000,000,018 | ---- | M] () -- C:\Windows\system32\log.txt
< %SYSTEMDRIVE%\*.exe >
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010/11/21 05:24:51 | 001,475,584 | ---- | M] (Microsoft Corporation)
"OscarEditor" = "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum -- [2012/03/20 12:59:04 | 003,340,288 | ---- | M] ()
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2013/08/01 15:13:14 | 003,673,696 | ---- | M] (Disc Soft Ltd)
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs
< >
< type c:\boot.ini >> test.txt /c >
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013/09/01 14:18:34 | 000,000,512 | ---- | M] () MD5=C15DB60FFE2A1854EDC5B2DC3D1A3822 -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2013/05/11 00:16:14 | 000,004,125 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\CrackedCom.class
[2013/08/27 16:58:10 | 000,021,062 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack01-png.sol
[2013/08/27 16:58:07 | 000,031,560 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack02-png.sol
[2013/08/27 16:58:01 | 000,025,087 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack03-png.sol
[2013/08/27 16:58:02 | 000,016,798 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack04-png.sol
[2013/08/25 16:52:51 | 000,021,062 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack01-png.sol
[2013/08/25 16:52:50 | 000,031,560 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack02-png.sol
[2013/08/25 16:52:49 | 000,025,087 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack03-png.sol
[2013/08/25 16:52:47 | 000,016,798 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack04-png.sol
[2012/12/27 23:16:14 | 000,012,116 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrack.cfx
[2012/12/27 23:16:17 | 000,012,168 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatest.cfx
[2012/12/27 23:16:17 | 000,012,536 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
[2012/12/27 23:16:19 | 000,013,084 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:20 | 000,012,436 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
[2012/12/27 23:16:19 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestshadow.cfx
[2012/12/27 23:16:14 | 000,012,484 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcracklightmap.cfx
[2012/12/27 23:16:15 | 000,013,032 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrack.cfx
[2012/12/27 23:16:18 | 000,012,756 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
[2012/12/27 23:16:18 | 000,013,096 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,013,672 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:20 | 000,012,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,060 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
[2012/12/27 23:16:16 | 000,013,636 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,012,880 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetail.cfx
[2012/12/27 23:16:18 | 000,012,916 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatest.cfx
[2012/12/27 23:16:18 | 000,013,256 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,013,832 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2012/12/27 23:16:21 | 000,012,940 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,508 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,220 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmap.cfx
[2012/12/27 23:16:17 | 000,013,796 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2012/12/27 23:16:17 | 000,012,904 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailpointlight.cfx
[2012/12/27 23:16:17 | 000,013,472 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailshadow.cfx
[2012/12/27 23:16:17 | 000,012,780 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
[2012/12/27 23:16:16 | 000,013,312 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
[2012/12/27 23:16:17 | 000,012,400 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackpointlight.cfx
[2012/12/27 23:16:15 | 000,012,668 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackshadow.cfx
[2012/12/27 23:16:14 | 000,012,296 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrack.cfx
[2012/12/27 23:16:18 | 000,012,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatest.cfx
[2012/12/27 23:16:18 | 000,012,716 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
[2012/12/27 23:16:19 | 000,013,264 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:20 | 000,012,612 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
[2012/12/27 23:16:19 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
[2012/12/27 23:16:14 | 000,012,664 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcracklightmap.cfx
[2012/12/27 23:16:16 | 000,013,212 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
[2012/12/27 23:16:18 | 000,012,936 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
[2012/12/27 23:16:18 | 000,013,276 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,013,852 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:21 | 000,012,996 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,528 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,240 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
[2012/12/27 23:16:16 | 000,013,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,013,060 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetail.cfx
[2012/12/27 23:16:18 | 000,013,096 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatest.cfx
[2012/12/27 23:16:19 | 000,013,436 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,014,012 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2012/12/27 23:16:21 | 000,013,120 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,688 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,400 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmap.cfx
[2012/12/27 23:16:17 | 000,013,976 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2012/12/27 23:16:17 | 000,013,084 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailpointlight.cfx
[2012/12/27 23:16:17 | 000,013,652 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailshadow.cfx
[2012/12/27 23:16:17 | 000,012,960 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
[2012/12/27 23:16:16 | 000,013,492 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
[2012/12/27 23:16:17 | 000,012,576 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackpointlight.cfx
[2012/12/27 23:16:15 | 000,012,848 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackshadow.cfx
[2013/02/28 21:15:52 | 000,012,116 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrack.cfx
[2013/02/28 21:15:55 | 000,012,168 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatest.cfx
[2013/02/28 21:15:55 | 000,012,536 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
[2013/02/28 21:15:56 | 000,013,084 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,436 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
[2013/02/28 21:15:56 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestshadow.cfx
[2013/02/28 21:15:52 | 000,012,484 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcracklightmap.cfx
[2013/02/28 21:15:53 | 000,013,032 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcracklightmapshadow.cfx
[2013/02/28 21:15:52 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrack.cfx
[2013/02/28 21:15:56 | 000,012,756 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
[2013/02/28 21:15:56 | 000,013,096 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
[2013/02/28 21:15:57 | 000,013,672 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
[2013/02/28 21:15:57 | 000,013,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
[2013/02/28 21:15:52 | 000,013,060 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
[2013/02/28 21:15:54 | 000,013,636 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
[2013/02/28 21:15:53 | 000,012,836 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetail.cfx
[2013/02/28 21:15:56 | 000,012,872 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatest.cfx
[2013/02/28 21:15:56 | 000,013,212 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2013/02/28 21:15:57 | 000,013,788 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,924 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2013/02/28 21:15:57 | 000,013,464 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2013/02/28 21:15:53 | 000,013,176 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmap.cfx
[2013/02/28 21:15:54 | 000,013,752 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2013/02/28 21:15:55 | 000,012,888 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailpointlight.cfx
[2013/02/28 21:15:54 | 000,013,428 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailshadow.cfx
[2013/02/28 21:15:55 | 000,012,780 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
[2013/02/28 21:15:54 | 000,013,312 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
[2013/02/28 21:15:54 | 000,012,400 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackpointlight.cfx
[2013/02/28 21:15:53 | 000,012,668 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackshadow.cfx
[2013/02/28 21:15:52 | 000,012,296 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrack.cfx
[2013/02/28 21:15:55 | 000,012,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatest.cfx
[2013/02/28 21:15:55 | 000,012,716 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
[2013/02/28 21:15:56 | 000,013,264 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,612 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
[2013/02/28 21:15:56 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
[2013/02/28 21:15:52 | 000,012,664 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcracklightmap.cfx
[2013/02/28 21:15:53 | 000,013,212 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
[2013/02/28 21:15:53 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
[2013/02/28 21:15:56 | 000,012,936 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
[2013/02/28 21:15:56 | 000,013,276 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
[2013/02/28 21:15:57 | 000,013,852 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,996 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
[2013/02/28 21:15:57 | 000,013,528 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
[2013/02/28 21:15:53 | 000,013,240 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
[2013/02/28 21:15:54 | 000,013,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
[2013/02/28 21:15:53 | 000,013,016 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetail.cfx
[2013/02/28 21:15:56 | 000,013,052 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatest.cfx
[2013/02/28 21:15:56 | 000,013,392 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2013/02/28 21:15:58 | 000,013,968 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,013,104 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2013/02/28 21:15:58 | 000,013,644 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2013/02/28 21:15:53 | 000,013,356 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmap.cfx
[2013/02/28 21:15:54 | 000,013,932 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2013/02/28 21:15:55 | 000,013,068 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailpointlight.cfx
[2013/02/28 21:15:54 | 000,013,608 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailshadow.cfx
[2013/02/28 21:15:55 | 000,012,960 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
[2013/02/28 21:15:54 | 000,013,492 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
[2013/02/28 21:15:54 | 000,012,576 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackpointlight.cfx
[2013/02/28 21:15:53 | 000,012,848 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackshadow.cfx
< *keygen* /s >
< *AntiWPA* /s >
< *loader* /s >
[2011/11/17 01:19:06 | 002,451,712 | ---- | M] () -- \Program Files (x86)\ACD Systems\ACDSee\14.0\PlugIns\CX_Ftpuploader.apl
[2009/02/06 12:09:18 | 000,042,739 | ---- | M] () -- \Program Files (x86)\ACD Systems\ACDSee\14.0\PlugIns\CX_Ftpuploader.chm
[2006/10/26 14:40:34 | 000,057,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006/10/26 14:40:34 | 000,005,120 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2009/05/21 21:21:18 | 000,007,507 | ---- | M] () -- \Program Files (x86)\HP\Digital Imaging\HelpViewer\Resources\Loader.swf
[2009/09/20 13:15:26 | 000,030,776 | ---- | M] () -- \Program Files (x86)\HP\Digital Imaging\smart web printing\RsrcLoaderLib.dll
[2009/09/20 13:15:26 | 000,002,713 | ---- | M] () -- \Program Files (x86)\HP\Digital Imaging\smart web printing\MozillaAddOn3\xre\components\uriloader.xpt
[2012/05/22 09:43:16 | 000,214,528 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.exe
[2012/05/22 09:43:16 | 000,593,293 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.jar
[2012/05/22 09:43:16 | 000,218,816 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloaderBETA.exe
[2012/05/22 09:43:16 | 000,218,816 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloaderD3D.exe
[2012/05/22 09:43:16 | 000,219,264 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloaderPortable.exe
[2012/12/01 12:25:53 | 000,000,105 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\img\hosterlogos\uploader.pl.png
[2012/12/01 18:16:38 | 000,011,071 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\MyDownloaderNet.class
[2013/02/19 19:54:21 | 000,004,584 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\OmpLoaderOrg.class
[2013/08/25 12:35:11 | 000,003,880 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\UploaderJp.class
[2012/12/01 18:16:06 | 000,007,073 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\UploaderPl.class
[2012/05/22 09:43:16 | 000,032,222 | ---- | M] () -- \Program Files (x86)\JDownloader\licenses\jdownloader.license
[2012/11/15 15:00:16 | 000,001,702 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\licenses\loaderbinarylegal.txt
[2012/11/16 12:43:36 | 000,329,056 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2012/11/16 12:42:52 | 000,294,400 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\uplay_r1_loader.dll
[2012/11/30 23:26:05 | 000,000,948 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2012/11/30 23:26:05 | 000,000,411 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\config\Modules\org-openide-loaders.xml
[2012/11/30 23:26:05 | 001,170,520 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\modules\org-openide-loaders.jar
[2012/11/30 23:26:05 | 000,006,244 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar
[2012/11/30 23:26:05 | 000,005,873 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar
[2012/11/30 23:26:05 | 000,000,457 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\update_tracking\org-openide-loaders.xml
[2012/06/09 20:19:37 | 000,055,296 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2012/12/01 12:25:12 | 000,001,949 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
[2012/12/01 12:25:12 | 000,001,928 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2012/12/01 12:25:12 | 000,002,005 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2012/12/14 19:15:04 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2008/09/19 14:55:44 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012/12/04 18:00:50 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012/12/04 18:00:50 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012/12/04 18:00:50 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2012/12/01 12:25:12 | 000,001,949 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
[2012/12/01 12:25:12 | 000,001,928 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2012/12/01 12:25:12 | 000,002,005 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2012/12/14 19:15:04 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2008/09/19 14:55:44 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012/12/04 18:00:50 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012/12/04 18:00:50 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012/12/04 18:00:50 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2012/12/25 21:33:29 | 000,000,627 | ---- | M] () -- \Users\bondasko\AppData\Local\SRDownloader.err
[2012/12/25 21:33:37 | 000,001,104 | ---- | M] () -- \Users\bondasko\AppData\Local\SRDownloader.nast
[2013/08/25 17:53:06 | 000,109,505 | ---- | M] () -- \Users\bondasko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YB50BYQA\AdLoader-3ce32d357de39fd9427f374be93bd0ac.min[1].js
[2013/08/25 17:53:06 | 000,001,511 | ---- | M] () -- \Users\bondasko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZNL86SC9\AdLoader[1].htm
[2012/12/01 12:25:14 | 000,002,005 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk
[2012/12/01 12:25:14 | 000,002,041 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\JDownloader.lnk
[2012/12/01 12:25:14 | 000,002,041 | ---- | M] () -- \Users\bondasko\Desktop\Programy\JDownloader.lnk
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 20:38:32 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 20:09:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/07/08 07:11:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_692597a0abb965cc\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/04/12 15:30:21 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2011/04/12 15:30:21 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2011/04/12 15:30:21 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2011/04/12 15:30:21 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2011/04/12 15:30:21 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2012/11/30 23:16:16 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2012/11/30 23:16:16 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2012/11/30 23:16:16 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2012/11/30 23:16:16 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2012/11/30 23:16:16 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2011/04/12 15:29:23 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2010/11/21 05:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/07/08 06:59:24 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_0d06fc1cf35bf496\api-ms-win-core-libraryloader-l1-1-0.dll
< *minodlogin* /s >
< *tnod* /s >
< *AutoKMS* /s >
< *activator* /s >
< *serial* /s >
[2012/12/19 19:59:02 | 000,591,336 | ---- | M] () -- \Program Files (x86)\Nero\KM\SerialHelper.exe
[2013/01/10 17:07:38 | 000,060,752 | R--- | M] () -- \Program Files (x86)\Nero\Nero 12\Nero Recode\RecodeCore.XmlSerializers.dll
[2013/02/15 14:20:50 | 000,248,144 | ---- | M] () -- \Program Files (x86)\Nero\Nero Blu-ray Player\boost_serialization-mt.dll
[2013/02/15 14:20:50 | 000,167,760 | ---- | M] () -- \Program Files (x86)\Nero\Nero Blu-ray Player\boost_wserialization-mt.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2012/11/15 14:56:16 | 000,026,802 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.serialio.win32.x86_2.12.12.1.jar
[2012/11/15 14:56:12 | 000,049,529 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.serialio_2.12.14.20.jar
[2012/11/15 15:01:18 | 000,006,322 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.sonyericsson.cs.serialcommunication_2.12.14.20.jar
[2012/11/30 23:26:04 | 000,014,792 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\bin\serialver.exe
[2012/10/05 12:52:37 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2009/05/21 19:57:00 | 000,004,185 | ---- | M] () -- \ProgramData\HP\LGT\Data\Models\Images\identifying_serial.jpg
[2009/05/21 19:57:00 | 000,004,185 | ---- | M] () -- \Users\All Users\HP\LGT\Data\Models\Images\identifying_serial.jpg
[2013/03/10 19:48:18 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013/08/15 03:19:47 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d462f459c4353e2c628e6def1430aed7\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:28:40 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e043ad64456256a8ee5b934e227d9782\System.Runtime.Serialization.ni.dll
[2013/08/15 03:21:04 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\845e04461d3d879b24c5b0d30947050a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:25:51 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\dbfc784cc4bde7b16fb471e14563569d\System.Runtime.Serialization.ni.dll
[2013/08/15 03:01:58 | 000,304,640 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\1729a1c27c4c29abc3a3982df67c3e9d\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:01:58 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\1729a1c27c4c29abc3a3982df67c3e9d\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2013/08/15 03:02:03 | 002,786,816 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\a46953d62d9923cfd393cb102df2e6ad\System.Runtime.Serialization.ni.dll
[2013/08/15 03:02:03 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\a46953d62d9923cfd393cb102df2e6ad\System.Runtime.Serialization.ni.dll.aux
[2013/07/12 08:30:39 | 000,026,624 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\e9ae6390ba678193c056e647edb44849\System.Xml.Serialization.ni.dll
[2013/07/12 08:30:39 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\e9ae6390ba678193c056e647edb44849\System.Xml.Serialization.ni.dll.aux
[2013/08/15 03:06:36 | 000,373,248 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\6306ff71e246e8da5d0fb73a2c9c7766\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:06:36 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\6306ff71e246e8da5d0fb73a2c9c7766\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2013/08/15 03:07:34 | 003,602,944 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\fbb390c869765b459962a1d40c81d260\System.Runtime.Serialization.ni.dll
[2013/08/15 03:07:34 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\fbb390c869765b459962a1d40c81d260\System.Runtime.Serialization.ni.dll.aux
[2013/07/12 08:29:15 | 000,028,672 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\a2556a1137fbb8361cee016477e7f692\System.Xml.Serialization.ni.dll
[2013/07/12 08:29:15 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\a2556a1137fbb8361cee016477e7f692\System.Xml.Serialization.ni.dll.aux
[2012/07/09 01:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\0D741DA1E0EBC6D3CA11466FCD14361F\4.5.50709\System.Runtime.Serialization.dll.amd64
[2012/07/09 01:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\0D741DA1E0EBC6D3CA11466FCD14361F\4.5.50709\System.Runtime.Serialization.dll.x86
[2012/07/09 01:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\0D741DA1E0EBC6D3CA11466FCD14361F\4.5.50709\System.Runtime.Serialization.dll_gac_x86
[2012/07/09 01:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/07/09 01:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Json\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Json.dll
[2012/07/09 01:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll
[2012/07/09 01:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Xml\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Xml.dll
[2013/02/22 00:48:22 | 001,051,272 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012/07/09 01:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2012/07/09 01:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Xml.XmlSerializer.dll
[2003/02/21 08:26:56 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013/02/22 00:48:22 | 001,051,272 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2012/07/09 01:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2012/07/09 01:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Json.dll
[2012/07/09 01:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2012/07/09 01:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2012/07/09 01:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2012/07/09 01:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.XmlSerializer.dll
[2009/06/10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013/02/22 00:48:22 | 001,051,272 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2012/07/09 01:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2012/07/09 01:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll
[2012/07/09 01:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2012/07/09 01:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2012/07/09 01:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2012/07/09 01:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009/07/14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009/06/10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2011/04/12 15:29:55 | 000,005,120 | ---- | M] () -- \Windows\System32\sk-SK\serialui.dll.mui
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2011/04/12 15:29:55 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\sk-SK\serialui.dll.mui
[2011/04/12 15:29:54 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_d5f23af62a751552\serialui.dll.mui
[2009/07/14 03:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2011/04/12 15:30:00 | 000,010,240 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_64015f894ce7c72a\serial.sys.mui
[2009/07/14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009/06/10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2010/11/21 05:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012/10/05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2012/10/05 12:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2010/11/21 05:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012/10/05 12:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2012/10/05 12:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2012/11/30 23:16:16 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2012/11/30 23:16:16 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2011/04/12 15:30:21 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_d5f23af62a751552_serialui.dll.mui_7d29d2a3
[2009/07/14 04:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2011/04/12 15:30:21 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_79d39f727217a41c_serialui.dll.mui_7d29d2a3
[2009/07/14 04:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009/07/14 04:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011/02/05 19:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/02/05 15:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009/07/14 04:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2010/11/21 05:17:50 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012/10/05 20:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2012/10/05 20:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2010/11/21 05:17:50 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012/10/05 20:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2012/10/05 20:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2010/11/21 05:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012/10/05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012/10/05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2011/04/12 15:29:30 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_en-us_8f71d563bf7aa3c2.manifest
[2012/10/05 20:09:41 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_en-us_8f4bb639bfcd9db1.manifest
[2012/10/05 19:57:17 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_en-us_787a117bd97892a9.manifest
[2010/11/21 05:17:50 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012/10/05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012/10/05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2010/11/21 05:18:20 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012/10/05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012/10/05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2010/11/21 05:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012/10/05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012/10/05 12:56:07 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2010/11/21 05:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012/10/05 12:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2011/04/12 15:29:55 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_79d39f727217a41c\serialui.dll.mui
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2010/11/21 05:25:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012/10/05 12:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll
< *w7lxe* /s >
========== Alternate Data Streams ==========
@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 178 bytes -> C:\ProgramData\TEMP:1CE11B51
< End of report >
[2012/10/03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013/05/08 08:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
[2010/11/21 05:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2012/08/22 20:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
[2012/03/30 12:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2013/05/08 08:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
[2012/03/30 13:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2013/07/06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013/01/03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013/01/04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012/10/03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013/07/06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013/07/06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2012/08/22 20:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys
< MD5 for: USERINIT.EXE >
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
< MD5 for: WS2_32.DLL >
[2010/11/21 05:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010/11/21 05:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2010/11/21 05:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010/11/21 05:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
< >
< %systemroot%*.* /U /s >
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\*.tmp files -> C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\*.tmp files -> C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
[1 C:\Windows\Temp\avast_ash\uTorrent (all users)\*.tmp files -> C:\Windows\Temp\avast_ash\uTorrent (all users)\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2012/12/01 14:02:34 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\ACD Systems
[2012/12/01 01:08:03 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Adobe
[2012/12/01 12:37:15 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\APP_NAME_NON_STRING
[2012/11/30 23:50:11 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\ATI
[2012/12/01 17:32:56 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\BSplayer
[2012/12/01 14:17:35 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\BSplayer Pro
[2013/03/01 18:11:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\DAEMON Tools Lite
[2013/01/03 20:29:17 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\DVDFab
[2013/05/11 12:43:08 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\EurekaLog
[2013/02/10 19:11:45 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\GetRightToGo
[2012/01/01 01:15:13 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\GHISLER
[2012/12/11 22:32:16 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\HellShare Upload Manager
[2012/12/01 16:20:44 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\HP
[2012/12/01 05:40:53 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Identities
[2013/03/08 19:55:10 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Install
[2012/12/01 05:46:57 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\InstallShield
[2013/03/11 14:24:00 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\LOVE
[2012/12/01 12:13:13 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Macromedia
[2013/08/25 16:48:35 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Malwarebytes
[2011/04/12 15:40:51 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Media Center Programs
[2013/08/25 20:25:31 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Media Player Classic
[2013/06/30 13:56:07 | 000,000,000 | --SD | M] -- C:\Users\bondasko\AppData\Roaming\Microsoft
[2012/12/01 00:07:52 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Mozilla
[2013/07/09 20:36:33 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Mumble
[2013/05/11 12:54:09 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Nero
[2013/08/14 20:59:04 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Origin
[2013/03/03 17:46:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\PDF Architect
[2012/12/03 20:34:50 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Realtime Soft
[2013/03/10 19:49:23 | 000,000,000 | RH-D | M] -- C:\Users\bondasko\AppData\Roaming\SecuROM
[2013/09/01 14:20:49 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Skype
[2013/05/03 17:20:00 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Sony
[2013/01/01 16:45:47 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\TeamViewer
[2013/03/01 18:11:49 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\TS3Client
[2012/12/27 12:42:48 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\URSoft
[2013/05/09 10:52:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\UtilStudio
[2013/09/01 14:26:26 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\uTorrent
[2013/08/25 12:17:05 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\vlc
[2013/08/25 18:31:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\Winamp
[2012/11/30 23:17:47 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\WinRAR
[2012/12/02 01:17:07 | 000,000,000 | ---D | M] -- C:\Users\bondasko\AppData\Roaming\YoWindow
< %APPDATA%\*.exe /s >
[2013/02/17 00:47:30 | 000,334,336 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\Install\CustomCraftC.exe
[2013/02/17 00:46:31 | 000,022,472 | ---- | M] (Microsoft Corporation) -- C:\Users\bondasko\AppData\Roaming\Install\CustomCraftC.vshost.exe
[2013/02/15 03:22:13 | 000,005,120 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\Install\ShortCut.exe
[2013/02/15 03:10:58 | 000,022,472 | ---- | M] (Microsoft Corporation) -- C:\Users\bondasko\AppData\Roaming\Install\ShortCut.vshost.exe
[2013/02/15 10:56:13 | 000,005,632 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\Install\RunJava\RunJava.exe
[2013/02/15 10:56:09 | 000,022,472 | ---- | M] (Microsoft Corporation) -- C:\Users\bondasko\AppData\Roaming\Install\RunJava\RunJava.vshost.exe
[2013/01/03 20:34:15 | 000,005,430 | R--- | M] () -- C:\Users\bondasko\AppData\Roaming\Microsoft\Installer\{80074966-5231-428D-9AE7-B7D5D2DC3246}\_45E5F1A4BC29289B0B1E70.exe
[2013/01/03 20:34:15 | 000,005,430 | R--- | M] () -- C:\Users\bondasko\AppData\Roaming\Microsoft\Installer\{80074966-5231-428D-9AE7-B7D5D2DC3246}\_55F11AB420338FF650F1F4.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2013/07/26 05:11:59 | 013,761,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\ieframe.dll
[2013/05/29 02:05:49 | 000,117,248 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\iepeers.dll
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
[2013/07/26 05:11:59 | 013,761,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\ieframe.dll
[2013/05/29 02:05:49 | 000,117,248 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\iepeers.dll
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2013/08/31 18:12:25 | 000,000,018 | ---- | M] () -- C:\Windows\system32\log.txt
< %SYSTEMDRIVE%\*.exe >
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010/11/21 05:24:51 | 001,475,584 | ---- | M] (Microsoft Corporation)
"OscarEditor" = "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum -- [2012/03/20 12:59:04 | 003,340,288 | ---- | M] ()
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2013/08/01 15:13:14 | 003,673,696 | ---- | M] (Disc Soft Ltd)
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs
< >
< type c:\boot.ini >> test.txt /c >
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013/09/01 14:18:34 | 000,000,512 | ---- | M] () MD5=C15DB60FFE2A1854EDC5B2DC3D1A3822 -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2013/05/11 00:16:14 | 000,004,125 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\CrackedCom.class
[2013/08/27 16:58:10 | 000,021,062 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack01-png.sol
[2013/08/27 16:58:07 | 000,031,560 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack02-png.sol
[2013/08/27 16:58:01 | 000,025,087 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack03-png.sol
[2013/08/27 16:58:02 | 000,016,798 | ---- | M] () -- \Users\bondasko\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\23TGYUS7\s2014-wartune.r2games.com\mapmaterial-floo#\r-dungeon-floor-crack04-png.sol
[2013/08/25 16:52:51 | 000,021,062 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack01-png.sol
[2013/08/25 16:52:50 | 000,031,560 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack02-png.sol
[2013/08/25 16:52:49 | 000,025,087 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack03-png.sol
[2013/08/25 16:52:47 | 000,016,798 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C5GHZFPM\s2014-wartune.r2games.com\mapmaterial-floor-dungeon-floor-crack04-png.sol
[2012/12/27 23:16:14 | 000,012,116 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrack.cfx
[2012/12/27 23:16:17 | 000,012,168 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatest.cfx
[2012/12/27 23:16:17 | 000,012,536 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
[2012/12/27 23:16:19 | 000,013,084 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:20 | 000,012,436 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
[2012/12/27 23:16:19 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackalphatestshadow.cfx
[2012/12/27 23:16:14 | 000,012,484 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcracklightmap.cfx
[2012/12/27 23:16:15 | 000,013,032 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrack.cfx
[2012/12/27 23:16:18 | 000,012,756 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
[2012/12/27 23:16:18 | 000,013,096 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,013,672 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:20 | 000,012,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,060 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
[2012/12/27 23:16:16 | 000,013,636 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,012,880 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetail.cfx
[2012/12/27 23:16:18 | 000,012,916 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatest.cfx
[2012/12/27 23:16:18 | 000,013,256 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,013,832 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2012/12/27 23:16:21 | 000,012,940 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,508 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,220 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmap.cfx
[2012/12/27 23:16:17 | 000,013,796 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2012/12/27 23:16:17 | 000,012,904 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailpointlight.cfx
[2012/12/27 23:16:17 | 000,013,472 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailshadow.cfx
[2012/12/27 23:16:17 | 000,012,780 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
[2012/12/27 23:16:16 | 000,013,312 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
[2012/12/27 23:16:17 | 000,012,400 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackpointlight.cfx
[2012/12/27 23:16:15 | 000,012,668 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetailcrackshadow.cfx
[2012/12/27 23:16:14 | 000,012,296 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrack.cfx
[2012/12/27 23:16:18 | 000,012,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatest.cfx
[2012/12/27 23:16:18 | 000,012,716 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
[2012/12/27 23:16:19 | 000,013,264 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:20 | 000,012,612 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
[2012/12/27 23:16:19 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
[2012/12/27 23:16:14 | 000,012,664 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcracklightmap.cfx
[2012/12/27 23:16:16 | 000,013,212 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
[2012/12/27 23:16:18 | 000,012,936 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
[2012/12/27 23:16:18 | 000,013,276 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,013,852 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
[2012/12/27 23:16:21 | 000,012,996 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,528 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,240 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
[2012/12/27 23:16:16 | 000,013,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
[2012/12/27 23:16:15 | 000,013,060 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetail.cfx
[2012/12/27 23:16:18 | 000,013,096 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatest.cfx
[2012/12/27 23:16:19 | 000,013,436 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2012/12/27 23:16:20 | 000,014,012 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2012/12/27 23:16:21 | 000,013,120 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2012/12/27 23:16:20 | 000,013,688 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2012/12/27 23:16:15 | 000,013,400 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmap.cfx
[2012/12/27 23:16:17 | 000,013,976 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2012/12/27 23:16:17 | 000,013,084 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailpointlight.cfx
[2012/12/27 23:16:17 | 000,013,652 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailshadow.cfx
[2012/12/27 23:16:17 | 000,012,960 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
[2012/12/27 23:16:16 | 000,013,492 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
[2012/12/27 23:16:17 | 000,012,576 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackpointlight.cfx
[2012/12/27 23:16:15 | 000,012,848 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7973-5C05BEC2C535}_2965_3\rashaderstmbasedetaildirtcrackshadow.cfx
[2013/02/28 21:15:52 | 000,012,116 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrack.cfx
[2013/02/28 21:15:55 | 000,012,168 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatest.cfx
[2013/02/28 21:15:55 | 000,012,536 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
[2013/02/28 21:15:56 | 000,013,084 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,436 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
[2013/02/28 21:15:56 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackalphatestshadow.cfx
[2013/02/28 21:15:52 | 000,012,484 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcracklightmap.cfx
[2013/02/28 21:15:53 | 000,013,032 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcracklightmapshadow.cfx
[2013/02/28 21:15:52 | 000,012,720 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrack.cfx
[2013/02/28 21:15:56 | 000,012,756 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
[2013/02/28 21:15:56 | 000,013,096 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
[2013/02/28 21:15:57 | 000,013,672 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
[2013/02/28 21:15:57 | 000,013,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
[2013/02/28 21:15:52 | 000,013,060 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
[2013/02/28 21:15:54 | 000,013,636 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
[2013/02/28 21:15:53 | 000,012,836 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetail.cfx
[2013/02/28 21:15:56 | 000,012,872 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatest.cfx
[2013/02/28 21:15:56 | 000,013,212 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2013/02/28 21:15:57 | 000,013,788 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,924 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2013/02/28 21:15:57 | 000,013,464 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2013/02/28 21:15:53 | 000,013,176 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmap.cfx
[2013/02/28 21:15:54 | 000,013,752 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2013/02/28 21:15:55 | 000,012,888 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailpointlight.cfx
[2013/02/28 21:15:54 | 000,013,428 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackparallaxdetailshadow.cfx
[2013/02/28 21:15:55 | 000,012,780 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
[2013/02/28 21:15:54 | 000,013,312 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
[2013/02/28 21:15:54 | 000,012,400 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackpointlight.cfx
[2013/02/28 21:15:53 | 000,012,668 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetailcrackshadow.cfx
[2013/02/28 21:15:52 | 000,012,296 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrack.cfx
[2013/02/28 21:15:55 | 000,012,348 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatest.cfx
[2013/02/28 21:15:55 | 000,012,716 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
[2013/02/28 21:15:56 | 000,013,264 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,612 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
[2013/02/28 21:15:56 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
[2013/02/28 21:15:52 | 000,012,664 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcracklightmap.cfx
[2013/02/28 21:15:53 | 000,013,212 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
[2013/02/28 21:15:53 | 000,012,900 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
[2013/02/28 21:15:56 | 000,012,936 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
[2013/02/28 21:15:56 | 000,013,276 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
[2013/02/28 21:15:57 | 000,013,852 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,012,996 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
[2013/02/28 21:15:57 | 000,013,528 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
[2013/02/28 21:15:53 | 000,013,240 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
[2013/02/28 21:15:54 | 000,013,816 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
[2013/02/28 21:15:53 | 000,013,016 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetail.cfx
[2013/02/28 21:15:56 | 000,013,052 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatest.cfx
[2013/02/28 21:15:56 | 000,013,392 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmap.cfx
[2013/02/28 21:15:58 | 000,013,968 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
[2013/02/28 21:15:58 | 000,013,104 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestpointlight.cfx
[2013/02/28 21:15:58 | 000,013,644 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestshadow.cfx
[2013/02/28 21:15:53 | 000,013,356 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmap.cfx
[2013/02/28 21:15:54 | 000,013,932 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmapshadow.cfx
[2013/02/28 21:15:55 | 000,013,068 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailpointlight.cfx
[2013/02/28 21:15:54 | 000,013,608 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackparallaxdetailshadow.cfx
[2013/02/28 21:15:55 | 000,012,960 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
[2013/02/28 21:15:54 | 000,013,492 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
[2013/02/28 21:15:54 | 000,012,576 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackpointlight.cfx
[2013/02/28 21:15:53 | 000,012,848 | ---- | M] () -- \Users\bondasko\Documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-2B7D-11CF-7C73-5C05BEC2C535}_3153_3\rashaderstmbasedetaildirtcrackshadow.cfx
< *keygen* /s >
< *AntiWPA* /s >
< *loader* /s >
[2011/11/17 01:19:06 | 002,451,712 | ---- | M] () -- \Program Files (x86)\ACD Systems\ACDSee\14.0\PlugIns\CX_Ftpuploader.apl
[2009/02/06 12:09:18 | 000,042,739 | ---- | M] () -- \Program Files (x86)\ACD Systems\ACDSee\14.0\PlugIns\CX_Ftpuploader.chm
[2006/10/26 14:40:34 | 000,057,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006/10/26 14:40:34 | 000,005,120 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2009/05/21 21:21:18 | 000,007,507 | ---- | M] () -- \Program Files (x86)\HP\Digital Imaging\HelpViewer\Resources\Loader.swf
[2009/09/20 13:15:26 | 000,030,776 | ---- | M] () -- \Program Files (x86)\HP\Digital Imaging\smart web printing\RsrcLoaderLib.dll
[2009/09/20 13:15:26 | 000,002,713 | ---- | M] () -- \Program Files (x86)\HP\Digital Imaging\smart web printing\MozillaAddOn3\xre\components\uriloader.xpt
[2012/05/22 09:43:16 | 000,214,528 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.exe
[2012/05/22 09:43:16 | 000,593,293 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.jar
[2012/05/22 09:43:16 | 000,218,816 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloaderBETA.exe
[2012/05/22 09:43:16 | 000,218,816 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloaderD3D.exe
[2012/05/22 09:43:16 | 000,219,264 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloaderPortable.exe
[2012/12/01 12:25:53 | 000,000,105 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\img\hosterlogos\uploader.pl.png
[2012/12/01 18:16:38 | 000,011,071 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\MyDownloaderNet.class
[2013/02/19 19:54:21 | 000,004,584 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\OmpLoaderOrg.class
[2013/08/25 12:35:11 | 000,003,880 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\UploaderJp.class
[2012/12/01 18:16:06 | 000,007,073 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\UploaderPl.class
[2012/05/22 09:43:16 | 000,032,222 | ---- | M] () -- \Program Files (x86)\JDownloader\licenses\jdownloader.license
[2012/11/15 15:00:16 | 000,001,702 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\licenses\loaderbinarylegal.txt
[2012/11/16 12:43:36 | 000,329,056 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2012/11/16 12:42:52 | 000,294,400 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\uplay_r1_loader.dll
[2012/11/30 23:26:05 | 000,000,948 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2012/11/30 23:26:05 | 000,000,411 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\config\Modules\org-openide-loaders.xml
[2012/11/30 23:26:05 | 001,170,520 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\modules\org-openide-loaders.jar
[2012/11/30 23:26:05 | 000,006,244 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar
[2012/11/30 23:26:05 | 000,005,873 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar
[2012/11/30 23:26:05 | 000,000,457 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\lib\visualvm\platform\update_tracking\org-openide-loaders.xml
[2012/06/09 20:19:37 | 000,055,296 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2012/12/01 12:25:12 | 000,001,949 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
[2012/12/01 12:25:12 | 000,001,928 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2012/12/01 12:25:12 | 000,002,005 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2012/12/14 19:15:04 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2008/09/19 14:55:44 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012/12/04 18:00:50 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012/12/04 18:00:50 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012/12/04 18:00:50 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2012/12/01 12:25:12 | 000,001,949 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
[2012/12/01 12:25:12 | 000,001,928 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2012/12/01 12:25:12 | 000,002,005 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2012/12/14 19:15:04 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2008/09/19 14:55:44 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012/12/04 18:00:50 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012/12/04 18:00:50 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012/12/04 18:00:50 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2012/12/25 21:33:29 | 000,000,627 | ---- | M] () -- \Users\bondasko\AppData\Local\SRDownloader.err
[2012/12/25 21:33:37 | 000,001,104 | ---- | M] () -- \Users\bondasko\AppData\Local\SRDownloader.nast
[2013/08/25 17:53:06 | 000,109,505 | ---- | M] () -- \Users\bondasko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YB50BYQA\AdLoader-3ce32d357de39fd9427f374be93bd0ac.min[1].js
[2013/08/25 17:53:06 | 000,001,511 | ---- | M] () -- \Users\bondasko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZNL86SC9\AdLoader[1].htm
[2012/12/01 12:25:14 | 000,002,005 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk
[2012/12/01 12:25:14 | 000,002,041 | ---- | M] () -- \Users\bondasko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\JDownloader.lnk
[2012/12/01 12:25:14 | 000,002,041 | ---- | M] () -- \Users\bondasko\Desktop\Programy\JDownloader.lnk
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 20:38:32 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 07:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 20:09:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/07/08 07:11:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_692597a0abb965cc\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/04/12 15:30:21 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2011/04/12 15:30:21 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2011/04/12 15:30:21 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2011/04/12 15:30:21 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2011/04/12 15:30:21 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2012/11/30 23:16:16 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2012/11/30 23:16:16 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2012/11/30 23:16:16 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2012/11/30 23:16:16 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2012/11/30 23:16:16 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2011/04/12 15:29:23 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2010/11/21 05:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/07/08 06:59:24 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_0d06fc1cf35bf496\api-ms-win-core-libraryloader-l1-1-0.dll
< *minodlogin* /s >
< *tnod* /s >
< *AutoKMS* /s >
< *activator* /s >
< *serial* /s >
[2012/12/19 19:59:02 | 000,591,336 | ---- | M] () -- \Program Files (x86)\Nero\KM\SerialHelper.exe
[2013/01/10 17:07:38 | 000,060,752 | R--- | M] () -- \Program Files (x86)\Nero\Nero 12\Nero Recode\RecodeCore.XmlSerializers.dll
[2013/02/15 14:20:50 | 000,248,144 | ---- | M] () -- \Program Files (x86)\Nero\Nero Blu-ray Player\boost_serialization-mt.dll
[2013/02/15 14:20:50 | 000,167,760 | ---- | M] () -- \Program Files (x86)\Nero\Nero Blu-ray Player\boost_wserialization-mt.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2012/11/15 14:56:16 | 000,026,802 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.serialio.win32.x86_2.12.12.1.jar
[2012/11/15 14:56:12 | 000,049,529 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.serialio_2.12.14.20.jar
[2012/11/15 15:01:18 | 000,006,322 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.sonyericsson.cs.serialcommunication_2.12.14.20.jar
[2012/11/30 23:26:04 | 000,014,792 | ---- | M] () -- \Program Files\Java\jdk1.7.0_09\bin\serialver.exe
[2012/10/05 12:52:37 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2009/05/21 19:57:00 | 000,004,185 | ---- | M] () -- \ProgramData\HP\LGT\Data\Models\Images\identifying_serial.jpg
[2009/05/21 19:57:00 | 000,004,185 | ---- | M] () -- \Users\All Users\HP\LGT\Data\Models\Images\identifying_serial.jpg
[2013/03/10 19:48:18 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013/08/15 03:19:47 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d462f459c4353e2c628e6def1430aed7\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:28:40 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e043ad64456256a8ee5b934e227d9782\System.Runtime.Serialization.ni.dll
[2013/08/15 03:21:04 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\845e04461d3d879b24c5b0d30947050a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:25:51 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\dbfc784cc4bde7b16fb471e14563569d\System.Runtime.Serialization.ni.dll
[2013/08/15 03:01:58 | 000,304,640 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\1729a1c27c4c29abc3a3982df67c3e9d\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:01:58 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\1729a1c27c4c29abc3a3982df67c3e9d\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2013/08/15 03:02:03 | 002,786,816 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\a46953d62d9923cfd393cb102df2e6ad\System.Runtime.Serialization.ni.dll
[2013/08/15 03:02:03 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\a46953d62d9923cfd393cb102df2e6ad\System.Runtime.Serialization.ni.dll.aux
[2013/07/12 08:30:39 | 000,026,624 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\e9ae6390ba678193c056e647edb44849\System.Xml.Serialization.ni.dll
[2013/07/12 08:30:39 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\e9ae6390ba678193c056e647edb44849\System.Xml.Serialization.ni.dll.aux
[2013/08/15 03:06:36 | 000,373,248 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\6306ff71e246e8da5d0fb73a2c9c7766\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/15 03:06:36 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\6306ff71e246e8da5d0fb73a2c9c7766\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2013/08/15 03:07:34 | 003,602,944 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\fbb390c869765b459962a1d40c81d260\System.Runtime.Serialization.ni.dll
[2013/08/15 03:07:34 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\fbb390c869765b459962a1d40c81d260\System.Runtime.Serialization.ni.dll.aux
[2013/07/12 08:29:15 | 000,028,672 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\a2556a1137fbb8361cee016477e7f692\System.Xml.Serialization.ni.dll
[2013/07/12 08:29:15 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\a2556a1137fbb8361cee016477e7f692\System.Xml.Serialization.ni.dll.aux
[2012/07/09 01:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\0D741DA1E0EBC6D3CA11466FCD14361F\4.5.50709\System.Runtime.Serialization.dll.amd64
[2012/07/09 01:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\0D741DA1E0EBC6D3CA11466FCD14361F\4.5.50709\System.Runtime.Serialization.dll.x86
[2012/07/09 01:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\0D741DA1E0EBC6D3CA11466FCD14361F\4.5.50709\System.Runtime.Serialization.dll_gac_x86
[2012/07/09 01:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/07/09 01:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Json\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Json.dll
[2012/07/09 01:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll
[2012/07/09 01:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Xml\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Xml.dll
[2013/02/22 00:48:22 | 001,051,272 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012/07/09 01:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2012/07/09 01:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Xml.XmlSerializer.dll
[2003/02/21 08:26:56 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013/02/22 00:48:22 | 001,051,272 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2012/07/09 01:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2012/07/09 01:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Json.dll
[2012/07/09 01:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2012/07/09 01:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2012/07/09 01:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2012/07/09 01:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.XmlSerializer.dll
[2009/06/10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013/02/22 00:48:22 | 001,051,272 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2012/07/09 01:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2012/07/09 01:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll
[2012/07/09 01:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2012/07/09 01:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2012/07/09 01:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2012/07/09 01:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009/07/14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009/06/10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2011/04/12 15:29:55 | 000,005,120 | ---- | M] () -- \Windows\System32\sk-SK\serialui.dll.mui
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2011/04/12 15:29:55 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\sk-SK\serialui.dll.mui
[2011/04/12 15:29:54 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_d5f23af62a751552\serialui.dll.mui
[2009/07/14 03:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2011/04/12 15:30:00 | 000,010,240 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_64015f894ce7c72a\serial.sys.mui
[2009/07/14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009/06/10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2010/11/21 05:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012/10/05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2012/10/05 12:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2010/11/21 05:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012/10/05 12:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2012/10/05 12:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2012/11/30 23:16:16 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2012/11/30 23:16:16 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2011/04/12 15:30:21 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_d5f23af62a751552_serialui.dll.mui_7d29d2a3
[2009/07/14 04:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2011/04/12 15:30:21 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_79d39f727217a41c_serialui.dll.mui_7d29d2a3
[2009/07/14 04:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009/07/14 04:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011/02/05 19:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/02/05 15:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009/07/14 04:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2010/11/21 05:17:50 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012/10/05 20:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2012/10/05 20:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2010/11/21 05:17:50 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012/10/05 20:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2012/10/05 20:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2010/11/21 05:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012/10/05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012/10/05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2011/04/12 15:29:30 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_en-us_8f71d563bf7aa3c2.manifest
[2012/10/05 20:09:41 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_en-us_8f4bb639bfcd9db1.manifest
[2012/10/05 19:57:17 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_en-us_787a117bd97892a9.manifest
[2010/11/21 05:17:50 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012/10/05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012/10/05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2010/11/21 05:18:20 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012/10/05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012/10/05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2010/11/21 05:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012/10/05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012/10/05 12:56:07 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2010/11/21 05:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012/10/05 12:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2011/04/12 15:29:55 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_79d39f727217a41c\serialui.dll.mui
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2010/11/21 05:25:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012/10/05 12:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll
< *w7lxe* /s >
========== Alternate Data Streams ==========
@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 178 bytes -> C:\ProgramData\TEMP:1CE11B51
< End of report >
nepouzivam diakritiku a pomoc si vazim
-
bondasko
- Vzorný návštěvník
- Příspěvky: 174
- Registrován: 18 čer 2012 16:37
- Bydliště: Presov, Slovensko
Re: Prosim o preventivku
OTL Extras logfile created on: 1. 9. 2013 14:17:20 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\bondasko\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16660)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy
7,96 Gb Total Physical Memory | 5,62 Gb Available Physical Memory | 70,53% Memory free
15,92 Gb Paging File | 13,27 Gb Available in Paging File | 83,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 83,75 Gb Total Space | 30,74 Gb Free Space | 36,70% Space Free | Partition Type: NTFS
Drive D: | 999,83 Gb Total Space | 17,30 Gb Free Space | 1,73% Space Free | Partition Type: NTFS
Drive E: | 397,43 Gb Total Space | 214,38 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive F: | 281,49 Gb Total Space | 244,95 Gb Free Space | 87,02% Space Free | Partition Type: NTFS
Drive G: | 100,01 Gb Total Space | 96,19 Gb Free Space | 96,19% Space Free | Partition Type: NTFS
Drive H: | 500,01 Gb Total Space | 486,79 Gb Free Space | 97,36% Space Free | Partition Type: NTFS
Drive X: | 50,00 Gb Total Space | 6,18 Gb Free Space | 12,37% Space Free | Partition Type: NTFS
Computer Name: DOMA | User Name: bondasko | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 14.Manage] -- "C:\Program Files (x86)\ACD Systems\ACDSee\14.0\ACDSeeQV14.exe" "%1" (ACD Systems International Inc.)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 14.Manage] -- "C:\Program Files (x86)\ACD Systems\ACDSee\14.0\ACDSeeQV14.exe" "%1" (ACD Systems International Inc.)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05173BAA-D27A-4853-99F1-67C060465EE4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{053A99F2-3086-453A-A9B3-D77EEFAF698E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{06075987-0B26-4602-85E8-5779AB64818C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{18BF616E-AFF5-418A-BC31-35AF999D7D12}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1B5C85FB-FDBC-4DC8-AC0C-E9FDC4D8B248}" = lport=139 | protocol=6 | dir=in | app=system |
"{1E798B92-26F4-4F5F-BF91-FF19FE21D33C}" = rport=137 | protocol=17 | dir=out | app=system |
"{20CC20D7-12E4-4E3F-89BB-0021108179AD}" = rport=10243 | protocol=6 | dir=out | app=system |
"{3F71DA4C-B358-4E01-9AC9-B102B1A7FA07}" = rport=445 | protocol=6 | dir=out | app=system |
"{42F837D9-2CAF-470D-A5D2-8BC597A1816B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4B362FA2-9BEF-4797-A8C4-90E35B865C6F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{50C88D01-9611-4B8F-82AC-61F91DF24D49}" = lport=138 | protocol=17 | dir=in | app=system |
"{53AA25AC-1F5F-4358-B13D-FC5F0EA97034}" = lport=10243 | protocol=6 | dir=in | app=system |
"{5CE71AC6-F5CE-47F7-B489-B2FB56A9CDAC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{63611D97-0B9E-40A6-B428-7E1B29F1D128}" = lport=2869 | protocol=6 | dir=in | app=system |
"{686B1423-2274-4CD6-A5E2-0CD5BEE196D1}" = lport=137 | protocol=17 | dir=in | app=system |
"{72A85566-AF3E-4997-9307-A7EEB63951E8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{78CEB799-A5A4-481E-8D88-B5FDDB59DA21}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7D730046-7655-4E0C-9DC2-07C0DF879B6F}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{7DAD668A-745A-49B6-A436-4DBCDCF0B366}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{873D9632-02E2-4B5F-82A5-960BBB94E316}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{A49297F3-E197-439A-9B66-B4F6AE57048A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AFE7A61C-CA31-4375-B522-AAD05A887C89}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{CC090AB5-DC7D-4E9D-81A7-E178AFB1E4F5}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{D04D6033-7B99-4CA8-BA11-0B816AF47550}" = rport=138 | protocol=17 | dir=out | app=system |
"{D6FE95F0-193D-4614-92BF-45F4DAC12C25}" = lport=445 | protocol=6 | dir=in | app=system |
"{D9C8EE81-E021-4D75-9FAD-30CA2E1BBA4B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{D9CF77F6-90E6-4D32-99C0-0571FDE76D10}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DE3F7D63-3B72-4A47-9A9E-0863055B8E11}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{E4205745-685F-46F8-9BE9-335F26FF0935}" = rport=139 | protocol=6 | dir=out | app=system |
"{F3629C13-4DBD-4C0F-8E47-7EFF9FF7C0BB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{FC7EAD1C-345A-462F-A332-2D8E117DBDA5}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{FE62DD39-30C3-4CF4-827C-3E9069682D27}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{007C0505-F60F-40E3-9888-736726FC4108}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\kings bounty armored princess\kb.exe |
"{01EBDA94-7896-4A01-A5F3-DE864AB875A2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{02C0DD22-A0A5-4DE8-BE6A-E27EC0F1E739}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe |
"{0390D282-1C3D-4959-B394-75778C1E871F}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{04103834-F11B-4252-B431-2C1B5BC58FBA}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{0505B364-4EA9-4521-A5ED-479237B4E89E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0A894D43-65E9-4EEE-8EC8-1C15BE2C181A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe |
"{0A9FD52F-FFFD-4396-A5E3-CE9E71E5592F}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{127D37FF-1138-48E3-822B-3283AAE94B5B}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe |
"{12ED14DB-36EB-49DF-8C7F-3D849E1ABD4F}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\aceofspades\aos.exe |
"{13D95D50-6A5C-464C-9525-A23AF3987181}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\km\kwikmedia.exe |
"{180DB600-5E67-44A0-AC91-8A62D950A5F2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{1CEED87D-1B88-4D68-BD3E-B371B2495832}" = protocol=17 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{2115844C-FE04-40F2-B13F-FCB1D93D9C92}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe |
"{22901BD9-DA62-4A6D-8242-E1EF633EDCF5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe |
"{2315E522-16AE-43C0-9D26-5C92CDCF6AC2}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{24B71DBC-FDDE-48C1-B482-D517EBE166AF}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{25D196CA-6143-4B84-9483-304A97A8F696}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{25DEF849-B86C-4B61-9AC7-7DFADE75EDAD}" = protocol=58 | dir=in | app=system |
"{2624F5E3-48AD-4114-8F57-91F71A0C4186}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{26328A80-1C7F-4B63-9350-25B5DD009228}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe |
"{271CD793-8F29-4068-8063-78D695F98B40}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe |
"{2944737F-F425-4B2C-8CC0-CEE1A2523773}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{32151D40-7AAC-4D3E-8AFC-CB98D595ABEB}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\crysis\bin32\crysis.exe |
"{35FE74A0-42C0-4B03-9CBF-10FA222F8799}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe |
"{372A90A8-66E6-4F1A-A662-BB9776294D9C}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steam.exe |
"{3FAF194B-FF3C-4049-8EEC-8A260BE501D7}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{42BD2217-3AC3-4AAD-B04C-DBE36C2D0010}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{4525A90A-662C-4C58-A7DC-9B5CE45864E6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4780D08F-E0CC-4ED9-9CC5-7D63727D030C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4F36125D-D51E-4038-8C61-7DAB0C47321F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe |
"{54FEB7FC-2071-4F40-B634-B61EF3247E61}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqnrs08.exe |
"{56FC902E-6F1C-410A-966A-1EC2291C47D6}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{573DAA22-A735-4FFE-ACAC-450C1F0E86F2}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe |
"{5DA6EB29-9687-4371-A71D-5717067876B7}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe |
"{601C5E46-59D0-47E4-9B40-CAB7D3CC3287}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{61483B61-3900-4722-844A-31C10AF5AF31}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\km\kwikmedia.exe |
"{64727864-5CC1-414F-89E5-C4D010EFFDFD}" = protocol=17 | dir=in | app=e:\program files (x86)\ea games\battlefield 2\bf2.exe |
"{64DFE1F9-2ADE-4A84-AE2B-CBAE3F461D12}" = protocol=6 | dir=out | app=system |
"{6C297153-38C1-4040-91DD-D127120AC3FC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6E305C47-8089-4A06-918B-4CC8399203F6}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{6F6FB1CD-9A31-4F6A-A34C-9645D85641E1}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{72DE76A7-CA8C-41AF-A42B-759B1FC6070D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{73A7D812-996E-47E2-A66C-B8C5CE7482D3}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{75A7565C-1F6E-404B-9B75-2C9D854BC16C}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3.exe |
"{7D8A36E9-0AF4-4528-9800-655270E24C1B}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{7E281177-7985-40E9-8421-3CB8FCB0A502}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{80EA4142-3F4D-4919-B638-7E0F3EA03865}" = protocol=6 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{8133C4EB-7090-4740-ADAD-85FB413D5240}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{8572A10E-357D-4AC2-91BD-618820FFAC59}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8A7DECCF-62A4-404D-B0F0-E8294673627F}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{8DBFB32C-8601-40C5-B639-217874B21327}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe |
"{91DDB3DC-25CB-4B63-9432-71C3E4CE4568}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe |
"{97F8B7FA-CDD4-4040-B631-1727A7612455}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{9894261D-88C5-4BCA-908A-BB597F2264F6}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe |
"{9E6099CF-8079-4AFE-88C4-97BF08D93F51}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{A2BFB2EB-0D90-4783-BE9F-815DD00807C8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{A6A54B8C-7127-43FE-A0A0-97482B918781}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe |
"{A8AF3C0E-6B86-4137-ACD4-612C15934295}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{AE251191-1374-4B20-9F61-8879D9D2B035}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe |
"{AE45E746-CC52-491C-9CFE-7E56DBBCED5F}" = protocol=6 | dir=in | app=e:\program files (x86)\ea games\battlefield 2\bf2.exe |
"{AF92A45C-7685-4B1E-A1E8-7811A628A7EB}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{B93A1725-CFBC-407E-A906-B07763C61AB6}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{BBE3150E-89F6-4045-AA15-7B06A4F5F3DD}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{BDE7981C-F445-4444-82C0-D8AC1A41FC43}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3.exe |
"{BFA59022-B4F2-4CCB-ACA0-F4C035D08C91}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{C38D44CA-5E43-4662-BCF7-4C3D4B3310DB}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\crysis\bin32\crysis.exe |
"{C57094F0-F3FD-4185-96CF-C5F48D193FA0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe |
"{C7FA5565-3220-4ABF-B7CA-D053BC91FB3A}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\aceofspades\aos.exe |
"{CCD3ED44-684F-47E7-8286-31C15CD0762E}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{CD90D1A8-7343-451F-919C-768092F6CFFF}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{CE283E6A-A693-4212-9297-6CDD219DD516}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe |
"{CEB38770-24B3-490E-B156-EFA0CF1F1EFF}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D11C944C-87C3-45AB-8131-A8DE213BA798}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\nero blu-ray player\blu-rayplayer.exe |
"{D6FF371C-8401-4D2E-AB88-5F3DC0E49B0F}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\kings bounty armored princess\kb.exe |
"{D99066F4-AAD2-491D-BE92-CF8C8414B7E9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DA4EB97C-EBB1-4529-8ED0-90632397E627}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe |
"{DB919A9F-5CA3-4027-8191-BB523D3DD32F}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe |
"{DD8694D0-8BB0-45FE-B51B-BC7169D71706}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\nero blu-ray player\blu-rayplayer.exe |
"{DDE9BBC8-D681-4587-98D9-9B3CEB9BD018}" = protocol=17 | dir=in | app=e:\program files (x86)\origin\battlefield 3\bf3.exe |
"{E0952489-1D3C-4EC1-94C6-948CB183416C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{E31368FB-C45E-49C2-9A85-21022D58326C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqcopy2.exe |
"{E7709B5C-31C1-454F-91FB-9BE508FADE2B}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\magicka\magicka.exe |
"{E7784315-46C1-4BBB-9361-637D5E271952}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe |
"{E8D14F2B-86B2-438B-9544-485889D18630}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{F06E32AE-A2F4-4D8D-AC5A-239BDF2CC4B2}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steam.exe |
"{F0F611F8-B887-4963-AEE3-DC10D80BB2B8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe |
"{F10EFE00-FFEE-4AE0-9A3E-EC1AC823235D}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{F145BBC0-EFCC-4474-8F1E-5B03B4547196}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe |
"{F1DA44CB-9737-4D5D-A52C-792B0E3F6E18}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe |
"{F510C4C5-5FDC-47D6-9617-1FCDD86F05B8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe |
"{F6C85B36-4503-480B-AB1A-2414753FF2E4}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\magicka\magicka.exe |
"{F8CDE1FF-E66F-4C9C-8A6B-C63E9C866967}" = protocol=6 | dir=in | app=e:\program files (x86)\origin\battlefield 3\bf3.exe |
"{F9E53EEF-079D-4B19-A89A-254A734DC871}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{FBCD5BD1-742A-4A25-A2DA-72065D7C1CEF}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{FC810E04-99B2-442E-89D7-767F3CBCD7A1}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe |
"{FFA698A6-36D3-44A3-B24F-44B4BDB1CA50}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{0FCCA77F-4DC2-4BBC-B7EF-07672C818511}C:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe |
"TCP Query User{2364837B-9FE4-4A06-B352-CF7F5C972A77}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"TCP Query User{9D8CE31F-FB54-4520-A7BB-65200CC0C036}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"TCP Query User{AF690C3B-14B4-4F01-8878-00B06C022EE1}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"TCP Query User{EE847CDE-867F-4951-A219-F7163BA8F746}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{1AB4DB92-D036-4873-87E0-E3DA32A0D3BD}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"UDP Query User{24A86CC2-1075-419E-93E5-BF32C4D3D5B8}C:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe |
"UDP Query User{2F1EB5BB-5CFD-467A-BE7C-AECE1B948902}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{D57086E9-A05B-4ECA-9E7C-F7B62C8C33C2}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"UDP Query User{FBB27A7F-06F9-478C-8347-D6C4ED6201A6}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1}" = Microsoft .NET Framework 4.5
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86417017FF}" = Java 7 Update 17 (64-bit)
"{4975DE61-6BF6-B9BC-1FDE-C04C5EC78E4C}" = AMD Media Foundation Decoders
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer
"{5E03A267-415E-5383-FA8F-3CE4145663B9}" = AMD Catalyst Install Manager
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6199B534-A1B6-46ED-873B-97B0ECF8F81E}" = Intel® Trusted Connect Service Client
"{64A3A4F4-B792-11D6-A78A-00B0D0170090}" = Java SE Development Kit 7 Update 9 (64-bit)
"{6CC6127A-D5E4-0479-DE97-1B0B6A062A43}" = AMD Drag and Drop Transcoding
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89EE4A30-080F-2C95-6F78-C98D18FBD74D}" = AMD Accelerated Video Transcoding
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-041B-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Slovak) 2007
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5
"{988329F4-A1A1-4D51-803C-EF2725A97627}" = HP Photosmart All-In-One Driver Software 13.0 Rel. 2
"{9CF11D16-ECEB-90A5-A028-CA9E068D848B}" = ccc-utility64
"CCleaner" = CCleaner
"Defraggler" = Defraggler
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"HPOCR" = OCR Software by I.R.I.S. 13.0
"MediaInfo" = MediaInfo 0.7.61
"Shop for HP Supplies" = Shop for HP Supplies
"Speccy" = Speccy
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)
"WinRAR archiver" = WinRAR 4.20 (64-bitová verzia)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{017F8447-2A1D-0DDB-B5D7-CA2BFACE2886}" = CCC Help French
"{02627ee5-eaca-4742-a9cc-e687631773e4}" = Nero ShowTime
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"{052A1E34-A54B-458C-A4E3-24C3E054754A}" = Nero Kwik Media
"{054E9A1C-3EA2-C657-E787-FD8DCF5C3D3B}" = CCC Help Czech
"{05C6B128-1B40-4495-9CB9-090B368BFA0A}" = Nero Video Samples
"{064A929A-4DE8-40CF-A901-BD40C14E4D25}" = PDF Architect
"{0708FF30-78C0-47B0-81F0-C84604DC769C}" = Nero Express Help (CHM)
"{086a7d8c-0a38-4c7f-819a-620275550d5c}" = Nero BurningROM
"{0B311221-05A5-4766-8D03-7A6446794156}" = Nero RescueAgent Help (CHM)
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{150D88F1-40AF-4678-A39D-BCE2332F34E5}" = Nero Abstract Themes
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1943C3BD-4462-4612-92C3-D36DD917C447}" = Nero Recode
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1B6F5E51-575E-4693-BCA2-7543570D076D}" = Nero Kwik Themes Basic
"{1c00c7c5-e615-4139-b817-7f4003de68c0}" = Nero PhotoSnap Help
"{1D30EA2E-5341-493E-8D71-0EED788B6CD9}" = Nero WaveEditor Help (CHM)
"{1DE2BD51-0300-772D-5E18-F337D95D5687}" = CCC Help German
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F16820E-D0E7-4636-939E-45CBFEFB06E1}" = Nero Kwik Media Help (CHM)
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20400dbd-e6db-45b8-9b6b-1dd7033818ec}" = Nero InfoTool
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{20EFC9AA-BBC1-4DFD-81FF-99654F71CBF8}" = HPPhotoSmartDiscLabel_PrintOnDisc
"{224E8FEB-5C1F-077F-6FC5-602AC1AE644D}" = CCC Help Danish
"{22856BC3-F893-4CBF-95F2-E1F63CD2B1AB}" = Nero Video Transitions 1
"{2348b586-c9ae-46ce-936c-a68e9426e214}" = Nero StartSmart Help
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{275E9C49-C72F-D754-DEB7-77F10A9C00D8}" = CCC Help Japanese
"{2890E324-6F3B-4975-8B95-E7D6D80E0226}" = Nero Burning ROM Help (CHM)
"{29E2C1C6-D76A-41D3-980F-6E346AA9A6A8}" = Nero Cliparts
"{29F67D84-3A70-456E-806A-52301B02070B}" = Nero Effects Basic
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{30049739-BE95-6591-B504-E6D7057D49CC}" = CCC Help Spanish
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{3143E3EB-17A5-48F9-90FC-D7CA556CA210}" = Nero CoverDesigner
"{33cf58f5-48d8-4575-83d6-96f574e4d83a}" = Nero DriveSpeed
"{359cfc0a-beb1-440d-95ba-cf63a86da34f}" = Nero Recode
"{362AB21A-E2C4-40CE-81C2-8C4D62B0635A}" = Media Go
"{368ba326-73ad-4351-84ed-3c0a7a52cc53}" = Nero Rescue Agent
"{3AAB08A3-F129-4BD5-B409-AE674F93759D}" = Prerequisite installer
"{3C2379D2-337A-4FFA-9017-BDFB80EC0931}" = OSCAR Editor
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.1102.1
"{3F1EB155-F96E-EB7B-2EF2-7375490E0FA9}" = CCC Help English
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{43e39830-1826-415d-8bae-86845787b54b}" = Nero Vision
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax
"{44BC0E51-F620-48B8-88FD-1576FB1F5B96}" = Nero CoverDesigner
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4B023D7B-9E67-795D-FB31-B5E1F6DCA451}" = CCC Help Italian
"{4D25D881-7183-462F-95C8-990CA1944E0B}" = Nero PiP Effects 1
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
"{4E7AC009-5212-499F-942F-A5AA42AE359E}" = Nero 12 Content Pack
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{504D84ED-AE75-4F85-A68B-BB3D4CB3E169}" = Nero Holiday and Sports Themes
"{54215B8A-6212-8DB8-39B4-98EE2BB98BD1}" = Media Go Video Playback Engine 1.116.101.02020
"{553C904F-57A2-4113-888E-BA0C3D1C69C0}" = Microsoft VC9 runtime libraries
"{55F6C486-8C75-2A72-DAFE-CE78A624C9F7}" = CCC Help Russian
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{595a3116-40bb-4e0f-a2e8-d7951da56270}" = NeroExpress
"{5AF23993-7152-1620-E43F-1B4542FB4F84}" = CCC Help Thai
"{5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}" = Nero Blu-ray Player Help (CHM)
"{5CD2E27A-F2C9-4A87-9A06-DFAF9A182481}" = Nero Express
"{5d9be3c1-8ba4-4e7e-82fd-9f74fa6815d1}" = Nero Vision
"{5e08ecd1-c98e-4711-bf65-8fd736b3f969}" = Nero RescueAgent Help
"{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}" = GameSpy Comrade
"{60c731fb-c951-41ce-ad41-8e54c8594609}" = Nero Disc Copy Gadget Help
"{62ac81f6-bdd3-4110-9d36-3e9eaab40999}" = Nero CoverDesigner
"{63326924-3CAF-C858-3A8F-8598C87019D7}" = Catalyst Control Center
"{63822E89-11AA-F8EC-D433-F72A85799EC0}" = CCC Help Greek
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66361420-4905-AEB8-17AE-172FDD164A7E}" = CCC Help Polish
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{685B0843-6C8D-4E42-B60D-2B86B45526E0}" = PS_AIO_02_Software_Min
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6F5A71BD-9EC9-4A59-BFBD-CA63CFB4885D}" = ACDSee 14
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{76335315-16A0-4DBB-B01C-5FDC6A5CB8A3}" = Nero WaveEditor
"{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}" = Catalyst Control Center InstallProxy
"{7748ac8c-18e3-43bb-959b-088faea16fb2}" = Nero StartSmart
"{77e33d87-255e-413e-9c8d-eed2a7f9bebf}" = Nero Live Help
"{7829db6f-a066-4e40-8912-cb07887c20bb}" = Nero BurnRights
"{7BD7A4BF-EA64-4BFE-A9D3-3FDC9B6EFC23}" = Nero Football (Soccer) Themes
"{80074966-5231-428D-9AE7-B7D5D2DC3246}" = Readon TV Movie Radio Player 7.6.0.0
"{800E31CD-E1E7-40EC-8410-5736E427F49A}" = SSDlife Pro
"{80836C86-1305-40C9-B7C9-F3A75266070D}" = Nero 12
"{828175FA-7307-4DBF-95AD-9CEE086B6F45}" = Welcome App (Start-up experience)
"{831D3D7B-169D-47F3-9117-D74934BF71BF}" = Nero WaveEditor
"{83202942-84b3-4c50-8622-b8c0aa2d2885}" = Nero Express
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83A4E573-E2C2-46FB-9DA6-6A2BBBF5A588}" = Nero Retro Film Themes
"{83FCCFCD-46E3-43FB-A397-78BFD5A8980A}" = Nero Video
"{86847081-B387-4F49-AED1-C9B0A090D66C}" = Nero Recode Help (CHM)
"{869200db-287a-4dc0-b02b-2b6787fbcd4c}" = Nero DiscSpeed
"{8773DD1C-5FB2-95B5-5A93-0EFEAC900A4D}" = CCC Help Norwegian
"{8B5AD338-7ABC-4ECB-9C2C-687F84AEDDB1}" = Nero Platinum Effects 12
"{8CCBB0BF-9CC1-1A65-BB93-56012A460EE6}" = CCC Help Portuguese
"{8EFB7927-48AD-4E6D-91B7-6B2BD6C3F380}" = Acronis Disk Director
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-041B-0000-0000000FF1CE}" = Microsoft Office Access MUI (Slovak) 2007
"{90120000-0015-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-041B-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Slovak) 2007
"{90120000-0016-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-041B-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Slovak) 2007
"{90120000-0018-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-041B-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Slovak) 2007
"{90120000-0019-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-041B-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Slovak) 2007
"{90120000-001A-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-041B-0000-0000000FF1CE}" = Microsoft Office Word MUI (Slovak) 2007
"{90120000-001B-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_PROPLUS_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040E-0000-0000000FF1CE}" = Microsoft Office Proof (Hungarian) 2007
"{90120000-001F-040E-0000-0000000FF1CE}_PROPLUS_{0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_PROPLUS_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-041B-1000-0000000FF1CE}_PROPLUS_{8382BA92-20E3-47B6-971B-F673F0492D4E}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-041B-0000-0000000FF1CE}" = Microsoft Office Proofing (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-041B-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Slovak) 2007
"{90120000-006E-041B-0000-0000000FF1CE}_PROPLUS_{8382BA92-20E3-47B6-971B-F673F0492D4E}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{907611B4-1B1B-4810-88CD-965FA49F35F6}" = C5200
"{94F8D42D-BB31-4858-9705-7D756D8D9655}" = PS_AIO_02_Software
"{955BF340-C379-4375-AA2F-F3BCB2A498AB}" = Nero Family and Events Themes
"{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}" = Google Earth
"{98a67610-a3b5-4098-a423-3708040026d3}" = "Nero SoundTrax Help
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C7C04AB-4B97-49DB-88A0-454795349008}" = Nero CoverDesigner Help (CHM)
"{9e82b934-9a25-445b-b8df-8012808074ac}" = Nero PhotoSnap
"{A0A3CE05-96CB-52E9-434E-074F3BB7807E}" = CCC Help Turkish
"{a209525b-3377-43f4-b886-32f6b6e7356f}" = Nero WaveEditor
"{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}" = Nero Blu-ray Player
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9C64319-932F-D02B-B14C-FFFC3EC49E77}" = CCC Help Chinese Standard
"{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Czech
"{ACE49D50-19CD-44A6-B192-46F985283B26}" = Nero PiP Effects Basic
"{ad6bc5cc-2ef0-49c4-b33d-cdc8b2c4dc80}" = Nero Recode Help
"{B128179D-A5E1-43AC-9422-12A109ECD2A0}" = Nero Video Help (CHM)
"{b1adf008-e898-4fe2-8a1f-690d9a06acaf}" = DolbyFiles
"{B28635AB-1DF3-4F07-BFEA-975D911B549B}" = hpphotosmartdisclabelplugin
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{B4B2096B-B13E-408E-8985-BD07463D5487}" = PS_AIO_02_ProductContext
"{B4E343DD-BAAB-4D59-AD9C-DEA0AFE09DF1}" = Mumble 1.2.3
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{b78120a0-cf84-4366-a393-4d0a59bc546c}" = Menu Templates - Starter Kit
"{B953732D-B623-4E84-B369-CFFF7B1AE06F}" = Nero RescueAgent
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components
"{C09DB932-7619-7B56-30E3-C0454811D6D7}" = CCC Help Korean
"{C22A4697-BD77-ACB1-744F-1FD0A0BFF798}" = CCC Help Swedish
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C4C6DF25-0E59-46EE-B24B-DF8749D8FF3A}" = Nero Image Samples
"{c5a7cb6c-e76d-408f-ba0e-85605420fe9d}" = SoundTrax
"{C994C746-C6D0-4EBA-B09E-DF7B18381B69}" = Nero ControlCenter Help (CHM)
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{cc019e3f-59d2-4486-8d4b-878105b62a71}" = Nero DiscSpeed
"{CE675FBD-75C3-45F1-B6AF-8D250861D536}" = Nero Disc Menus 3
"{ce96f5a5-584d-4f8f-aa3e-9baed413db72}" = Nero CoverDesigner Help
"{cef78f86-19a8-4bbd-91fa-e9b6b2d37348}" = C5200_Help
"{CF508721-0E1E-4F99-A359-59E4EA8DAEC1}" = Nero Burning ROM
"{d025a639-b9c9-417d-8531-208859000af8}" = NeroBurningROM
"{D4B457B2-260F-C561-CA87-703BD3B724CA}" = Catalyst Control Center Graphics Previews Common
"{D6CDB506-297D-AE70-0EF6-DE5185F961BE}" = CCC Help Chinese Traditional
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D86B0E2E-DF9A-441C-AF77-8D1A0FF00FA6}" = AIO_Scan
"{D9D8F2CF-FE2D-4644-9762-01F916FE90A9}" = HPPhotoSmartDiscLabel_PaperLabel
"{d9dcf92e-72eb-412d-ac71-3b01276e5f8b}" = Nero ShowTime
"{DA2D3078-A58C-45E8-8EE0-18B8BE6B34F7}" = Nero BackItUp
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{df6a95f5-adc1-406a-bdc6-2aa7cc0182aa}" = Nero Live
"{E17BCB76-9924-4BD5-B6D6-50D3407B4E74}" = Nero Disc Menus Basic
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{e498385e-1c51-459a-b45f-1721e37aa1a0}" = Movie Templates - Starter Kit
"{e5c7d048-f9b4-4219-b323-8bdb01a2563d}" = Nero DriveSpeed
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{e8631efb-6b9a-426c-b1ce-e7173ca26bf8}" = Nero WaveEditor Help
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{ECFD508E-68A2-91B2-46DD-1D03D783D94B}" = Catalyst Control Center Localization All
"{EDE361D5-35A5-DA7D-3462-C3DABD24029B}" = CCC Help Hungarian
"{EEBF1676-AF87-4266-93D8-0C14A34C4217}" = Nero Disc Menus 1
"{EF0D1292-8FC1-41BE-9740-DBC134F66415}" = Nero BackItUp Help (CHM)
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.108
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{f1861f30-3419-44db-b2a1-c274825698b3}" = Nero Disc Copy Gadget
"{F1E7DD6A-AE2D-D706-BEB3-937F76CA6AE9}" = CCC Help Finnish
"{f4041dce-3fe1-4e18-8a9e-9de65231ee36}" = Nero ControlCenter
"{F56F54DD-BCB2-1221-2CB7-E983A5CF9D15}" = CCC Help Dutch
"{f6bdd7c5-89ed-4569-9318-469aa9732572}" = Nero BurnRights
"{fbcdfd61-7dcf-4e71-9226-873ba0053139}" = Nero InfoTool
"{FE81E6B5-652B-40E7-B3B2-7171C6F297DA}" = Nero Disc Menus 2
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"avast" = avast! Internet Security
"Battlelog Web Plugins" = Battlelog Web Plugins
"DAEMON Tools Lite" = DAEMON Tools Lite
"DVDFab 8 Qt_is1" = DVDFab 8.2.2.0 (16/11/2012) Qt
"ESN Sonar-0.70.4" = ESN Sonar
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"FormatFactory" = FormatFactory 3.1.1
"Free PDF to Word Converter_is1" = Free PDF to Word Converter 1.5
"Google Chrome" = Google Chrome
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"InstallShield_{3C2379D2-337A-4FFA-9017-BDFB80EC0931}" = X7 Oscar Editor
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.5.5
"Mozilla Firefox 23.0.1 (x86 sk)" = Mozilla Firefox 23.0.1 (x86 sk)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"PROPLUS" = Microsoft Office Professional Plus 2007
"PunkBusterSvc" = PunkBuster Services
"Steam App 17300" = Crysis
"Steam App 220240" = Far Cry® 3
"Steam App 224540" = Ace of Spades
"Steam App 3170" = King's Bounty: Armored Princess
"Steam App 42910" = Magicka
"Steam App 440" = Team Fortress 2
"Steam App 620" = Portal 2
"TeamViewer 8" = TeamViewer 8
"Update Engine" = Sony Ericsson Update Engine
"Uplay" = Uplay
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.8
"Winamp" = Winamp
"yowindow" = YoWindow
"YU2010_is1" = Your Uninstaller! 7
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Winamp Detector Plug-in
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 25. 8. 2013 11:42:33 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 25. 8. 2013 14:01:16 | Computer Name = doma | Source = WinMgmt | ID = 10
Description =
Error - 25. 8. 2013 14:04:09 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 25. 8. 2013 14:04:09 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 27. 8. 2013 3:06:57 | Computer Name = doma | Source = WinMgmt | ID = 10
Description =
Error - 27. 8. 2013 3:10:47 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 27. 8. 2013 3:10:47 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 31. 8. 2013 12:12:11 | Computer Name = doma | Source = WinMgmt | ID = 10
Description =
Error - 31. 8. 2013 12:14:55 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 31. 8. 2013 12:14:55 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
[ OSession Events ]
Error - 9. 1. 2013 7:04:35 | Computer Name = doma | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4584
seconds with 1440 seconds of active time. This session ended with a crash.
Error - 9. 1. 2013 7:47:27 | Computer Name = doma | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2566
seconds with 540 seconds of active time. This session ended with a crash.
Error - 9. 1. 2013 7:53:32 | Computer Name = doma | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 356
seconds with 240 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 20. 3. 2013 0:11:32 | Computer Name = doma | Source = Service Control Manager | ID = 7023
Description = Služba Computer Browser bola ukončená s nasledujúcou chybou: %%1115
Error - 20. 3. 2013 0:11:32 | Computer Name = doma | Source = Service Control Manager | ID = 7023
Description = Služba Server bola ukončená s nasledujúcou chybou: %%1062
Error - 20. 3. 2013 0:11:34 | Computer Name = doma | Source = Microsoft-Windows-Directory-Services-SAM | ID = 12291
Description = SAM failed to start the TCP/IP or SPX/IPX listening thread
Error - 22. 3. 2013 10:50:19 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 22. 3. 2013 10:50:21 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 23. 3. 2013 5:44:48 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 23. 3. 2013 5:44:49 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 1. 4. 2013 10:01:25 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR13.
Error - 1. 4. 2013 10:01:26 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR13.
Error - 1. 4. 2013 18:11:26 | Computer Name = doma | Source = Service Control Manager | ID = 7000
Description = Spustenie služby cpuz135 zlyhalo kvôli nasledujúcej chybe: %%3
< End of report >
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\bondasko\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16660)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy
7,96 Gb Total Physical Memory | 5,62 Gb Available Physical Memory | 70,53% Memory free
15,92 Gb Paging File | 13,27 Gb Available in Paging File | 83,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 83,75 Gb Total Space | 30,74 Gb Free Space | 36,70% Space Free | Partition Type: NTFS
Drive D: | 999,83 Gb Total Space | 17,30 Gb Free Space | 1,73% Space Free | Partition Type: NTFS
Drive E: | 397,43 Gb Total Space | 214,38 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive F: | 281,49 Gb Total Space | 244,95 Gb Free Space | 87,02% Space Free | Partition Type: NTFS
Drive G: | 100,01 Gb Total Space | 96,19 Gb Free Space | 96,19% Space Free | Partition Type: NTFS
Drive H: | 500,01 Gb Total Space | 486,79 Gb Free Space | 97,36% Space Free | Partition Type: NTFS
Drive X: | 50,00 Gb Total Space | 6,18 Gb Free Space | 12,37% Space Free | Partition Type: NTFS
Computer Name: DOMA | User Name: bondasko | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 14.Manage] -- "C:\Program Files (x86)\ACD Systems\ACDSee\14.0\ACDSeeQV14.exe" "%1" (ACD Systems International Inc.)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 14.Manage] -- "C:\Program Files (x86)\ACD Systems\ACDSee\14.0\ACDSeeQV14.exe" "%1" (ACD Systems International Inc.)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05173BAA-D27A-4853-99F1-67C060465EE4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{053A99F2-3086-453A-A9B3-D77EEFAF698E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{06075987-0B26-4602-85E8-5779AB64818C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{18BF616E-AFF5-418A-BC31-35AF999D7D12}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1B5C85FB-FDBC-4DC8-AC0C-E9FDC4D8B248}" = lport=139 | protocol=6 | dir=in | app=system |
"{1E798B92-26F4-4F5F-BF91-FF19FE21D33C}" = rport=137 | protocol=17 | dir=out | app=system |
"{20CC20D7-12E4-4E3F-89BB-0021108179AD}" = rport=10243 | protocol=6 | dir=out | app=system |
"{3F71DA4C-B358-4E01-9AC9-B102B1A7FA07}" = rport=445 | protocol=6 | dir=out | app=system |
"{42F837D9-2CAF-470D-A5D2-8BC597A1816B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4B362FA2-9BEF-4797-A8C4-90E35B865C6F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{50C88D01-9611-4B8F-82AC-61F91DF24D49}" = lport=138 | protocol=17 | dir=in | app=system |
"{53AA25AC-1F5F-4358-B13D-FC5F0EA97034}" = lport=10243 | protocol=6 | dir=in | app=system |
"{5CE71AC6-F5CE-47F7-B489-B2FB56A9CDAC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{63611D97-0B9E-40A6-B428-7E1B29F1D128}" = lport=2869 | protocol=6 | dir=in | app=system |
"{686B1423-2274-4CD6-A5E2-0CD5BEE196D1}" = lport=137 | protocol=17 | dir=in | app=system |
"{72A85566-AF3E-4997-9307-A7EEB63951E8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{78CEB799-A5A4-481E-8D88-B5FDDB59DA21}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7D730046-7655-4E0C-9DC2-07C0DF879B6F}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{7DAD668A-745A-49B6-A436-4DBCDCF0B366}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{873D9632-02E2-4B5F-82A5-960BBB94E316}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{A49297F3-E197-439A-9B66-B4F6AE57048A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AFE7A61C-CA31-4375-B522-AAD05A887C89}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{CC090AB5-DC7D-4E9D-81A7-E178AFB1E4F5}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{D04D6033-7B99-4CA8-BA11-0B816AF47550}" = rport=138 | protocol=17 | dir=out | app=system |
"{D6FE95F0-193D-4614-92BF-45F4DAC12C25}" = lport=445 | protocol=6 | dir=in | app=system |
"{D9C8EE81-E021-4D75-9FAD-30CA2E1BBA4B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{D9CF77F6-90E6-4D32-99C0-0571FDE76D10}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DE3F7D63-3B72-4A47-9A9E-0863055B8E11}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{E4205745-685F-46F8-9BE9-335F26FF0935}" = rport=139 | protocol=6 | dir=out | app=system |
"{F3629C13-4DBD-4C0F-8E47-7EFF9FF7C0BB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{FC7EAD1C-345A-462F-A332-2D8E117DBDA5}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{FE62DD39-30C3-4CF4-827C-3E9069682D27}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{007C0505-F60F-40E3-9888-736726FC4108}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\kings bounty armored princess\kb.exe |
"{01EBDA94-7896-4A01-A5F3-DE864AB875A2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{02C0DD22-A0A5-4DE8-BE6A-E27EC0F1E739}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe |
"{0390D282-1C3D-4959-B394-75778C1E871F}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{04103834-F11B-4252-B431-2C1B5BC58FBA}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{0505B364-4EA9-4521-A5ED-479237B4E89E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0A894D43-65E9-4EEE-8EC8-1C15BE2C181A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe |
"{0A9FD52F-FFFD-4396-A5E3-CE9E71E5592F}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{127D37FF-1138-48E3-822B-3283AAE94B5B}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe |
"{12ED14DB-36EB-49DF-8C7F-3D849E1ABD4F}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\aceofspades\aos.exe |
"{13D95D50-6A5C-464C-9525-A23AF3987181}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\km\kwikmedia.exe |
"{180DB600-5E67-44A0-AC91-8A62D950A5F2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{1CEED87D-1B88-4D68-BD3E-B371B2495832}" = protocol=17 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{2115844C-FE04-40F2-B13F-FCB1D93D9C92}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe |
"{22901BD9-DA62-4A6D-8242-E1EF633EDCF5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe |
"{2315E522-16AE-43C0-9D26-5C92CDCF6AC2}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{24B71DBC-FDDE-48C1-B482-D517EBE166AF}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{25D196CA-6143-4B84-9483-304A97A8F696}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{25DEF849-B86C-4B61-9AC7-7DFADE75EDAD}" = protocol=58 | dir=in | app=system |
"{2624F5E3-48AD-4114-8F57-91F71A0C4186}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{26328A80-1C7F-4B63-9350-25B5DD009228}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe |
"{271CD793-8F29-4068-8063-78D695F98B40}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe |
"{2944737F-F425-4B2C-8CC0-CEE1A2523773}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{32151D40-7AAC-4D3E-8AFC-CB98D595ABEB}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\crysis\bin32\crysis.exe |
"{35FE74A0-42C0-4B03-9CBF-10FA222F8799}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe |
"{372A90A8-66E6-4F1A-A662-BB9776294D9C}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steam.exe |
"{3FAF194B-FF3C-4049-8EEC-8A260BE501D7}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{42BD2217-3AC3-4AAD-B04C-DBE36C2D0010}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{4525A90A-662C-4C58-A7DC-9B5CE45864E6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4780D08F-E0CC-4ED9-9CC5-7D63727D030C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4F36125D-D51E-4038-8C61-7DAB0C47321F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe |
"{54FEB7FC-2071-4F40-B634-B61EF3247E61}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqnrs08.exe |
"{56FC902E-6F1C-410A-966A-1EC2291C47D6}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{573DAA22-A735-4FFE-ACAC-450C1F0E86F2}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe |
"{5DA6EB29-9687-4371-A71D-5717067876B7}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe |
"{601C5E46-59D0-47E4-9B40-CAB7D3CC3287}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{61483B61-3900-4722-844A-31C10AF5AF31}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\km\kwikmedia.exe |
"{64727864-5CC1-414F-89E5-C4D010EFFDFD}" = protocol=17 | dir=in | app=e:\program files (x86)\ea games\battlefield 2\bf2.exe |
"{64DFE1F9-2ADE-4A84-AE2B-CBAE3F461D12}" = protocol=6 | dir=out | app=system |
"{6C297153-38C1-4040-91DD-D127120AC3FC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6E305C47-8089-4A06-918B-4CC8399203F6}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{6F6FB1CD-9A31-4F6A-A34C-9645D85641E1}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{72DE76A7-CA8C-41AF-A42B-759B1FC6070D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{73A7D812-996E-47E2-A66C-B8C5CE7482D3}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{75A7565C-1F6E-404B-9B75-2C9D854BC16C}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3.exe |
"{7D8A36E9-0AF4-4528-9800-655270E24C1B}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{7E281177-7985-40E9-8421-3CB8FCB0A502}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{80EA4142-3F4D-4919-B638-7E0F3EA03865}" = protocol=6 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{8133C4EB-7090-4740-ADAD-85FB413D5240}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{8572A10E-357D-4AC2-91BD-618820FFAC59}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8A7DECCF-62A4-404D-B0F0-E8294673627F}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{8DBFB32C-8601-40C5-B639-217874B21327}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe |
"{91DDB3DC-25CB-4B63-9432-71C3E4CE4568}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe |
"{97F8B7FA-CDD4-4040-B631-1727A7612455}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{9894261D-88C5-4BCA-908A-BB597F2264F6}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe |
"{9E6099CF-8079-4AFE-88C4-97BF08D93F51}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{A2BFB2EB-0D90-4783-BE9F-815DD00807C8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{A6A54B8C-7127-43FE-A0A0-97482B918781}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe |
"{A8AF3C0E-6B86-4137-ACD4-612C15934295}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{AE251191-1374-4B20-9F61-8879D9D2B035}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe |
"{AE45E746-CC52-491C-9CFE-7E56DBBCED5F}" = protocol=6 | dir=in | app=e:\program files (x86)\ea games\battlefield 2\bf2.exe |
"{AF92A45C-7685-4B1E-A1E8-7811A628A7EB}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{B93A1725-CFBC-407E-A906-B07763C61AB6}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{BBE3150E-89F6-4045-AA15-7B06A4F5F3DD}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{BDE7981C-F445-4444-82C0-D8AC1A41FC43}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3.exe |
"{BFA59022-B4F2-4CCB-ACA0-F4C035D08C91}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{C38D44CA-5E43-4662-BCF7-4C3D4B3310DB}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\crysis\bin32\crysis.exe |
"{C57094F0-F3FD-4185-96CF-C5F48D193FA0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe |
"{C7FA5565-3220-4ABF-B7CA-D053BC91FB3A}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\aceofspades\aos.exe |
"{CCD3ED44-684F-47E7-8286-31C15CD0762E}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{CD90D1A8-7343-451F-919C-768092F6CFFF}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{CE283E6A-A693-4212-9297-6CDD219DD516}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe |
"{CEB38770-24B3-490E-B156-EFA0CF1F1EFF}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D11C944C-87C3-45AB-8131-A8DE213BA798}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\nero blu-ray player\blu-rayplayer.exe |
"{D6FF371C-8401-4D2E-AB88-5F3DC0E49B0F}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\kings bounty armored princess\kb.exe |
"{D99066F4-AAD2-491D-BE92-CF8C8414B7E9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DA4EB97C-EBB1-4529-8ED0-90632397E627}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe |
"{DB919A9F-5CA3-4027-8191-BB523D3DD32F}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe |
"{DD8694D0-8BB0-45FE-B51B-BC7169D71706}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\nero blu-ray player\blu-rayplayer.exe |
"{DDE9BBC8-D681-4587-98D9-9B3CEB9BD018}" = protocol=17 | dir=in | app=e:\program files (x86)\origin\battlefield 3\bf3.exe |
"{E0952489-1D3C-4EC1-94C6-948CB183416C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{E31368FB-C45E-49C2-9A85-21022D58326C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqcopy2.exe |
"{E7709B5C-31C1-454F-91FB-9BE508FADE2B}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steamapps\common\magicka\magicka.exe |
"{E7784315-46C1-4BBB-9361-637D5E271952}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe |
"{E8D14F2B-86B2-438B-9544-485889D18630}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{F06E32AE-A2F4-4D8D-AC5A-239BDF2CC4B2}" = protocol=17 | dir=in | app=e:\program files (x86)\steam\steam.exe |
"{F0F611F8-B887-4963-AEE3-DC10D80BB2B8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe |
"{F10EFE00-FFEE-4AE0-9A3E-EC1AC823235D}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{F145BBC0-EFCC-4474-8F1E-5B03B4547196}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\nero 12\nero backitup\backitup.exe |
"{F1DA44CB-9737-4D5D-A52C-792B0E3F6E18}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe |
"{F510C4C5-5FDC-47D6-9617-1FCDD86F05B8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe |
"{F6C85B36-4503-480B-AB1A-2414753FF2E4}" = protocol=6 | dir=in | app=e:\program files (x86)\steam\steamapps\common\magicka\magicka.exe |
"{F8CDE1FF-E66F-4C9C-8A6B-C63E9C866967}" = protocol=6 | dir=in | app=e:\program files (x86)\origin\battlefield 3\bf3.exe |
"{F9E53EEF-079D-4B19-A89A-254A734DC871}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{FBCD5BD1-742A-4A25-A2DA-72065D7C1CEF}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{FC810E04-99B2-442E-89D7-767F3CBCD7A1}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe |
"{FFA698A6-36D3-44A3-B24F-44B4BDB1CA50}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{0FCCA77F-4DC2-4BBC-B7EF-07672C818511}C:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe |
"TCP Query User{2364837B-9FE4-4A06-B352-CF7F5C972A77}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"TCP Query User{9D8CE31F-FB54-4520-A7BB-65200CC0C036}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"TCP Query User{AF690C3B-14B4-4F01-8878-00B06C022EE1}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"TCP Query User{EE847CDE-867F-4951-A219-F7163BA8F746}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{1AB4DB92-D036-4873-87E0-E3DA32A0D3BD}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"UDP Query User{24A86CC2-1075-419E-93E5-BF32C4D3D5B8}C:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\readon technology\readon tv movie radio player 7.6.0.0\internettv.exe |
"UDP Query User{2F1EB5BB-5CFD-467A-BE7C-AECE1B948902}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{D57086E9-A05B-4ECA-9E7C-F7B62C8C33C2}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe |
"UDP Query User{FBB27A7F-06F9-478C-8347-D6C4ED6201A6}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1}" = Microsoft .NET Framework 4.5
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86417017FF}" = Java 7 Update 17 (64-bit)
"{4975DE61-6BF6-B9BC-1FDE-C04C5EC78E4C}" = AMD Media Foundation Decoders
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer
"{5E03A267-415E-5383-FA8F-3CE4145663B9}" = AMD Catalyst Install Manager
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6199B534-A1B6-46ED-873B-97B0ECF8F81E}" = Intel® Trusted Connect Service Client
"{64A3A4F4-B792-11D6-A78A-00B0D0170090}" = Java SE Development Kit 7 Update 9 (64-bit)
"{6CC6127A-D5E4-0479-DE97-1B0B6A062A43}" = AMD Drag and Drop Transcoding
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89EE4A30-080F-2C95-6F78-C98D18FBD74D}" = AMD Accelerated Video Transcoding
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-041B-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Slovak) 2007
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5
"{988329F4-A1A1-4D51-803C-EF2725A97627}" = HP Photosmart All-In-One Driver Software 13.0 Rel. 2
"{9CF11D16-ECEB-90A5-A028-CA9E068D848B}" = ccc-utility64
"CCleaner" = CCleaner
"Defraggler" = Defraggler
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"HPOCR" = OCR Software by I.R.I.S. 13.0
"MediaInfo" = MediaInfo 0.7.61
"Shop for HP Supplies" = Shop for HP Supplies
"Speccy" = Speccy
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)
"WinRAR archiver" = WinRAR 4.20 (64-bitová verzia)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{017F8447-2A1D-0DDB-B5D7-CA2BFACE2886}" = CCC Help French
"{02627ee5-eaca-4742-a9cc-e687631773e4}" = Nero ShowTime
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"{052A1E34-A54B-458C-A4E3-24C3E054754A}" = Nero Kwik Media
"{054E9A1C-3EA2-C657-E787-FD8DCF5C3D3B}" = CCC Help Czech
"{05C6B128-1B40-4495-9CB9-090B368BFA0A}" = Nero Video Samples
"{064A929A-4DE8-40CF-A901-BD40C14E4D25}" = PDF Architect
"{0708FF30-78C0-47B0-81F0-C84604DC769C}" = Nero Express Help (CHM)
"{086a7d8c-0a38-4c7f-819a-620275550d5c}" = Nero BurningROM
"{0B311221-05A5-4766-8D03-7A6446794156}" = Nero RescueAgent Help (CHM)
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{150D88F1-40AF-4678-A39D-BCE2332F34E5}" = Nero Abstract Themes
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1943C3BD-4462-4612-92C3-D36DD917C447}" = Nero Recode
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1B6F5E51-575E-4693-BCA2-7543570D076D}" = Nero Kwik Themes Basic
"{1c00c7c5-e615-4139-b817-7f4003de68c0}" = Nero PhotoSnap Help
"{1D30EA2E-5341-493E-8D71-0EED788B6CD9}" = Nero WaveEditor Help (CHM)
"{1DE2BD51-0300-772D-5E18-F337D95D5687}" = CCC Help German
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F16820E-D0E7-4636-939E-45CBFEFB06E1}" = Nero Kwik Media Help (CHM)
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20400dbd-e6db-45b8-9b6b-1dd7033818ec}" = Nero InfoTool
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{20EFC9AA-BBC1-4DFD-81FF-99654F71CBF8}" = HPPhotoSmartDiscLabel_PrintOnDisc
"{224E8FEB-5C1F-077F-6FC5-602AC1AE644D}" = CCC Help Danish
"{22856BC3-F893-4CBF-95F2-E1F63CD2B1AB}" = Nero Video Transitions 1
"{2348b586-c9ae-46ce-936c-a68e9426e214}" = Nero StartSmart Help
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{275E9C49-C72F-D754-DEB7-77F10A9C00D8}" = CCC Help Japanese
"{2890E324-6F3B-4975-8B95-E7D6D80E0226}" = Nero Burning ROM Help (CHM)
"{29E2C1C6-D76A-41D3-980F-6E346AA9A6A8}" = Nero Cliparts
"{29F67D84-3A70-456E-806A-52301B02070B}" = Nero Effects Basic
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{30049739-BE95-6591-B504-E6D7057D49CC}" = CCC Help Spanish
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{3143E3EB-17A5-48F9-90FC-D7CA556CA210}" = Nero CoverDesigner
"{33cf58f5-48d8-4575-83d6-96f574e4d83a}" = Nero DriveSpeed
"{359cfc0a-beb1-440d-95ba-cf63a86da34f}" = Nero Recode
"{362AB21A-E2C4-40CE-81C2-8C4D62B0635A}" = Media Go
"{368ba326-73ad-4351-84ed-3c0a7a52cc53}" = Nero Rescue Agent
"{3AAB08A3-F129-4BD5-B409-AE674F93759D}" = Prerequisite installer
"{3C2379D2-337A-4FFA-9017-BDFB80EC0931}" = OSCAR Editor
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.1102.1
"{3F1EB155-F96E-EB7B-2EF2-7375490E0FA9}" = CCC Help English
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{43e39830-1826-415d-8bae-86845787b54b}" = Nero Vision
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax
"{44BC0E51-F620-48B8-88FD-1576FB1F5B96}" = Nero CoverDesigner
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4B023D7B-9E67-795D-FB31-B5E1F6DCA451}" = CCC Help Italian
"{4D25D881-7183-462F-95C8-990CA1944E0B}" = Nero PiP Effects 1
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
"{4E7AC009-5212-499F-942F-A5AA42AE359E}" = Nero 12 Content Pack
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{504D84ED-AE75-4F85-A68B-BB3D4CB3E169}" = Nero Holiday and Sports Themes
"{54215B8A-6212-8DB8-39B4-98EE2BB98BD1}" = Media Go Video Playback Engine 1.116.101.02020
"{553C904F-57A2-4113-888E-BA0C3D1C69C0}" = Microsoft VC9 runtime libraries
"{55F6C486-8C75-2A72-DAFE-CE78A624C9F7}" = CCC Help Russian
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{595a3116-40bb-4e0f-a2e8-d7951da56270}" = NeroExpress
"{5AF23993-7152-1620-E43F-1B4542FB4F84}" = CCC Help Thai
"{5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}" = Nero Blu-ray Player Help (CHM)
"{5CD2E27A-F2C9-4A87-9A06-DFAF9A182481}" = Nero Express
"{5d9be3c1-8ba4-4e7e-82fd-9f74fa6815d1}" = Nero Vision
"{5e08ecd1-c98e-4711-bf65-8fd736b3f969}" = Nero RescueAgent Help
"{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}" = GameSpy Comrade
"{60c731fb-c951-41ce-ad41-8e54c8594609}" = Nero Disc Copy Gadget Help
"{62ac81f6-bdd3-4110-9d36-3e9eaab40999}" = Nero CoverDesigner
"{63326924-3CAF-C858-3A8F-8598C87019D7}" = Catalyst Control Center
"{63822E89-11AA-F8EC-D433-F72A85799EC0}" = CCC Help Greek
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66361420-4905-AEB8-17AE-172FDD164A7E}" = CCC Help Polish
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{685B0843-6C8D-4E42-B60D-2B86B45526E0}" = PS_AIO_02_Software_Min
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6F5A71BD-9EC9-4A59-BFBD-CA63CFB4885D}" = ACDSee 14
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{76335315-16A0-4DBB-B01C-5FDC6A5CB8A3}" = Nero WaveEditor
"{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}" = Catalyst Control Center InstallProxy
"{7748ac8c-18e3-43bb-959b-088faea16fb2}" = Nero StartSmart
"{77e33d87-255e-413e-9c8d-eed2a7f9bebf}" = Nero Live Help
"{7829db6f-a066-4e40-8912-cb07887c20bb}" = Nero BurnRights
"{7BD7A4BF-EA64-4BFE-A9D3-3FDC9B6EFC23}" = Nero Football (Soccer) Themes
"{80074966-5231-428D-9AE7-B7D5D2DC3246}" = Readon TV Movie Radio Player 7.6.0.0
"{800E31CD-E1E7-40EC-8410-5736E427F49A}" = SSDlife Pro
"{80836C86-1305-40C9-B7C9-F3A75266070D}" = Nero 12
"{828175FA-7307-4DBF-95AD-9CEE086B6F45}" = Welcome App (Start-up experience)
"{831D3D7B-169D-47F3-9117-D74934BF71BF}" = Nero WaveEditor
"{83202942-84b3-4c50-8622-b8c0aa2d2885}" = Nero Express
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83A4E573-E2C2-46FB-9DA6-6A2BBBF5A588}" = Nero Retro Film Themes
"{83FCCFCD-46E3-43FB-A397-78BFD5A8980A}" = Nero Video
"{86847081-B387-4F49-AED1-C9B0A090D66C}" = Nero Recode Help (CHM)
"{869200db-287a-4dc0-b02b-2b6787fbcd4c}" = Nero DiscSpeed
"{8773DD1C-5FB2-95B5-5A93-0EFEAC900A4D}" = CCC Help Norwegian
"{8B5AD338-7ABC-4ECB-9C2C-687F84AEDDB1}" = Nero Platinum Effects 12
"{8CCBB0BF-9CC1-1A65-BB93-56012A460EE6}" = CCC Help Portuguese
"{8EFB7927-48AD-4E6D-91B7-6B2BD6C3F380}" = Acronis Disk Director
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-041B-0000-0000000FF1CE}" = Microsoft Office Access MUI (Slovak) 2007
"{90120000-0015-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-041B-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Slovak) 2007
"{90120000-0016-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-041B-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Slovak) 2007
"{90120000-0018-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-041B-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Slovak) 2007
"{90120000-0019-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-041B-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Slovak) 2007
"{90120000-001A-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-041B-0000-0000000FF1CE}" = Microsoft Office Word MUI (Slovak) 2007
"{90120000-001B-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_PROPLUS_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040E-0000-0000000FF1CE}" = Microsoft Office Proof (Hungarian) 2007
"{90120000-001F-040E-0000-0000000FF1CE}_PROPLUS_{0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_PROPLUS_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-041B-1000-0000000FF1CE}_PROPLUS_{8382BA92-20E3-47B6-971B-F673F0492D4E}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-041B-0000-0000000FF1CE}" = Microsoft Office Proofing (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-041B-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Slovak) 2007
"{90120000-006E-041B-0000-0000000FF1CE}_PROPLUS_{8382BA92-20E3-47B6-971B-F673F0492D4E}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{907611B4-1B1B-4810-88CD-965FA49F35F6}" = C5200
"{94F8D42D-BB31-4858-9705-7D756D8D9655}" = PS_AIO_02_Software
"{955BF340-C379-4375-AA2F-F3BCB2A498AB}" = Nero Family and Events Themes
"{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}" = Google Earth
"{98a67610-a3b5-4098-a423-3708040026d3}" = "Nero SoundTrax Help
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C7C04AB-4B97-49DB-88A0-454795349008}" = Nero CoverDesigner Help (CHM)
"{9e82b934-9a25-445b-b8df-8012808074ac}" = Nero PhotoSnap
"{A0A3CE05-96CB-52E9-434E-074F3BB7807E}" = CCC Help Turkish
"{a209525b-3377-43f4-b886-32f6b6e7356f}" = Nero WaveEditor
"{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}" = Nero Blu-ray Player
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9C64319-932F-D02B-B14C-FFFC3EC49E77}" = CCC Help Chinese Standard
"{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Czech
"{ACE49D50-19CD-44A6-B192-46F985283B26}" = Nero PiP Effects Basic
"{ad6bc5cc-2ef0-49c4-b33d-cdc8b2c4dc80}" = Nero Recode Help
"{B128179D-A5E1-43AC-9422-12A109ECD2A0}" = Nero Video Help (CHM)
"{b1adf008-e898-4fe2-8a1f-690d9a06acaf}" = DolbyFiles
"{B28635AB-1DF3-4F07-BFEA-975D911B549B}" = hpphotosmartdisclabelplugin
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{B4B2096B-B13E-408E-8985-BD07463D5487}" = PS_AIO_02_ProductContext
"{B4E343DD-BAAB-4D59-AD9C-DEA0AFE09DF1}" = Mumble 1.2.3
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{b78120a0-cf84-4366-a393-4d0a59bc546c}" = Menu Templates - Starter Kit
"{B953732D-B623-4E84-B369-CFFF7B1AE06F}" = Nero RescueAgent
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components
"{C09DB932-7619-7B56-30E3-C0454811D6D7}" = CCC Help Korean
"{C22A4697-BD77-ACB1-744F-1FD0A0BFF798}" = CCC Help Swedish
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C4C6DF25-0E59-46EE-B24B-DF8749D8FF3A}" = Nero Image Samples
"{c5a7cb6c-e76d-408f-ba0e-85605420fe9d}" = SoundTrax
"{C994C746-C6D0-4EBA-B09E-DF7B18381B69}" = Nero ControlCenter Help (CHM)
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{cc019e3f-59d2-4486-8d4b-878105b62a71}" = Nero DiscSpeed
"{CE675FBD-75C3-45F1-B6AF-8D250861D536}" = Nero Disc Menus 3
"{ce96f5a5-584d-4f8f-aa3e-9baed413db72}" = Nero CoverDesigner Help
"{cef78f86-19a8-4bbd-91fa-e9b6b2d37348}" = C5200_Help
"{CF508721-0E1E-4F99-A359-59E4EA8DAEC1}" = Nero Burning ROM
"{d025a639-b9c9-417d-8531-208859000af8}" = NeroBurningROM
"{D4B457B2-260F-C561-CA87-703BD3B724CA}" = Catalyst Control Center Graphics Previews Common
"{D6CDB506-297D-AE70-0EF6-DE5185F961BE}" = CCC Help Chinese Traditional
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D86B0E2E-DF9A-441C-AF77-8D1A0FF00FA6}" = AIO_Scan
"{D9D8F2CF-FE2D-4644-9762-01F916FE90A9}" = HPPhotoSmartDiscLabel_PaperLabel
"{d9dcf92e-72eb-412d-ac71-3b01276e5f8b}" = Nero ShowTime
"{DA2D3078-A58C-45E8-8EE0-18B8BE6B34F7}" = Nero BackItUp
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{df6a95f5-adc1-406a-bdc6-2aa7cc0182aa}" = Nero Live
"{E17BCB76-9924-4BD5-B6D6-50D3407B4E74}" = Nero Disc Menus Basic
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{e498385e-1c51-459a-b45f-1721e37aa1a0}" = Movie Templates - Starter Kit
"{e5c7d048-f9b4-4219-b323-8bdb01a2563d}" = Nero DriveSpeed
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{e8631efb-6b9a-426c-b1ce-e7173ca26bf8}" = Nero WaveEditor Help
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{ECFD508E-68A2-91B2-46DD-1D03D783D94B}" = Catalyst Control Center Localization All
"{EDE361D5-35A5-DA7D-3462-C3DABD24029B}" = CCC Help Hungarian
"{EEBF1676-AF87-4266-93D8-0C14A34C4217}" = Nero Disc Menus 1
"{EF0D1292-8FC1-41BE-9740-DBC134F66415}" = Nero BackItUp Help (CHM)
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.108
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{f1861f30-3419-44db-b2a1-c274825698b3}" = Nero Disc Copy Gadget
"{F1E7DD6A-AE2D-D706-BEB3-937F76CA6AE9}" = CCC Help Finnish
"{f4041dce-3fe1-4e18-8a9e-9de65231ee36}" = Nero ControlCenter
"{F56F54DD-BCB2-1221-2CB7-E983A5CF9D15}" = CCC Help Dutch
"{f6bdd7c5-89ed-4569-9318-469aa9732572}" = Nero BurnRights
"{fbcdfd61-7dcf-4e71-9226-873ba0053139}" = Nero InfoTool
"{FE81E6B5-652B-40E7-B3B2-7171C6F297DA}" = Nero Disc Menus 2
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"avast" = avast! Internet Security
"Battlelog Web Plugins" = Battlelog Web Plugins
"DAEMON Tools Lite" = DAEMON Tools Lite
"DVDFab 8 Qt_is1" = DVDFab 8.2.2.0 (16/11/2012) Qt
"ESN Sonar-0.70.4" = ESN Sonar
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"FormatFactory" = FormatFactory 3.1.1
"Free PDF to Word Converter_is1" = Free PDF to Word Converter 1.5
"Google Chrome" = Google Chrome
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"InstallShield_{3C2379D2-337A-4FFA-9017-BDFB80EC0931}" = X7 Oscar Editor
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.5.5
"Mozilla Firefox 23.0.1 (x86 sk)" = Mozilla Firefox 23.0.1 (x86 sk)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"PROPLUS" = Microsoft Office Professional Plus 2007
"PunkBusterSvc" = PunkBuster Services
"Steam App 17300" = Crysis
"Steam App 220240" = Far Cry® 3
"Steam App 224540" = Ace of Spades
"Steam App 3170" = King's Bounty: Armored Princess
"Steam App 42910" = Magicka
"Steam App 440" = Team Fortress 2
"Steam App 620" = Portal 2
"TeamViewer 8" = TeamViewer 8
"Update Engine" = Sony Ericsson Update Engine
"Uplay" = Uplay
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.8
"Winamp" = Winamp
"yowindow" = YoWindow
"YU2010_is1" = Your Uninstaller! 7
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Winamp Detector Plug-in
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 25. 8. 2013 11:42:33 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 25. 8. 2013 14:01:16 | Computer Name = doma | Source = WinMgmt | ID = 10
Description =
Error - 25. 8. 2013 14:04:09 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 25. 8. 2013 14:04:09 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 27. 8. 2013 3:06:57 | Computer Name = doma | Source = WinMgmt | ID = 10
Description =
Error - 27. 8. 2013 3:10:47 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 27. 8. 2013 3:10:47 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 31. 8. 2013 12:12:11 | Computer Name = doma | Source = WinMgmt | ID = 10
Description =
Error - 31. 8. 2013 12:14:55 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
Error - 31. 8. 2013 12:14:55 | Computer Name = doma | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.
[ OSession Events ]
Error - 9. 1. 2013 7:04:35 | Computer Name = doma | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4584
seconds with 1440 seconds of active time. This session ended with a crash.
Error - 9. 1. 2013 7:47:27 | Computer Name = doma | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2566
seconds with 540 seconds of active time. This session ended with a crash.
Error - 9. 1. 2013 7:53:32 | Computer Name = doma | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 356
seconds with 240 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 20. 3. 2013 0:11:32 | Computer Name = doma | Source = Service Control Manager | ID = 7023
Description = Služba Computer Browser bola ukončená s nasledujúcou chybou: %%1115
Error - 20. 3. 2013 0:11:32 | Computer Name = doma | Source = Service Control Manager | ID = 7023
Description = Služba Server bola ukončená s nasledujúcou chybou: %%1062
Error - 20. 3. 2013 0:11:34 | Computer Name = doma | Source = Microsoft-Windows-Directory-Services-SAM | ID = 12291
Description = SAM failed to start the TCP/IP or SPX/IPX listening thread
Error - 22. 3. 2013 10:50:19 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 22. 3. 2013 10:50:21 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 23. 3. 2013 5:44:48 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 23. 3. 2013 5:44:49 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR7.
Error - 1. 4. 2013 10:01:25 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR13.
Error - 1. 4. 2013 10:01:26 | Computer Name = doma | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk7\DR13.
Error - 1. 4. 2013 18:11:26 | Computer Name = doma | Source = Service Control Manager | ID = 7000
Description = Spustenie služby cpuz135 zlyhalo kvôli nasledujúcej chybe: %%3
< End of report >
nepouzivam diakritiku a pomoc si vazim
Re: Prosim o preventivku
Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Znovu spustte OTL jako spravceDo spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)
Kód: Vybrat vše
:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]
[CreateRestorePoint]
:services
AdobeARMservice
NAUpdate
Nero BackItUp Scheduler 4.0
gupdate
SkypeUpdate
AdobeFlashPlayerUpdateSvc
gupdatem
:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
:otl
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\..\SearchScopes\{237E0C77-ACE8-4197-ABD7-5A0AAA92B36F}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559
[2012/12/01 13:50:38 | 000,002,532 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\aol-search.xml
[2013/05/10 23:57:31 | 000,006,505 | ---- | M] () -- C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\babylon.xml
O3 - HKU\S-1-5-21-1717893368-2303346206-3624378862-1000\..\Toolbar\WebBrowser: (no name) - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\*.tmp files -> C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\*.tmp files -> C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
@Alternate Data Stream - 178 bytes -> C:\ProgramData\TEMP:1CE11B51
:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KrosMeninyP] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] /64
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
Po restartu se objevi novy log, ten sem dejte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
bondasko
- Vzorný návštěvník
- Příspěvky: 174
- Registrován: 18 čer 2012 16:37
- Bydliště: Presov, Slovensko
Re: Prosim o preventivku
All processes killed
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: bondasko
->Temp folder emptied: 1372 bytes
->Temporary Internet Files folder emptied: 128 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 49606560 bytes
->Google Chrome cache emptied: 6316818 bytes
->Flash cache emptied: 27044818 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7157 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 79,00 mb
[EMPTYFLASH]
User: All Users
User: bondasko
->Flash cache emptied: 0 bytes
User: Default
User: Default User
User: Public
Total Flash Files Cleaned = 0,00 mb
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service NAUpdate stopped successfully!
Service NAUpdate deleted successfully!
Service Nero BackItUp Scheduler 4.0 stopped successfully!
Service Nero BackItUp Scheduler 4.0 deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\Software\Microsoft\Internet Explorer\SearchScopes\{237E0C77-ACE8-4197-ABD7-5A0AAA92B36F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{237E0C77-ACE8-4197-ABD7-5A0AAA92B36F}\ not found.
C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\aol-search.xml moved successfully.
C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\babylon.xml moved successfully.
Registry value HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}\ not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\Installer\MSID461.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\BITC1F0.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\BITC211.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\BITC201.tmp deleted successfully.
ADS C:\ProgramData\TEMP:1CE11B51 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KrosMeninyP\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
OTL by OldTimer - Version 3.2.69.0 log created on 09012013_164039
Files\Folders moved on Reboot...
File\Folder C:\Users\bondasko\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: bondasko
->Temp folder emptied: 1372 bytes
->Temporary Internet Files folder emptied: 128 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 49606560 bytes
->Google Chrome cache emptied: 6316818 bytes
->Flash cache emptied: 27044818 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7157 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 79,00 mb
[EMPTYFLASH]
User: All Users
User: bondasko
->Flash cache emptied: 0 bytes
User: Default
User: Default User
User: Public
Total Flash Files Cleaned = 0,00 mb
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service NAUpdate stopped successfully!
Service NAUpdate deleted successfully!
Service Nero BackItUp Scheduler 4.0 stopped successfully!
Service Nero BackItUp Scheduler 4.0 deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\Software\Microsoft\Internet Explorer\SearchScopes\{237E0C77-ACE8-4197-ABD7-5A0AAA92B36F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{237E0C77-ACE8-4197-ABD7-5A0AAA92B36F}\ not found.
C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\aol-search.xml moved successfully.
C:\Users\bondasko\AppData\Roaming\mozilla\firefox\profiles\lmldlavy.default\searchplugins\babylon.xml moved successfully.
Registry value HKEY_USERS\S-1-5-21-1717893368-2303346206-3624378862-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}\ not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\Installer\MSID461.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\04f928f3d08c1b3ebb3d20634b77577f\BITC1F0.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\93edcf9c560cc7da92b250a3fc13b771\BITC211.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\bbe0294f55923618944aeb5c3877f84c\BITC201.tmp deleted successfully.
ADS C:\ProgramData\TEMP:1CE11B51 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KrosMeninyP\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
OTL by OldTimer - Version 3.2.69.0 log created on 09012013_164039
Files\Folders moved on Reboot...
File\Folder C:\Users\bondasko\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
nepouzivam diakritiku a pomoc si vazim
Re: Prosim o preventivku
Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce) vyosek píše:
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.
Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustteKliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat
Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
Defragmentujte disk(y)Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.
Pak napiste, jak je na tom pc.Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
-
bondasko
- Vzorný návštěvník
- Příspěvky: 174
- Registrován: 18 čer 2012 16:37
- Bydliště: Presov, Slovensko
Re: Prosim o preventivku
Logfile of random's system information tool 1.09 (written by random/random)
Run by bondasko at 2013-09-02 05:43:33
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 37 GB (43%) free of 86 GB
Total RAM: 8154 MB (76% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:43:34, on 2. 9. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16660)
Boot mode: Normal
Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\bondasko.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: BrowserDefendert - Unknown owner - C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\ConversionService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9045 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
taskeng.exe {325DE23A-AA13-4AFE-974C-6CF5EC402FC6}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\PDF Architect\HelperService.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\PDF Architect\ConversionService.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-252014ad-a5bb-4fb8-8682-c0824b8135b2 -SystemEventPortName:HostProcess-780138da-62e6-4230-bf4e-772e1131c845 -IoCancelEventPortName:HostProcess-a24f88c6-2246-476f-8a5b-51827e27bc46 -NonStateChangingEventPortName:HostProcess-7da84bee-4acd-4d18-b8a8-8d17e4f2c45e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:59207c64-c95f-4905-9407-feb9da8485fe -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
taskeng.exe {F660F4BA-A1D7-4F42-AEE7-7D5AD60539BD}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 540 544 552 65536 548
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4148.0.1825094646\139015672" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19 --gpu-vendor-id=0x1002 --gpu-device-id=0x683d --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=9.12.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="D3D11Experiment/Enabled/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control14 pct:10d m29stable:pp2/NewMenuStyle/Compact2/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_44/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="4148.3.443546268\661930305" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\bondasko\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\bondasko\AppData\Roaming\Mozilla\Firefox\Profiles\lmldlavy.default
prefs.js - "browser.search.useDBForOrder" - true
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Nero.com/KM]
"Description"=
"Path"=C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nullsoft.com/winampDetector;version=1]
"Description"=Winamp Detector
"Path"=C:\Program Files (x86)\Winamp Detect\npwachk.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
firefox@firefox.sk
searchsuggest@firefox.sk
urlbox@firefox.sk
C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
vyhladavanie.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-06 551840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-06 209824]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
PDF Architect Helper - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08 92208]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-06-23 463272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-06-23 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2012-03-20 3340288]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-05-11 5119600]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-09-02 05:43:33 ----D---- C:\rsit
2013-09-01 15:01:06 ----D---- C:\Users\bondasko\AppData\Roaming\Photo DVD Slideshow
2013-09-01 15:01:06 ----D---- C:\ProgramData\Anvsoft
2013-09-01 15:00:59 ----D---- C:\Program Files (x86)\Photo DVD Slideshow Professional
2013-08-25 16:48:35 ----D---- C:\Users\bondasko\AppData\Roaming\Malwarebytes
2013-08-25 16:47:51 ----D---- C:\ProgramData\Malwarebytes
2013-08-25 16:37:54 ----D---- C:\Program Files (x86)\Nero
2013-08-25 14:54:52 ----D---- C:\ProgramData\Ahead
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\TwnLib20.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\picn20.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\ImagXpr5.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\imagx5.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\imagr5.dll
2013-08-25 13:17:32 ----A---- C:\Windows\system32\pdfcmon.dll
2013-08-25 13:17:31 ----D---- C:\Program Files (x86)\PDFCreator
2013-08-25 13:16:31 ----D---- C:\Program Files (x86)\PDF Architect
2013-08-25 13:14:44 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-08-25 13:14:41 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-08-17 05:39:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-08-15 03:02:33 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 03:02:32 ----A---- C:\Windows\system32\ieui.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\iesysprep.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\iesetup.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\iernonce.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\ie4uinit.exe
2013-08-15 03:02:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-08-15 03:02:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-08-15 03:02:31 ----A---- C:\Windows\system32\iertutil.dll
2013-08-15 03:02:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-08-15 03:02:30 ----A---- C:\Windows\system32\msfeeds.dll
2013-08-15 03:02:30 ----A---- C:\Windows\system32\jscript9.dll
2013-08-15 03:02:30 ----A---- C:\Windows\system32\jscript.dll
2013-08-15 03:02:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-08-15 03:02:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-08-15 03:02:29 ----A---- C:\Windows\system32\urlmon.dll
2013-08-15 03:02:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-08-15 03:02:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-08-15 03:02:28 ----A---- C:\Windows\system32\wininet.dll
2013-08-15 03:02:28 ----A---- C:\Windows\system32\jsproxy.dll
2013-08-15 03:02:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-08-15 03:02:26 ----A---- C:\Windows\system32\mshtml.dll
2013-08-15 03:02:26 ----A---- C:\Windows\system32\ieframe.dll
2013-08-15 03:02:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-08-15 03:00:37 ----D---- C:\Windows\system32\MRT
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\wintrust.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\cryptsvc.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\cryptnet.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\crypt32.dll
2013-08-14 21:55:04 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-08-14 21:55:04 ----A---- C:\Windows\system32\tzres.dll
2013-08-14 21:55:02 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-08-14 21:55:02 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-08-14 21:55:02 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-08-14 21:55:02 ----A---- C:\Windows\system32\rpcrt4.dll
2013-08-14 21:55:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-08-14 21:55:00 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-08-14 21:55:00 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-08-14 21:55:00 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-08-14 21:55:00 ----A---- C:\Windows\system32\wow64.dll
2013-08-14 21:55:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-08-14 21:55:00 ----A---- C:\Windows\system32\ntdll.dll
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\user.exe
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-08-14 21:54:59 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-08-14 21:54:59 ----A---- C:\Windows\system32\drivers\tcpip.sys
======List of files/folders modified in the last 1 month======
2013-09-02 05:43:34 ----D---- C:\Windows\Temp
2013-09-02 05:43:34 ----D---- C:\Program Files\trend micro
2013-09-02 05:41:11 ----D---- C:\Windows\System32
2013-09-02 05:41:11 ----D---- C:\Windows\inf
2013-09-02 05:41:11 ----D---- C:\Users\bondasko\AppData\Roaming\Winamp
2013-09-02 05:41:11 ----D---- C:\Users\bondasko\AppData\Roaming\uTorrent
2013-09-02 05:41:11 ----D---- C:\Users\bondasko\AppData\Roaming\Media Player Classic
2013-09-02 05:41:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-02 05:41:09 ----D---- C:\Windows
2013-09-02 05:40:20 ----D---- C:\Program Files\CCleaner
2013-09-02 05:39:33 ----D---- C:\Windows\system32\config
2013-09-02 05:38:39 ----A---- C:\Windows\SYSWOW64\log.txt
2013-09-01 16:41:28 ----SHD---- C:\Windows\Installer
2013-09-01 16:41:28 ----D---- C:\Windows\Tasks
2013-09-01 16:41:16 ----SHD---- C:\System Volume Information
2013-09-01 16:40:50 ----D---- C:\Windows\system32\drivers\etc
2013-09-01 15:38:42 ----D---- C:\Users\bondasko\AppData\Roaming\Skype
2013-09-01 15:28:00 ----AD---- C:\ProgramData\TEMP
2013-09-01 15:01:06 ----HD---- C:\ProgramData
2013-09-01 15:01:01 ----D---- C:\Windows\SysWOW64
2013-09-01 15:00:59 ----D---- C:\Program Files (x86)
2013-08-27 20:10:21 ----D---- C:\Windows\system32\drivers
2013-08-25 17:26:11 ----D---- C:\ProgramData\Nero
2013-08-25 17:24:46 ----HD---- C:\Config.Msi
2013-08-25 16:28:08 ----D---- C:\Windows\system32\Tasks
2013-08-25 14:54:52 ----D---- C:\Program Files (x86)\Common Files
2013-08-25 14:36:39 ----D---- C:\Windows\system32\catroot
2013-08-25 13:14:50 ----D---- C:\Windows\system32\DriverStore
2013-08-25 13:08:09 ----D---- C:\Windows\system32\catroot2
2013-08-25 13:05:25 ----D---- C:\Program Files\Defraggler
2013-08-25 12:41:13 ----D---- C:\Program Files (x86)\JDownloader
2013-08-25 12:38:12 ----D---- C:\Program Files (x86)\Winamp
2013-08-25 12:37:54 ----D---- C:\Program Files (x86)\Winamp Detect
2013-08-25 12:29:46 ----D---- C:\Program Files\Speccy
2013-08-25 12:17:05 ----D---- C:\Users\bondasko\AppData\Roaming\vlc
2013-08-22 17:54:36 ----D---- C:\Windows\SoftwareDistribution
2013-08-22 17:52:42 ----D---- C:\Windows\Panther
2013-08-22 17:52:42 ----D---- C:\Windows\Logs
2013-08-22 17:52:42 ----D---- C:\Windows\debug
2013-08-19 13:35:58 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-08-18 16:39:59 ----D---- C:\ProgramData\Skype
2013-08-18 16:39:58 ----RD---- C:\Program Files (x86)\Skype
2013-08-18 09:34:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-15 03:44:28 ----D---- C:\Windows\rescache
2013-08-15 03:30:01 ----D---- C:\Windows\Microsoft.NET
2013-08-15 03:29:48 ----RSD---- C:\Windows\assembly
2013-08-15 03:19:15 ----D---- C:\Windows\winsxs
2013-08-15 03:18:17 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-08-15 03:18:17 ----D---- C:\Windows\system32\sk-SK
2013-08-15 03:18:17 ----D---- C:\Windows\AppPatch
2013-08-15 03:18:17 ----D---- C:\Program Files\Internet Explorer
2013-08-15 03:18:17 ----D---- C:\Program Files (x86)\Internet Explorer
2013-08-15 03:01:35 ----D---- C:\ProgramData\Microsoft Help
2013-08-15 03:00:35 ----A---- C:\Windows\system32\MRT.exe
2013-08-14 20:59:04 ----D---- C:\Users\bondasko\AppData\Roaming\Origin
2013-08-14 20:59:04 ----D---- C:\ProgramData\Origin
2013-08-12 15:07:54 ----RSD---- C:\Windows\Fonts
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2013-03-13 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2013-05-09 270824]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-09 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-06-27 189936]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2012-12-01 132704]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-12-01 310368]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-11-02 21616]
R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2013-05-09 131232]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2013-05-09 22600]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-05-09 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-06-27 1030952]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-06-27 378944]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-09 64288]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-25 283064]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-09 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-08-12 104560]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2012-05-04 2196592]
S3 cpuz136;cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2012-12-02 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2012-12-02 27760]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;Sony sa0107 ADB Interface; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-05-09 137960]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-08 607456]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2011-12-16 161560]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-12-16 277784]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [2013-04-08 1320496]
R2 PDF Architect Service;PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [2013-04-08 799280]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-06-18 76888]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-12-12 2156952]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-08-07 4308320]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-12-16 363800]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2012-05-04 27760]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 BrowserDefendert;BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-09 123856]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-17 117656]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-05-04 543656]
S3 stllssvr;stllssvr; C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe [2007-05-03 74656]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-30 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-09 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
-----------------EOF-----------------
Run by bondasko at 2013-09-02 05:43:33
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 37 GB (43%) free of 86 GB
Total RAM: 8154 MB (76% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:43:34, on 2. 9. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16660)
Boot mode: Normal
Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\bondasko.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: BrowserDefendert - Unknown owner - C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\ConversionService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9045 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
taskeng.exe {325DE23A-AA13-4AFE-974C-6CF5EC402FC6}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\PDF Architect\HelperService.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\PDF Architect\ConversionService.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-252014ad-a5bb-4fb8-8682-c0824b8135b2 -SystemEventPortName:HostProcess-780138da-62e6-4230-bf4e-772e1131c845 -IoCancelEventPortName:HostProcess-a24f88c6-2246-476f-8a5b-51827e27bc46 -NonStateChangingEventPortName:HostProcess-7da84bee-4acd-4d18-b8a8-8d17e4f2c45e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:59207c64-c95f-4905-9407-feb9da8485fe -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
taskeng.exe {F660F4BA-A1D7-4F42-AEE7-7D5AD60539BD}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 540 544 552 65536 548
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4148.0.1825094646\139015672" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19 --gpu-vendor-id=0x1002 --gpu-device-id=0x683d --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=9.12.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="D3D11Experiment/Enabled/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control14 pct:10d m29stable:pp2/NewMenuStyle/Compact2/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_44/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="4148.3.443546268\661930305" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\bondasko\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\bondasko\AppData\Roaming\Mozilla\Firefox\Profiles\lmldlavy.default
prefs.js - "browser.search.useDBForOrder" - true
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Nero.com/KM]
"Description"=
"Path"=C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nullsoft.com/winampDetector;version=1]
"Description"=Winamp Detector
"Path"=C:\Program Files (x86)\Winamp Detect\npwachk.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
firefox@firefox.sk
searchsuggest@firefox.sk
urlbox@firefox.sk
C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
vyhladavanie.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-06 551840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-06 209824]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
PDF Architect Helper - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08 92208]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-06-23 463272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-06-23 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2012-03-20 3340288]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-05-11 5119600]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-09-02 05:43:33 ----D---- C:\rsit
2013-09-01 15:01:06 ----D---- C:\Users\bondasko\AppData\Roaming\Photo DVD Slideshow
2013-09-01 15:01:06 ----D---- C:\ProgramData\Anvsoft
2013-09-01 15:00:59 ----D---- C:\Program Files (x86)\Photo DVD Slideshow Professional
2013-08-25 16:48:35 ----D---- C:\Users\bondasko\AppData\Roaming\Malwarebytes
2013-08-25 16:47:51 ----D---- C:\ProgramData\Malwarebytes
2013-08-25 16:37:54 ----D---- C:\Program Files (x86)\Nero
2013-08-25 14:54:52 ----D---- C:\ProgramData\Ahead
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\TwnLib20.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\picn20.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\ImagXpr5.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\imagx5.dll
2013-08-25 14:54:52 ----A---- C:\Windows\SYSWOW64\imagr5.dll
2013-08-25 13:17:32 ----A---- C:\Windows\system32\pdfcmon.dll
2013-08-25 13:17:31 ----D---- C:\Program Files (x86)\PDFCreator
2013-08-25 13:16:31 ----D---- C:\Program Files (x86)\PDF Architect
2013-08-25 13:14:44 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-08-25 13:14:41 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-08-17 05:39:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-08-15 03:02:33 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-08-15 03:02:32 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 03:02:32 ----A---- C:\Windows\system32\ieui.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\iesysprep.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\iesetup.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\iernonce.dll
2013-08-15 03:02:32 ----A---- C:\Windows\system32\ie4uinit.exe
2013-08-15 03:02:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-08-15 03:02:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-08-15 03:02:31 ----A---- C:\Windows\system32\iertutil.dll
2013-08-15 03:02:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-08-15 03:02:30 ----A---- C:\Windows\system32\msfeeds.dll
2013-08-15 03:02:30 ----A---- C:\Windows\system32\jscript9.dll
2013-08-15 03:02:30 ----A---- C:\Windows\system32\jscript.dll
2013-08-15 03:02:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-08-15 03:02:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-08-15 03:02:29 ----A---- C:\Windows\system32\urlmon.dll
2013-08-15 03:02:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-08-15 03:02:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-08-15 03:02:28 ----A---- C:\Windows\system32\wininet.dll
2013-08-15 03:02:28 ----A---- C:\Windows\system32\jsproxy.dll
2013-08-15 03:02:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-08-15 03:02:26 ----A---- C:\Windows\system32\mshtml.dll
2013-08-15 03:02:26 ----A---- C:\Windows\system32\ieframe.dll
2013-08-15 03:02:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-08-15 03:00:37 ----D---- C:\Windows\system32\MRT
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-08-14 21:55:07 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\wintrust.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\cryptsvc.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\cryptnet.dll
2013-08-14 21:55:07 ----A---- C:\Windows\system32\crypt32.dll
2013-08-14 21:55:04 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-08-14 21:55:04 ----A---- C:\Windows\system32\tzres.dll
2013-08-14 21:55:02 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-08-14 21:55:02 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-08-14 21:55:02 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-08-14 21:55:02 ----A---- C:\Windows\system32\rpcrt4.dll
2013-08-14 21:55:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-08-14 21:55:00 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-08-14 21:55:00 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-08-14 21:55:00 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-08-14 21:55:00 ----A---- C:\Windows\system32\wow64.dll
2013-08-14 21:55:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-08-14 21:55:00 ----A---- C:\Windows\system32\ntdll.dll
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\user.exe
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-08-14 21:54:59 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-08-14 21:54:59 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-08-14 21:54:59 ----A---- C:\Windows\system32\drivers\tcpip.sys
======List of files/folders modified in the last 1 month======
2013-09-02 05:43:34 ----D---- C:\Windows\Temp
2013-09-02 05:43:34 ----D---- C:\Program Files\trend micro
2013-09-02 05:41:11 ----D---- C:\Windows\System32
2013-09-02 05:41:11 ----D---- C:\Windows\inf
2013-09-02 05:41:11 ----D---- C:\Users\bondasko\AppData\Roaming\Winamp
2013-09-02 05:41:11 ----D---- C:\Users\bondasko\AppData\Roaming\uTorrent
2013-09-02 05:41:11 ----D---- C:\Users\bondasko\AppData\Roaming\Media Player Classic
2013-09-02 05:41:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-02 05:41:09 ----D---- C:\Windows
2013-09-02 05:40:20 ----D---- C:\Program Files\CCleaner
2013-09-02 05:39:33 ----D---- C:\Windows\system32\config
2013-09-02 05:38:39 ----A---- C:\Windows\SYSWOW64\log.txt
2013-09-01 16:41:28 ----SHD---- C:\Windows\Installer
2013-09-01 16:41:28 ----D---- C:\Windows\Tasks
2013-09-01 16:41:16 ----SHD---- C:\System Volume Information
2013-09-01 16:40:50 ----D---- C:\Windows\system32\drivers\etc
2013-09-01 15:38:42 ----D---- C:\Users\bondasko\AppData\Roaming\Skype
2013-09-01 15:28:00 ----AD---- C:\ProgramData\TEMP
2013-09-01 15:01:06 ----HD---- C:\ProgramData
2013-09-01 15:01:01 ----D---- C:\Windows\SysWOW64
2013-09-01 15:00:59 ----D---- C:\Program Files (x86)
2013-08-27 20:10:21 ----D---- C:\Windows\system32\drivers
2013-08-25 17:26:11 ----D---- C:\ProgramData\Nero
2013-08-25 17:24:46 ----HD---- C:\Config.Msi
2013-08-25 16:28:08 ----D---- C:\Windows\system32\Tasks
2013-08-25 14:54:52 ----D---- C:\Program Files (x86)\Common Files
2013-08-25 14:36:39 ----D---- C:\Windows\system32\catroot
2013-08-25 13:14:50 ----D---- C:\Windows\system32\DriverStore
2013-08-25 13:08:09 ----D---- C:\Windows\system32\catroot2
2013-08-25 13:05:25 ----D---- C:\Program Files\Defraggler
2013-08-25 12:41:13 ----D---- C:\Program Files (x86)\JDownloader
2013-08-25 12:38:12 ----D---- C:\Program Files (x86)\Winamp
2013-08-25 12:37:54 ----D---- C:\Program Files (x86)\Winamp Detect
2013-08-25 12:29:46 ----D---- C:\Program Files\Speccy
2013-08-25 12:17:05 ----D---- C:\Users\bondasko\AppData\Roaming\vlc
2013-08-22 17:54:36 ----D---- C:\Windows\SoftwareDistribution
2013-08-22 17:52:42 ----D---- C:\Windows\Panther
2013-08-22 17:52:42 ----D---- C:\Windows\Logs
2013-08-22 17:52:42 ----D---- C:\Windows\debug
2013-08-19 13:35:58 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-08-18 16:39:59 ----D---- C:\ProgramData\Skype
2013-08-18 16:39:58 ----RD---- C:\Program Files (x86)\Skype
2013-08-18 09:34:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-15 03:44:28 ----D---- C:\Windows\rescache
2013-08-15 03:30:01 ----D---- C:\Windows\Microsoft.NET
2013-08-15 03:29:48 ----RSD---- C:\Windows\assembly
2013-08-15 03:19:15 ----D---- C:\Windows\winsxs
2013-08-15 03:18:17 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-08-15 03:18:17 ----D---- C:\Windows\system32\sk-SK
2013-08-15 03:18:17 ----D---- C:\Windows\AppPatch
2013-08-15 03:18:17 ----D---- C:\Program Files\Internet Explorer
2013-08-15 03:18:17 ----D---- C:\Program Files (x86)\Internet Explorer
2013-08-15 03:01:35 ----D---- C:\ProgramData\Microsoft Help
2013-08-15 03:00:35 ----A---- C:\Windows\system32\MRT.exe
2013-08-14 20:59:04 ----D---- C:\Users\bondasko\AppData\Roaming\Origin
2013-08-14 20:59:04 ----D---- C:\ProgramData\Origin
2013-08-12 15:07:54 ----RSD---- C:\Windows\Fonts
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2013-03-13 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2013-05-09 270824]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-09 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-06-27 189936]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2012-12-01 132704]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-12-01 310368]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-11-02 21616]
R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2013-05-09 131232]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2013-05-09 22600]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-05-09 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-06-27 1030952]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-06-27 378944]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-09 64288]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-25 283064]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-09 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-08-12 104560]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2012-05-04 2196592]
S3 cpuz136;cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2012-12-02 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2012-12-02 27760]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;Sony sa0107 ADB Interface; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-05-09 137960]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-08 607456]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2011-12-16 161560]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-12-16 277784]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [2013-04-08 1320496]
R2 PDF Architect Service;PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [2013-04-08 799280]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-06-18 76888]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-12-12 2156952]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-08-07 4308320]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-12-16 363800]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2012-05-04 27760]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 BrowserDefendert;BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-09 123856]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-17 117656]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-05-04 543656]
S3 stllssvr;stllssvr; C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe [2007-05-03 74656]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-30 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-09 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
-----------------EOF-----------------
nepouzivam diakritiku a pomoc si vazim
-
bondasko
- Vzorný návštěvník
- Příspěvky: 174
- Registrován: 18 čer 2012 16:37
- Bydliště: Presov, Slovensko
Re: Prosim o preventivku
pocitac sa sprava normalne, uz mi nevyhadzuje babylon ako hlavnu stranku
vdaka
vdaka
nepouzivam diakritiku a pomoc si vazim
Re: Prosim o preventivku
Log vypada cisty, takze pokud neni s pc problem, mame hotovo 
Nemate zac!
Mejte se a treba zase nekdy
Nemate zac!
Mejte se a treba zase nekdy
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Prosim o preventivku
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Přispějete na provoz fóra?
