VIRY.CZ

[2012/12/15 22:34:19 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012/12/15 22:27:00 | 000,000,950 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/12/15 22:02:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/12/15 21:27:01 | 000,000,946 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/12/15 19:26:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Ondra\Desktop\OTL.exe
[2012/12/15 17:51:53 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/12/15 16:27:56 | 000,037,232 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/12/15 16:27:56 | 000,037,232 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/12/15 16:19:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/12/15 16:19:42 | 3180,220,416 | -HS- | M] () -- C:\hiberfil.sys
[2012/12/15 16:12:06 | 000,545,819 | ---- | M] () -- C:\Users\Ondra\Desktop\adwcleaner.exe
[2012/12/15 16:11:49 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/12/15 14:58:49 | 000,001,152 | ---- | M] () -- C:\Users\Ondra\Desktop\XviD4PSP 5.0.lnk
[2012/12/15 14:30:12 | 000,003,011 | ---- | M] () -- C:\Users\Ondra\Desktop\HDTV2DVD.lnk
[2012/12/15 14:23:07 | 000,003,584 | ---- | M] () -- C:\Users\Ondra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/12/15 14:22:55 | 000,000,093 | ---- | M] () -- C:\Users\Ondra\AppData\Local\fusioncache.dat
[2012/12/15 14:20:10 | 000,001,331 | ---- | M] () -- C:\Users\Ondra\Desktop\Wondershare HD Video Converter.lnk
[2012/12/15 14:16:16 | 002,186,538 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012/12/15 14:16:16 | 000,640,430 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012/12/15 14:16:16 | 000,625,220 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/12/15 14:16:16 | 000,563,522 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat
[2012/12/15 14:16:16 | 000,127,052 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012/12/15 14:16:16 | 000,110,600 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/12/15 14:16:16 | 000,095,338 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat
[2012/12/15 12:05:03 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\Ondra\Desktop\dds.exe
[2012/12/15 10:16:16 | 000,935,175 | ---- | M] () -- C:\Users\Ondra\Desktop\RSITx64.exe
[2012/12/14 23:35:54 | 000,002,066 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012/12/14 23:12:21 | 000,054,156 | -H-- | M] () -- C:\Windows\QTFont.qfn
[2012/12/14 23:12:21 | 000,001,409 | ---- | M] () -- C:\Windows\QTFont.for
[2012/12/14 09:05:31 | 000,414,240 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/12/13 20:56:17 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012/12/13 19:19:06 | 000,000,009 | ---- | M] () -- C:\END
[2012/12/13 14:33:06 | 000,001,320 | ---- | M] () -- C:\Users\Public\Desktop\Freemake Video Converter.lnk
[2012/12/11 23:02:19 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/12/11 23:02:19 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/12/04 19:12:40 | 000,001,609 | ---- | M] () -- C:\Users\Ondra\Desktop\DivX Movies.lnk
[2012/12/04 19:12:39 | 000,001,152 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2012/12/04 16:38:54 | 000,011,478 | ---- | M] () -- C:\Users\Ondra\Desktop\výpověd.odt
[2012/12/04 09:08:50 | 000,000,332 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForOndra.job
[2012/12/03 15:36:36 | 000,129,216 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012/12/03 15:36:35 | 000,099,912 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2012/12/02 17:21:36 | 000,001,116 | ---- | M] () -- C:\Users\Public\Desktop\Free Video Converter.lnk
[2012/12/02 17:21:05 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Free DVD Converter.lnk
[2012/12/02 17:15:48 | 000,001,137 | ---- | M] () -- C:\Users\Public\Desktop\Free HD Video Converter.lnk
[2012/11/30 17:08:57 | 000,002,140 | ---- | M] () -- C:\Users\Public\Desktop\Splash PRO EX.lnk
[2012/11/29 21:13:35 | 002,110,044 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/11/28 16:38:19 | 000,002,185 | ---- | M] () -- C:\Users\Public\Desktop\HP Support Assistant.lnk
[2012/11/25 19:00:00 | 000,112,640 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012/11/23 09:04:59 | 000,011,426 | ---- | M] () -- C:\Users\Ondra\Desktop\žádost o byt.odt
[2012/11/22 17:17:41 | 000,000,988 | ---- | M] () -- C:\Users\Ondra\Desktop\DVDx 4.0.lnk
[2012/11/22 16:30:25 | 000,002,111 | ---- | M] () -- C:\Users\Public\Desktop\Splash Lite.lnk
[2012/11/22 16:29:41 | 000,002,093 | ---- | M] () -- C:\Users\Public\Desktop\Splash PRO.lnk
[2012/11/20 20:00:36 | 000,002,750 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk
[2012/11/20 20:00:36 | 000,002,256 | ---- | M] () -- C:\Users\Public\Desktop\Online aktualizace Nero.lnk
[2012/11/16 20:17:15 | 000,027,800 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/12/15 19:31:55 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012/12/15 17:51:53 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/12/15 16:12:57 | 000,545,819 | ---- | C] () -- C:\Users\Ondra\Desktop\adwcleaner.exe
[2012/12/15 14:58:49 | 000,001,152 | ---- | C] () -- C:\Users\Ondra\Desktop\XviD4PSP 5.0.lnk
[2012/12/15 14:30:12 | 000,003,011 | ---- | C] () -- C:\Users\Ondra\Desktop\HDTV2DVD.lnk
[2012/12/15 14:22:55 | 000,000,093 | ---- | C] () -- C:\Users\Ondra\AppData\Local\fusioncache.dat
[2012/12/15 14:20:10 | 000,001,331 | ---- | C] () -- C:\Users\Ondra\Desktop\Wondershare HD Video Converter.lnk
[2012/12/15 10:16:16 | 000,935,175 | ---- | C] () -- C:\Users\Ondra\Desktop\RSITx64.exe
[2012/12/14 23:35:54 | 000,002,066 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012/12/14 23:12:15 | 000,054,156 | -H-- | C] () -- C:\Windows\QTFont.qfn
[2012/12/14 23:12:15 | 000,001,409 | ---- | C] () -- C:\Windows\QTFont.for
[2012/12/14 09:05:11 | 000,414,240 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/12/13 22:55:39 | 000,675,840 | ---- | C] () -- C:\Windows\SysWow64\ac3filter.ax
[2012/12/13 22:55:39 | 000,496,640 | ---- | C] () -- C:\Windows\SysWow64\xvid.ax
[2012/12/13 20:56:17 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012/12/06 21:17:59 | 000,000,950 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/12/06 21:17:59 | 000,000,946 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/12/04 19:12:39 | 000,001,152 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2012/12/04 15:17:09 | 000,011,478 | ---- | C] () -- C:\Users\Ondra\Desktop\výpověd.odt
[2012/12/03 11:30:15 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012/12/03 11:30:15 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012/12/03 11:30:15 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2012/12/03 11:30:07 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012/12/02 17:21:36 | 000,001,116 | ---- | C] () -- C:\Users\Public\Desktop\Free Video Converter.lnk
[2012/12/02 17:21:05 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Free DVD Converter.lnk
[2012/12/02 17:15:48 | 000,001,137 | ---- | C] () -- C:\Users\Public\Desktop\Free HD Video Converter.lnk
[2012/12/02 17:15:47 | 000,070,656 | ---- | C] () -- C:\Windows\SysWow64\RLAPEDec.ax
[2012/12/02 15:57:53 | 000,001,320 | ---- | C] () -- C:\Users\Public\Desktop\Freemake Video Converter.lnk
[2012/11/30 17:08:57 | 000,002,140 | ---- | C] () -- C:\Users\Public\Desktop\Splash PRO EX.lnk
[2012/11/28 16:38:19 | 000,002,185 | ---- | C] () -- C:\Users\Public\Desktop\HP Support Assistant.lnk
[2012/11/22 17:17:41 | 000,000,988 | ---- | C] () -- C:\Users\Ondra\Desktop\DVDx 4.0.lnk
[2012/11/22 16:30:25 | 000,002,111 | ---- | C] () -- C:\Users\Public\Desktop\Splash Lite.lnk
[2012/11/22 16:29:41 | 000,002,093 | ---- | C] () -- C:\Users\Public\Desktop\Splash PRO.lnk
[2012/11/20 20:00:36 | 000,002,750 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk
[2012/11/20 20:00:36 | 000,002,256 | ---- | C] () -- C:\Users\Public\Desktop\Online aktualizace Nero.lnk
[2012/11/20 18:45:35 | 000,001,305 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
[2012/11/20 18:45:21 | 000,001,374 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
[2012/11/20 18:41:30 | 000,002,180 | ---- | C] () -- C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
[2012/11/20 18:29:01 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012/11/19 23:39:59 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012/11/19 23:26:14 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012/11/14 13:54:55 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012/11/11 17:27:00 | 000,380,928 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
[2012/11/11 12:50:54 | 000,000,012 | ---- | C] () -- C:\Windows\Ulead32.ini
[2012/11/01 18:01:26 | 000,049,152 | ---- | C] () -- C:\Windows\SysWow64\AVerIO.dll
[2012/11/01 18:01:26 | 000,003,456 | ---- | C] () -- C:\Windows\SysWow64\AVerIO.sys
[2012/11/01 18:01:25 | 000,614,400 | ---- | C] () -- C:\Windows\SysWow64\sptlib21.dll
[2012/11/01 18:01:25 | 000,421,888 | ---- | C] () -- C:\Windows\SysWow64\sptlib02.dll
[2012/11/01 18:01:25 | 000,311,296 | ---- | C] () -- C:\Windows\SysWow64\sptlib01.dll
[2012/11/01 18:01:25 | 000,307,200 | ---- | C] () -- C:\Windows\SysWow64\sptlib22.dll
[2012/11/01 18:01:25 | 000,307,200 | ---- | C] () -- C:\Windows\SysWow64\sptlib03.dll
[2012/11/01 18:01:25 | 000,294,912 | ---- | C] () -- C:\Windows\SysWow64\sptlib11.dll
[2012/11/01 18:01:25 | 000,135,168 | ---- | C] () -- C:\Windows\SysWow64\sptlib12.dll
[2012/10/29 22:49:33 | 000,003,584 | ---- | C] () -- C:\Users\Ondra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/21 17:04:48 | 002,186,538 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012/08/28 09:04:34 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012/08/28 09:04:34 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012/08/28 09:04:34 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2012/08/28 09:04:34 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012/08/28 09:04:32 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012/01/19 18:41:38 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012/01/19 18:31:46 | 000,003,155 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat
[2012/01/19 18:27:21 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011/07/21 18:08:37 | 000,000,068 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat
[2011/06/10 03:17:36 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2011/05/13 16:33:18 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL
[2011/04/15 20:05:50 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011/04/15 20:05:50 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011/04/15 20:05:48 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011/04/15 19:59:48 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011/04/15 19:33:40 | 013,359,616 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011/01/13 07:03:20 | 000,003,155 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

========== ZeroAccess Check ==========

[2009/07/14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012/09/21 21:36:27 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Acoustica
[2012/12/02 17:22:01 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\ahd_free_dvd_converter
[2012/12/02 17:22:02 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\ahd_free_video_converter
[2012/11/11 17:27:40 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Audacity
[2012/12/01 19:56:01 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\avidemux
[2012/11/14 15:43:04 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\BSplayer
[2012/11/14 14:03:20 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\BSplayer Pro
[2012/12/13 19:02:36 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Cuttermaran
[2012/12/14 23:10:04 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\DVDVideoSoft
[2012/12/13 19:25:56 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\FileOpen
[2012/09/21 17:29:48 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\FreeAudioPack
[2012/12/02 17:16:13 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\free_hd_video_converter
[2012/09/21 20:47:09 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\GetRightToGo
[2012/09/21 20:06:20 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\GHISLER
[2012/09/21 20:17:32 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\LEAPS
[2012/09/22 09:45:10 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\LibreOffice
[2012/11/30 17:09:09 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Mirillis
[2012/12/13 19:25:56 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Nitro
[2012/12/13 20:26:55 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Pegasys Inc
[2012/11/11 13:11:23 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Posta
[2012/10/16 17:59:17 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Samsung
[2012/12/10 19:29:01 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Seznam.cz
[2012/10/07 17:21:49 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\SoftGrid Client
[2012/12/13 21:01:47 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\SpiritON TV Software
[2012/09/21 16:15:41 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Synaptics
[2012/09/21 22:09:39 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\TP
[2012/12/13 14:33:35 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\TuneUp Software
[2012/11/11 13:08:03 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Ulead Systems
[2012/09/25 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\WildTangent
[2012/09/22 09:13:49 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Windows Live Writer
[2012/12/13 22:15:53 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\XMedia Recode
[2012/11/05 09:33:39 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Zoner

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009/07/14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 06:08:49 | 000,032,600 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/09/21 17:14:42 | 000,000,332 | ---- | C] () -- C:\Windows\Tasks\HPCeeScheduleForOndra.job
[2012/09/30 08:50:14 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012/12/06 21:17:59 | 000,000,946 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012/12/06 21:17:59 | 000,000,950 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: ATAPI.SYS >
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010/11/21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011/07/22 04:33:14 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011/07/22 04:33:14 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/07/22 04:33:14 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/07/22 04:33:14 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/21 04:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/07/22 04:33:14 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/07/22 04:33:14 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/21 04:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: HAL.DLL >
[2010/11/21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2010/11/21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2012/09/29 19:54:26 | 000,218,184 | ---- | M] () MD5=8846E87210AD131CF71E3E2E49F647B0 -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2012/10/03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\SysNative\drivers\tcpip.sys
[2012/10/03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2010/11/21 04:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2012/08/22 19:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
[2012/03/30 11:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2012/03/30 12:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2011/07/22 04:33:25 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=CB6A53EF141CC3DA32DA54F7E75D301B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21687_none_118505f696597a9d\tcpip.sys
[2012/10/03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2011/07/22 04:33:25 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=DC08410DB2D0CC542DACAC7A90E6CB7A -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17582_none_10f667b97d405c20\tcpip.sys
[2012/08/22 19:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2012/09/29 19:54:26 | 000,218,184 | ---- | M] () MD5=8846E87210AD131CF71E3E2E49F647B0 -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[4 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[7 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012/09/21 21:36:27 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Acoustica
[2012/10/19 09:30:59 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Adobe
[2012/12/02 17:22:01 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\ahd_free_dvd_converter
[2012/12/02 17:22:02 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\ahd_free_video_converter
[2012/11/20 20:02:45 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Ahead
[2012/09/21 16:16:53 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\ATI
[2012/11/11 17:27:40 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Audacity
[2012/12/01 19:56:01 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\avidemux
[2012/12/14 23:38:06 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Avira
[2012/11/14 15:43:04 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\BSplayer
[2012/11/14 14:03:20 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\BSplayer Pro
[2012/12/13 19:02:36 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Cuttermaran
[2012/09/23 20:43:10 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\CyberLink
[2012/10/04 15:11:30 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\DivX
[2012/12/13 21:43:41 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\dvdcss
[2012/12/14 23:10:04 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\DVDVideoSoft
[2012/12/13 19:25:56 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\FileOpen
[2012/09/21 17:29:48 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\FreeAudioPack
[2012/12/02 17:16:13 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\free_hd_video_converter
[2012/09/21 20:47:09 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\GetRightToGo
[2012/09/21 20:06:20 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\GHISLER
[2012/11/22 18:20:39 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Hewlett-Packard
[2012/12/14 09:12:51 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\hpqLog
[2012/09/21 16:15:07 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Identities
[2012/09/21 16:16:04 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Intel Corporation
[2012/09/21 20:17:32 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\LEAPS
[2012/09/22 09:45:10 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\LibreOffice
[2012/09/21 17:06:28 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Macromedia
[2012/12/15 17:51:55 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Malwarebytes
[2012/01/19 18:23:06 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Media Center Programs
[2012/12/15 16:40:37 | 000,000,000 | --SD | M] -- C:\Users\Ondra\AppData\Roaming\Microsoft
[2012/11/30 17:09:09 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Mirillis
[2012/10/28 18:56:27 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Nero
[2012/12/13 19:25:56 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Nitro
[2012/12/13 20:26:55 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Pegasys Inc
[2012/11/11 13:11:23 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Posta
[2012/10/16 17:59:17 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Samsung
[2012/12/10 19:29:01 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Seznam.cz
[2012/12/14 08:32:52 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Skype
[2012/10/07 17:21:49 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\SoftGrid Client
[2012/12/13 21:01:47 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\SpiritON TV Software
[2012/09/21 16:15:16 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Symantec
[2012/09/21 16:15:41 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Synaptics
[2012/09/21 22:09:39 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\TP
[2012/12/13 14:33:35 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\TuneUp Software
[2012/11/11 13:08:03 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Ulead Systems
[2012/12/15 14:32:34 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\vlc
[2012/09/25 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\WildTangent
[2012/09/22 09:13:49 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Windows Live Writer
[2012/12/13 22:15:53 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\XMedia Recode
[2012/11/05 09:33:39 | 000,000,000 | ---D | M] -- C:\Users\Ondra\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2012/11/05 13:20:42 | 000,060,888 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\AdminDelegator.exe
[2012/11/05 13:20:42 | 000,088,024 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\AgentInstaller.exe
[2012/11/05 13:20:42 | 000,077,264 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\AgentUpdate.exe
[2012/11/05 13:20:43 | 000,843,208 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\KiesPDLR.exe
[2012/08/31 08:52:12 | 000,964,024 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\Kies.exe
[2012/08/28 09:06:22 | 000,291,840 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\KiesAgent.exe
[2012/08/31 08:52:14 | 000,278,968 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\KiesDriverInstaller.exe
[2012/08/31 08:52:14 | 003,524,536 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\KiesTrayAgent.exe
[2012/08/28 09:05:28 | 000,182,784 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\ConnectionManager.exe
[2012/08/28 09:05:28 | 000,322,048 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\DeviceDataService.exe
[2012/08/28 09:05:32 | 000,717,312 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\DeviceManager.exe
[2012/08/31 08:52:18 | 000,067,512 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\Kies_Tutorial.exe
[2012/08/28 09:05:28 | 000,057,344 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\RegisterCOM.exe
[2012/08/28 09:05:14 | 000,106,960 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\AgentInstaller.exe
[2012/08/28 09:05:14 | 000,101,328 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\AgentUpdate.exe
[2012/08/31 08:52:22 | 000,021,432 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\KiesPDLR.exe
[2012/08/31 08:52:24 | 003,765,256 | ---- | M] (Freeware) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\MediaModules\MyFreeCodecPack.exe
[2012/08/28 09:05:02 | 000,262,144 | ---- | M] (ENJsoft corp.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\TransModules\SelfMV.exe
[2012/08/28 09:05:02 | 000,090,112 | ---- | M] (ENJsoft corp.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\TransModules\SelfMV2.exe
[2012/08/31 08:52:26 | 000,593,848 | ---- | M] (ml) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\Updater\Kies.Update.exe
[2012/08/28 09:04:28 | 024,177,352 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\USB Driver\SAMSUNG_USB_Driver_for_Mobile_Phones.exe
[2012/10/11 01:33:52 | 000,966,072 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\Kies.exe
[2012/10/11 01:33:52 | 000,297,912 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesAgent.exe
[2012/10/09 01:17:54 | 000,580,096 | ---- | M] (Samsung Electronics) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesAirMessage.exe
[2012/10/11 01:33:56 | 000,277,432 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesDriverInstaller.exe
[2012/10/11 01:33:54 | 000,309,688 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesTrayAgent.exe
[2012/09/27 07:19:08 | 000,171,008 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\ConnectionManager.exe
[2012/09/27 07:21:52 | 000,325,120 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\DeviceDataService.exe
[2012/10/10 06:06:28 | 000,689,152 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\DeviceManager.exe
[2012/10/11 01:33:56 | 000,067,512 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\Kies_Tutorial.exe
[2012/10/11 01:34:04 | 000,063,416 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\RegisterCOM.exe
[2012/10/11 01:22:52 | 000,060,888 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AdminDelegator.exe
[2012/10/11 01:22:52 | 000,088,024 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AgentInstaller.exe
[2012/10/11 01:22:50 | 000,077,264 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AgentUpdate.exe
[2012/10/11 01:33:58 | 000,842,680 | ---- | M] (Samsung) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\KiesPDLR.exe
[2012/10/11 01:34:00 | 003,767,312 | ---- | M] (Freeware) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\MediaModules\MyFreeCodecPack.exe
[2012/09/26 12:57:20 | 000,266,240 | ---- | M] (ENJsoft corp.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\TransModules\SelfMV.exe
[2012/09/26 12:57:20 | 000,102,400 | ---- | M] (ENJsoft corp.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\TransModules\SelfMV2.exe
[2012/10/11 01:34:02 | 000,596,920 | ---- | M] (ml) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\Updater\Kies.Update.exe
[2012/09/26 12:57:10 | 014,754,760 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\USB Driver\SAMSUNG_USB_Driver_for_Mobile_Phones.exe
[2012/08/31 08:52:26 | 000,593,848 | ---- | M] (ml) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Temp\Kies.Update.exe
[2012/10/11 01:34:02 | 000,596,920 | ---- | M] (ml) -- C:\Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Updater\Kies.Update.exe
[2012/09/25 19:08:38 | 001,007,648 | ---- | M] (WildTangent) -- C:\Users\Ondra\AppData\Roaming\WildTangent\WildTangent Games\App\DPConfig\InstallTouchpoints-wildgames.exe
[2012/09/25 19:08:36 | 000,000,179 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\WildTangent\WildTangent Games\App\DPConfig\InstallTouchpoints-wildgames.exe_filedata
[2012/09/25 19:08:37 | 000,000,172 | ---- | M] () -- C:\Users\Ondra\AppData\Roaming\WildTangent\WildTangent Games\App\DPConfig\InstallTouchpoints-hp.exe_filedata

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2012/12/15 23:02:06 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012/12/15 21:27:01 | 000,000,946 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012/12/15 22:27:00 | 000,000,950 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012/12/04 09:08:50 | 000,000,332 | ---- | M] () -- C:\Windows\Tasks\HPCeeScheduleForOndra.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012/12/15 16:22:51 | 000,000,018 | ---- | M] () -- C:\Windows\system32\log.txt
[2012/12/15 14:16:16 | 002,186,538 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI

< %SYSTEMDRIVE%\*.exe >

< >

< *crack* /s >
[2010/10/05 03:50:56 | 000,062,238 | ---- | M] () -- \GIMPPortable\App\gimp\share\gimp\2.0\patterns\cracked.pat

< *keygen* /s >

< *loader* /s >
[2010/02/08 03:40:00 | 000,000,543 | ---- | M] () -- \GIMPPortable\App\gimp\etc\gtk-2.0\gdk-pixbuf.loaders
[2009/12/15 23:58:18 | 000,017,056 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2009/12/15 23:58:20 | 000,018,592 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2009/12/15 23:58:24 | 000,026,272 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2009/12/15 23:58:26 | 000,012,960 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2009/12/15 23:58:28 | 000,017,568 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2009/12/15 23:58:56 | 000,019,616 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2009/12/15 23:59:04 | 000,015,008 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2009/12/15 23:59:06 | 000,019,104 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2009/12/15 23:59:10 | 000,017,056 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2009/12/15 23:59:14 | 000,012,448 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2009/12/15 23:59:16 | 000,016,544 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2009/12/15 23:59:20 | 000,016,544 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2009/12/15 23:59:22 | 000,011,936 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2009/12/15 23:59:24 | 000,013,984 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2009/12/15 23:59:28 | 000,028,320 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2009/05/02 01:42:00 | 000,009,880 | ---- | M] () -- \GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\svg_loader.dll
[2012/11/22 15:47:51 | 000,052,512 | ---- | M] () -- \Program Files (x86)\Avira\AntiVir Desktop\avwebloader.dll
[2012/11/23 19:59:23 | 000,232,224 | ---- | M] () -- \Program Files (x86)\Avira\AntiVir Desktop\avwebloader.exe
[2012/12/03 09:45:50 | 001,713,952 | ---- | M] () -- \Program Files (x86)\Avira\AntiVir Desktop\avwebloadergui.dll
[2007/06/27 18:03:00 | 000,177,448 | ---- | M] () -- \Program Files (x86)\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2010/10/07 03:36:40 | 000,265,552 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2010/10/07 03:36:40 | 000,018,264 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2010/08/23 19:07:00 | 000,053,248 | ---- | M] () -- \Program Files (x86)\CyberLink\YouCam\Koan\pyloader.dll
[2011/06/16 02:58:26 | 000,015,118 | ---- | M] () -- \Program Files (x86)\CyberLink\YouCam\subsys\Uploader\PyUploader.kc
[2011/06/16 02:58:26 | 000,175,200 | ---- | M] () -- \Program Files (x86)\CyberLink\YouCam\subsys\Uploader\_PyUploader.pyd
[2010/09/09 00:53:28 | 000,167,720 | ---- | M] () -- \Program Files (x86)\CyberLink\YouCam\subsys\YouCam\CES_3DLoaderC3S.dll
[2010/09/09 00:53:28 | 002,525,480 | ---- | M] () -- \Program Files (x86)\CyberLink\YouCam\subsys\YouCam\CES_3DLoaderFBX.dll
[2011/04/29 10:53:44 | 000,011,917 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMCommon\FreemakeCommon\Profiles\FmDownloaderProfiles.xml
[2012/09/25 13:21:38 | 000,014,336 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.Detector.dll
[2012/09/25 13:21:38 | 000,006,656 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.GlobalSettings.dll
[2012/09/25 13:21:38 | 000,011,264 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.HtmlParser.dll
[2012/09/25 13:21:38 | 000,036,352 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.Interface.dll
[2012/09/25 13:21:38 | 000,017,408 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.Miscellaneous.dll
[2012/09/25 13:21:38 | 000,048,640 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.SmartDownloader.Core.dll
[2012/09/25 13:21:38 | 000,159,744 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.SmartDownloader.Extensions.dll
[2012/09/25 13:21:38 | 000,018,944 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.Subtitles.dll
[2012/09/25 13:21:38 | 000,080,896 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.SupportedSite.dll
[2012/09/25 13:21:38 | 000,018,944 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloader.TrackDownloaderLib.dll
[2012/09/25 13:21:38 | 000,003,584 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Downloader\FMDownloaderDeploy.dll
[2011/03/16 13:12:40 | 000,034,304 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FMWeb\Uploader\FMYouTubeUploader.dll
[2012/08/03 13:00:38 | 000,064,651 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FreemakeVideoConverter\Resources\VideoDownloader.png
[2012/08/03 13:00:38 | 000,064,719 | ---- | M] () -- \Program Files (x86)\Freemake\Freemake Video Converter\FreemakeVideoConverter\Resources\VideoDownloaderOn.png
[2011/06/27 15:08:58 | 000,053,248 | ---- | M] () -- \Program Files (x86)\Hewlett-Packard\HP Setup\ContentDownloader.exe
[2011/02/23 16:12:16 | 000,005,974 | ---- | M] () -- \Program Files (x86)\Hewlett-Packard\HP Setup\ContentDownloader.exe.config
[2010/10/15 16:58:50 | 000,001,012 | ---- | M] () -- \Program Files (x86)\HP Games\onplay\downloader_bg_400.gif
[2012/07/28 01:42:22 | 000,007,024 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\program\pythonloader.py
[2012/09/22 08:57:34 | 000,006,019 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\program\pythonloader.pyc
[2012/07/28 01:36:50 | 000,027,136 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\program\pythonloader.uno.dll
[2012/07/28 01:45:48 | 000,000,171 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\program\pythonloader.uno.ini
[2012/07/27 13:52:16 | 000,124,234 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\share\extensions\report-builder\libloader-1.1.6.jar
[2012/07/28 01:37:10 | 000,059,392 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\URE\bin\javaloader.uno.dll
[2012/07/27 07:58:48 | 000,004,491 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\URE\java\unoloader.jar
[2011/02/25 19:46:24 | 000,005,987 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\scripts\io\downloader.js
[2012/10/09 08:38:28 | 000,069,120 | ---- | M] () -- \Program Files (x86)\Samsung\Kies\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012/05/21 22:56:04 | 000,002,196 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\GamePlay_Loader.html
[2012/07/19 00:18:28 | 000,000,598 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\EULA\images\downloader_bg_400.gif
[2012/05/21 22:56:04 | 000,009,085 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\Scripts\gameplay_loader.js
[2010/11/03 22:17:00 | 000,002,355 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\Skins\default\gameplay_loader.css
[2010/10/07 03:36:40 | 000,387,408 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
[2010/10/07 03:36:40 | 000,018,264 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2011/04/29 10:53:44 | 000,011,917 | ---- | M] () -- \ProgramData\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Profiles\FmDownloaderProfiles.xml
[2012/07/26 22:47:04 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012/11/08 15:16:50 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012/11/08 15:16:50 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012/11/08 15:16:50 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2010/11/24 15:49:10 | 000,019,456 | ---- | M] () -- \Symbols\api-ms-win-core-libraryloader-l1-1-0.pdb\1B6430CDAA0F4F9595D61A14DAC4BA7E1\api-ms-win-core-libraryloader-l1-1-0.pdb
[2010/11/24 16:38:16 | 000,027,648 | ---- | M] () -- \Symbols\api-ms-win-core-libraryloader-l1-1-0.pdb\2327653E1F8147D0817EFB43C32635421\api-ms-win-core-libraryloader-l1-1-0.pdb
[2010/11/24 16:21:16 | 000,027,648 | ---- | M] () -- \Symbols\api-ms-win-core-libraryloader-l1-1-0.pdb\D22FC47003924E4DBBABC46294DD648A1\api-ms-win-core-libraryloader-l1-1-0.pdb
[2010/11/24 16:25:04 | 000,101,376 | ---- | M] () -- \Symbols\dmloader.pdb\358A585CF7A9468BBC6DA89476BBE7341\dmloader.pdb
[2010/11/24 15:47:06 | 000,084,992 | ---- | M] () -- \Symbols\dmloader.pdb\D89614FF5A014881A633E4C36475583E1\dmloader.pdb
[2010/11/24 16:25:28 | 000,109,568 | ---- | M] () -- \Symbols\dmloader.pdb\FD08E9A659254BFEA7575F19F8877D181\dmloader.pdb
[2010/11/24 15:59:54 | 000,404,480 | ---- | M] () -- \Symbols\upgloader.pdb\0FEC82A84409493C863EFBC237DE4A201\upgloader.pdb
[2010/11/24 16:19:12 | 000,404,480 | ---- | M] () -- \Symbols\upgloader.pdb\27E40E351A284C278808D750679B9B551\upgloader.pdb
[2010/11/24 15:32:18 | 000,363,520 | ---- | M] () -- \Symbols\upgloader.pdb\FEECA36D9E05491CAA7622D4DB53B05D1\upgloader.pdb
[2011/04/29 10:53:44 | 000,011,917 | ---- | M] () -- \Users\All Users\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Profiles\FmDownloaderProfiles.xml
[2012/07/26 22:47:04 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012/11/08 15:16:50 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012/11/08 15:16:50 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012/11/08 15:16:50 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2012/12/13 18:51:56 | 000,105,903 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\26YPYA7H\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2012/12/13 20:22:11 | 000,001,849 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\26YPYA7H\loader[1].gif
[2012/12/14 23:23:57 | 000,005,528 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\26YPYA7H\mac-free-youtube-downloader-icon[1].png
[2012/12/13 20:22:11 | 000,000,723 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KAVOZAK\ajax-loader2[1].gif
[2012/12/13 18:51:56 | 000,000,753 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4DUS1QG7\AdLoader[1].htm
[2012/12/13 20:22:11 | 000,001,849 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4DUS1QG7\loader[1].gif
[2012/12/10 19:27:08 | 000,000,905 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\20HIDTP3\TooltipLoader[1].css
[2012/12/10 19:27:08 | 000,014,290 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\20HIDTP3\TooltipLoader[1].js
[2012/12/15 16:58:40 | 000,000,687 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CY4MIABA\AjaxLoader2[1].js
[2012/12/15 16:58:40 | 000,001,923 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CY4MIABA\AjaxLoader[1].js
[2012/12/15 16:51:11 | 000,001,652 | ---- | M] () -- \Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KK9VOMS1\ajax_loader[1].gif
[2012/11/07 10:24:09 | 000,000,753 | ---- | M] () -- \Users\Ondra\AppData\Local\Temp\Temporary Internet Files\Content.IE5\CCVFMR9A\AdLoader[1].htm
[2012/11/07 10:24:09 | 000,105,903 | ---- | M] () -- \Users\Ondra\AppData\Local\Temp\Temporary Internet Files\Content.IE5\FAKIZP34\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2012/08/31 08:48:34 | 000,069,120 | ---- | M] () -- \Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012/10/09 08:38:28 | 000,069,120 | ---- | M] () -- \Users\Ondra\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012/11/14 21:43:14 | 001,961,259 | ---- | M] () -- \Users\Ondra\Downloads\usb_downloader_v1.2.0.zip
[2011/11/17 16:11:08 | 000,454,656 | ---- | M] () -- \Vypalit\vypalit 2\Android\S5570_Odin+Multi+Downloader+v4.38.exe
[2010/03/24 19:35:48 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010/03/24 19:12:34 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010/03/24 19:35:48 | 000,370,512 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4763\VSTOLoader_dll_amd64.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010/03/24 19:12:34 | 000,249,680 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4763\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010/10/07 03:36:40 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.923C1899_09AE_418B_B39D_A7A9EB6A7951
[2010/10/07 03:36:40 | 000,265,552 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8.923C1899_09AE_418B_B39D_A7A9EB6A7951
[2012/10/04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2011/02/02 14:31:20 | 000,012,532 | ---- | M] () -- \Windows\System32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2012/10/04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2011/02/02 14:31:20 | 000,012,532 | ---- | M] () -- \Windows\SysWOW64\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2009/07/14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:38:32 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:09:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/09/19 09:01:53 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2012/09/19 09:01:53 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2012/09/19 09:01:53 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2012/09/19 09:01:53 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2012/09/19 09:01:53 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2011/07/22 04:24:53 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3.manifest
[2011/07/22 04:24:53 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winload.efi.mui_35ee487d
[2011/07/22 04:24:53 | 000,036,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winload.exe.mui_3bc5b827
[2011/07/22 04:24:53 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winresume.efi.mui_f412814e
[2011/07/22 04:24:53 | 000,031,312 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winresume.exe.mui_ff8b5358
[2010/11/21 08:06:45 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2010/11/21 08:06:45 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2010/11/21 08:06:45 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2010/11/21 08:06:45 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2010/11/21 08:06:45 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2011/07/22 04:31:04 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/07/22 04:31:04 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2011/07/22 04:31:04 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2011/07/22 04:31:04 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2011/07/22 04:31:04 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2012/09/19 08:59:25 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2011/07/22 04:22:28 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3.manifest
[2010/11/21 08:05:43 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2010/11/21 04:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/07/22 04:31:02 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/07/22 04:31:02 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 18:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 18:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2012/07/27 13:52:16 | 000,021,761 | ---- | M] () -- \Program Files (x86)\LibreOffice 3.6\share\extensions\report-builder\libserializer-1.1.6.jar
[2012/04/11 01:15:28 | 000,434,288 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.dll
[2012/11/23 13:16:10 | 001,164,288 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.ni.dll
[2012/08/15 16:09:26 | 000,590,744 | ---- | M] () -- \Program Files (x86)\Nero\KM\SerialHelper.exe
[2012/07/30 14:51:02 | 000,247,704 | ---- | M] () -- \Program Files (x86)\Nero\Nero Blu-ray Player\boost_serialization-mt.dll
[2012/07/30 14:51:02 | 000,167,320 | ---- | M] () -- \Program Files (x86)\Nero\Nero Blu-ray Player\boost_wserialization-mt.dll
[2010/11/21 04:25:11 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2012/09/19 09:01:34 | 000,090,112 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2011/07/22 04:24:28 | 000,135,168 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\el\System.RunTime.Serialization.Resources.dll
[1999/05/06 07:24:06 | 000,000,096 | ---- | M] () -- \Program Files (x86)\WinUAE\Harddrives\Workbench\Prefs\env-archive\SYS\serial.prefs
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2012/09/19 09:01:34 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2011/07/22 04:24:25 | 000,135,168 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\el\System.RunTime.Serialization.Resources.dll
[2010/11/24 16:04:14 | 000,076,800 | ---- | M] () -- \Symbols\grserial.pdb\280DD77DAA504AD18758396B5F8176CE1\grserial.pdb
[2010/11/24 16:34:16 | 000,052,224 | ---- | M] () -- \Symbols\grserial.pdb\47ADDA2FBCB2479689A6A301724415121\grserial.pdb
[2010/11/24 16:39:18 | 000,084,992 | ---- | M] () -- \Symbols\grserial.pdb\8BDDA930ABC44BABB0E2F0D8ED3048061\grserial.pdb
[2010/11/24 16:26:50 | 000,093,184 | ---- | M] () -- \Symbols\serial.pdb\01F92A5D32254819BE7A92E3FF6AA16C1\serial.pdb
[2010/11/24 15:57:06 | 000,125,952 | ---- | M] () -- \Symbols\serial.pdb\0E86ABC463A5486A8AE4ABD264BBF6801\serial.pdb
[2010/11/24 16:26:00 | 000,158,720 | ---- | M] () -- \Symbols\serial.pdb\EECBFB66C51A4A3781077905EC27AEE31\serial.pdb
[2010/11/24 15:46:10 | 000,060,416 | ---- | M] () -- \Symbols\serialui.pdb\CF07ABE44B294AE29C28DD9D754EB8301\serialui.pdb
[2010/11/24 16:38:18 | 000,052,224 | ---- | M] () -- \Symbols\serialui.pdb\D2E96ACBD55746A9BD57BFA9C067D9511\serialui.pdb
[2010/11/24 16:29:14 | 000,068,608 | ---- | M] () -- \Symbols\serialui.pdb\EA3065EAB82949D1A61CBA3E4A0DE2EF1\serialui.pdb
[2010/11/24 16:19:44 | 001,215,488 | ---- | M] () -- \Symbols\smserial.pdb\93CB7499AF324371873322ED12CF50601\smserial.pdb
[2010/11/24 15:36:36 | 000,035,840 | ---- | M] () -- \Symbols\system.runtime.serialization.formatters.soap.pdb\9D444A252F0C410882C683E28C8823C61\system.runtime.serialization.formatters.soap.pdb
[2010/11/24 16:32:22 | 000,035,840 | ---- | M] () -- \Symbols\system.runtime.serialization.formatters.soap.pdb\AB6086C5B8134E6FAB9EF11BE0FC958E1\system.runtime.serialization.formatters.soap.pdb
[2010/11/24 16:30:30 | 000,035,840 | ---- | M] () -- \Symbols\system.runtime.serialization.formatters.soap.pdb\CD9ACC1CF2D940F79B4F07C96250940D1\system.runtime.serialization.formatters.soap.pdb
[2010/11/24 16:29:46 | 000,199,680 | ---- | M] () -- \Symbols\system.runtime.serialization.pdb\A50584DD7514473C97CDC050980ACE4C1\system.runtime.serialization.pdb
[2010/11/24 16:23:26 | 000,199,680 | ---- | M] () -- \Symbols\system.runtime.serialization.pdb\ECB6BC0A5D3C443A839D7846848C5BF51\system.runtime.serialization.pdb
[2010/11/24 15:37:48 | 000,199,680 | ---- | M] () -- \Symbols\system.runtime.serialization.pdb\F3905E43425F4C618095E34CE107F8851\system.runtime.serialization.pdb
[2012/12/15 14:15:43 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/09/19 09:01:25 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011/07/22 04:24:06 | 000,024,576 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_el_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/09/19 09:01:34 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2011/07/22 04:24:28 | 000,135,168 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_el_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012/11/20 11:06:10 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a67380b6387234a8a9032ccd5c3dbf4e\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012/11/20 11:34:41 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\fecb0ca59057e9d190318551d40feb22\System.Runtime.Serialization.ni.dll
[2012/11/22 10:10:04 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\6e3b230af51086c55c8e84f2d2ab8e8e\System.Runtime.Serialization.ni.dll
[2012/11/22 10:09:17 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\ab8dae4950e1e2785625c1dfdf3be672\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012/11/20 21:21:15 | 002,647,040 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\4c216f0f4c6b622eb828622fcb4bbae3\System.Runtime.Serialization.ni.dll
[2012/10/08 09:20:17 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8f0d3b706bb74e30bc81546f3b56a607\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012/10/08 09:20:12 | 002,647,040 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d132fe6c8f229528089a5084824567a9\System.Runtime.Serialization.ni.dll
[2012/11/20 21:21:23 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ef1d1dcc9547953fb25a9249f27c98a9\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012/10/08 09:22:19 | 000,009,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\0182681020de71c8db9120c1e130bc41\System.Xml.Serialization.ni.dll
[2012/11/20 21:23:42 | 000,009,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\1a7ba20582ae54cb2d6d522bf0a2e050\System.Xml.Serialization.ni.dll
[2012/11/22 10:14:09 | 000,376,832 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\9ae02d9088287394e7c5b1aadfbf92dd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012/11/22 10:13:56 | 003,412,992 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\f6c0a5e99cac6c4db2a43a166fc32eea\System.Runtime.Serialization.ni.dll
[2012/11/22 19:52:36 | 000,010,240 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\2631b554971680de17496fc6fc18ed3f\System.Xml.Serialization.ni.dll
[2011/04/06 15:48:20 | 000,011,120 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Xml.Serialization.dll.amd64
[2011/04/06 15:48:20 | 000,011,120 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Xml.Serialization.dll.x86
[2012/09/21 17:09:31 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012/11/19 23:44:31 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/09/21 17:09:31 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2012/11/19 23:44:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012/11/19 23:44:40 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2003/02/21 07:26:56 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/09/19 09:01:26 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011/07/22 04:24:16 | 000,024,576 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\el\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/01 11:26:40 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2010/06/15 01:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/06/15 01:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009/06/10 21:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/09/19 09:01:23 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2011/07/22 04:24:12 | 000,024,576 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\el\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/01 11:26:40 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2010/06/15 01:48:20 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/06/15 01:48:20 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2012/09/19 09:01:14 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009/07/14 01:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009/06/10 21:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2011/07/22 04:24:07 | 000,005,120 | ---- | M] () -- \Windows\System32\el-GR\serialui.dll.mui
[2010/11/21 08:06:15 | 000,005,120 | ---- | M] () -- \Windows\System32\en-US\serialui.dll.mui
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2012/09/19 09:01:14 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\cs-CZ\serialui.dll.mui
[2011/07/22 04:24:07 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\el-GR\serialui.dll.mui
[2010/11/21 08:06:15 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\en-US\serialui.dll.mui
[2012/09/19 09:01:23 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_1e527062c1f59d5f\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2011/07/22 04:24:12 | 000,024,576 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_el-gr_614e1358a9275686\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2012/09/19 09:01:26 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23\serialui.dll.mui
[2011/07/22 04:24:16 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_ed5b762ee48d844a\serialui.dll.mui
[2010/11/21 08:06:20 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_edb61e94e4562781\serialui.dll.mui
[2009/07/14 02:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2012/09/19 09:01:34 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_bb9a1800691e639c\System.RunTime.Serialization.Resources.dll
[2011/07/22 04:24:25 | 000,135,168 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_el-gr_fe95baf650501cc3\System.RunTime.Serialization.Resources.dll
[2012/09/19 09:01:27 | 000,009,728 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_20ab142d65ed6acc\serial.sys.mui
[2011/07/22 04:24:20 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_63a6b7234d1f23f3\serial.sys.mui
[2010/11/21 08:06:21 | 000,010,240 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_64015f894ce7c72a\serial.sys.mui
[2009/07/14 01:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009/06/10 21:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 21:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2011/07/22 04:31:04 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/07/22 04:31:04 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2012/09/19 09:01:54 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23_serialui.dll.mui_7d29d2a3
[2011/07/22 04:24:53 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_ed5b762ee48d844a_serialui.dll.mui_7d29d2a3
[2010/11/21 08:06:44 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_edb61e94e4562781_serialui.dll.mui_7d29d2a3
[2009/07/14 03:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2012/09/19 09:01:52 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2011/07/22 04:24:53 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_913cdaab2c301314_serialui.dll.mui_7d29d2a3
[2010/11/21 08:06:45 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_919783112bf8b64b_serialui.dll.mui_7d29d2a3
[2009/07/14 03:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009/07/14 03:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011/07/22 04:31:02 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/07/22 04:31:02 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009/07/14 03:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2010/11/21 04:17:50 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2010/11/21 04:17:50 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2010/11/21 04:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012/09/19 09:00:01 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2011/07/22 04:23:12 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_el-gr_8f7a8a27bf747d01.manifest
[2010/11/21 08:05:51 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_en-us_8f71d563bf7aa3c2.manifest
[2010/11/21 04:17:50 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2010/11/21 04:18:20 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2012/09/19 09:01:25 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011/07/22 04:24:06 | 000,024,576 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_el-gr_30e8840815599595\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012/09/19 09:01:34 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2011/07/22 04:24:28 | 000,135,168 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_el-gr_8f7a8a27bf747d01\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012/09/19 09:01:26 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_28a71ab4f6565f5a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011/07/22 04:24:16 | 000,024,576 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_el-gr_6ba2bdaadd881881\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012/09/19 09:01:14 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2011/07/22 04:24:07 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_913cdaab2c301314\serialui.dll.mui
[2010/11/21 08:06:15 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_919783112bf8b64b\serialui.dll.mui
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2012/09/19 09:01:34 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2011/07/22 04:24:28 | 000,135,168 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_el-gr_a2771f7297f2ab8d\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:25:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[1999/05/06 07:24:06 | 000,000,096 | ---- | M] () -- \WinUAE\Harddrives\Workbench\Prefs\env-archive\SYS\serial.prefs

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:0888F409
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:C7D0F96D

< End of report >

OTL Extras logfile created on: 12/15/2012 10:31:58 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Ondra\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.95 Gb Total Physical Memory | 1.79 Gb Available Physical Memory | 45.29% Memory free
7.90 Gb Paging File | 5.38 Gb Available in Paging File | 68.12% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 446.12 Gb Total Space | 273.70 Gb Free Space | 61.35% Space Free | Partition Type: NTFS
Drive D: | 15.48 Gb Total Space | 1.69 Gb Free Space | 10.89% Space Free | Partition Type: NTFS
Drive E: | 3.96 Gb Total Space | 1.08 Gb Free Space | 27.32% Space Free | Partition Type: FAT32

Computer Name: ONDRA-HP | User Name: Ondra | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- Reg Error: Key error. File not found
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0E25C8CD-B4C0-4506-80CA-0713FCB0A8E1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{12233CCA-1A07-4349-8FEE-FF58CDBB03AE}" = rport=445 | protocol=6 | dir=out | app=system |
"{13616A40-8B49-4B90-9CA1-B44C8999E5E2}" = rport=137 | protocol=17 | dir=out | app=system |
"{28CD5D26-E7A0-47C1-BF0E-BE6B8E5BA708}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{298187C9-69FE-4CE2-8B04-6A1BC2D7459C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2A828A1E-6C82-40C4-B9D6-6AF9B294F48F}" = lport=2869 | protocol=6 | dir=in | app=system |
"{300D9CBA-036B-4F4E-8362-37C39C8DC694}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{3E782053-AA66-4F19-9271-CFCB46BFC5DA}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{405396D0-430F-4D6B-B40F-580930408356}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{41D446F5-3883-4A8A-8180-4483E989320B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{599BF67D-E14F-42E7-9408-D6DCB7DC20C5}" = rport=139 | protocol=6 | dir=out | app=system |
"{5B7E3726-586F-4E48-AF2A-6ED0CF7FBC4E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{62319185-47D1-4385-8BF0-5F79437B5248}" = lport=138 | protocol=17 | dir=in | app=system |
"{7025A1F1-5CC9-494E-97A0-F354B74D4401}" = lport=137 | protocol=17 | dir=in | app=system |
"{7153DC4D-44B8-4097-8F77-39CF9A84BADE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{724E1D4D-A2C8-4AD0-9FF0-498CB160A02B}" = rport=10243 | protocol=6 | dir=out | app=system |
"{7B8824C6-3649-476E-B3B3-A1662D06EDE5}" = lport=10243 | protocol=6 | dir=in | app=system |
"{842B3A09-5BE7-4140-9200-A135851EC6B9}" = lport=139 | protocol=6 | dir=in | app=system |
"{8B58D4A7-1476-4E25-A93B-21C520A6B561}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B4DABA2B-9526-4C0A-A6B6-A559B3E4EDC8}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{CAD5ACE7-98B1-4167-B87E-1EC69BB7695A}" = lport=445 | protocol=6 | dir=in | app=system |
"{E18F3917-F796-4C37-9DF8-150A774C7C93}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E6DA8F39-CB4D-427F-97C2-D70782BE6FDE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EE55841D-4CD6-43AD-86D6-2CB697A9B0F6}" = rport=138 | protocol=17 | dir=out | app=system |
"{F5DF42F6-0151-435F-86BF-CA8DE5965BF4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{019369B0-4503-4172-AB3C-5145E686AC0D}" = dir=in | app=c:\users\ondra\appdata\local\microsoft\skydrive\skydrive.exe |
"{17E57573-DBD2-4EB9-A6B4-377EE72DF559}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{1DF2A91F-C913-40EB-B70D-EB46E030A3F7}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\km\kwikmedia.exe |
"{25434984-63D2-48CD-80AD-C1F343126DF7}" = dir=in | app=c:\windows\system32\ezsharedsvchost.exe |
"{25B4BE2A-CE03-4688-8A6C-AB822ACAA674}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2FC7ECB8-86C9-4C51-92B3-867CAF3E0611}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{345D792E-DA6E-4FBB-82C0-A35C1B795796}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{390A4BC2-0497-4F41-93EF-021C77BDAAEA}" = protocol=6 | dir=in | app=c:\program files (x86)\snugtv\snugtv station\configwizard.exe |
"{3E0C5FE2-2DAA-4023-9C5F-62158127C1C9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{40C8FB8F-EA97-4420-8D13-67F1E3343A9C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{463F3A03-8D3A-44C2-B0C8-68078481A49A}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{545870F9-EF48-4490-9189-5660FEAED040}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{56F7C1D3-1B29-4EF5-BF26-DB8210EB1D12}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{6275FA38-7B5D-4999-BB93-498DA676F198}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{63A0433B-52E9-4CF5-A398-82E853D7B793}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6C5E51F6-ACE3-472B-BAB9-E853FE7AD643}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{746926E0-D775-40F2-9877-174A7197C4CB}" = protocol=6 | dir=in | app=c:\program files (x86)\snugtv\snugtv station\amaserver.exe |
"{80D79131-1AC5-46DE-8C28-3EDC0778164E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{86D7BA7D-BEC7-4356-94B5-87549D11840E}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{89208340-9CE0-4462-BE7F-EA53ED045FBF}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{8CDCB735-3760-49EA-8922-D75F62056AAD}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{941497B7-D73C-4A30-A82D-DE05C145DAED}" = protocol=17 | dir=in | app=c:\program files (x86)\snugtv\snugtv station\amaserver.exe |
"{A38FD88B-030A-4B9F-9B53-A4858D8A9F88}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A5EA66FC-77F5-430A-91FC-A6313C5BA503}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A9027758-61D6-4A9A-8CEB-07449737CCCB}" = protocol=17 | dir=in | app=c:\program files (x86)\snugtv\snugtv station\configwizard.exe |
"{B1C79F11-3DFE-4DFF-996C-38333A05E2AD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B3C83124-A94B-4C56-8BCC-45619425D4FA}" = protocol=17 | dir=in | app=c:\windows\syswow64\msiexec.exe |
"{B445131E-D8C4-4488-8DC9-FD21EEA5C57C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B9F01EED-BB5A-4D4F-91A5-EC32DFCD8F0B}" = protocol=6 | dir=in | app=c:\windows\syswow64\msiexec.exe |
"{BEC96AAB-2C58-4D6D-BEA9-1DF778EEE802}" = protocol=17 | dir=in | app=c:\program files (x86)\snugtv\snugtv station\amaserver.exe |
"{C00A1C35-86AB-43B8-9429-324BFA06415C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C50C6E8D-F535-443C-BC89-BAF1FA34DBF5}" = protocol=6 | dir=out | app=system |
"{CBA5258D-3168-4EE7-AD1D-56DEEAFC17F9}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{CC11BEC6-0BBC-47EE-9A6C-DFB7963C567B}" = protocol=6 | dir=in | app=c:\program files (x86)\snugtv\snugtv station\amaserver.exe |
"{D2E88B91-A1B1-497F-9298-A2D94130D6A9}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{DBD35EBD-B05D-481A-8A36-53490799B80B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{E30A086D-6956-47CD-B168-B5F2D72259D8}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\km\kwikmedia.exe |
"{E33D1F0C-16B9-43DB-A6E7-5D7CD2CECC2D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}" = AuthenTec TrueAPI
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4F1190CB-24CC-29DC-3C85-CD8CFDDE045F}" = ccc-utility64
"{57DD35E9-D9BB-4089-BB05-EF933C586CB3}" = Broadcom InConcert Maestro
"{5F611ADA-B98C-4DBB-ADDE-414F08457ECF}" = Windows Live Family Safety
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E7F4CA3-B2DE-413C-A7A1-43AA5BE19EA1}" = Broadcom Bluetooth Software
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9CAB2212-0732-4827-8EC4-61D8EF0AA65B}" = HP Launch Box
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B066BF95-890E-A532-A58F-D13E0805DC04}" = ATI Catalyst Install Manager
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6822EFD-3F7D-4B35-8845-757A26AEC8E2}" = Windows Live MIME IFilter
"Broadcom 802.11 Wireless LAN Adapter" = Broadcom 802.11 Wireless LAN Adapter
"KLiteCodecPack64_is1" = K-Lite Codec Pack 9.3.0 (64-bit)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"SynTPDeinstKey" = Synaptics TouchPad Driver
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00476F3E-3C4D-4E02-B8BB-125350157EB9}" = Windows Live Mail
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{03A3841B-038A-ADE1-A06A-158EAFF68A9E}" = Catalyst Control Center Profiles Mobile
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{04A92BE5-E791-E374-01CB-B88CBFC1E8D1}" = PX Profile Update
"{052A1E34-A54B-458C-A4E3-24C3E054754A}" = Nero Kwik Media
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{081872FE-8932-42E9-B3CE-CE85C477790E}" = TMPGEnc Authoring Works 5 Theme Pack 4
"{09D5AC17-7B7A-D201-7CA6-3F16D99828FB}" = CCC Help Hungarian
"{0A9256E0-C924-46DE-921B-F6C4548A1C64}" = Windows Live Messenger
"{0C4C413A-9751-48BE-78DC-80248F8B306F}" = CCC Help Japanese
"{0F68E4AE-E8BA-1E4F-0CCA-B8678477A5CC}" = Catalyst Control Center
"{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1B6F5E51-575E-4693-BCA2-7543570D076D}" = Nero Kwik Themes Basic
"{1CFC5FB4-2ACB-870F-043A-638919624D4E}" = CCC Help English
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F16820E-D0E7-4636-939E-45CBFEFB06E1}" = Nero Kwik Media Help (CHM)
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{24507E82-750C-3658-7C50-D5B7A1E27CCC}" = CCC Help Russian
"{28448C64-6562-6D8C-2F76-8DF399956955}" = Catalyst Control Center Localization All
"{2942CAF8-0934-96C2-5FC0-2ED331D0530A}" = CCC Help Italian
"{2F2CA8CC-814B-67C1-CF19-A8A1A2A503C5}" = CCC Help Korean
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{31CEFF4E-B6D1-46A5-9169-7C67570E7FFA}" = HP SimplePass PE 2011
"{33CFCB69-2FA5-43E8-B8A8-FAA155F870B5}" = SnugTV Station
"{33F88EFD-5661-7FA7-C638-FD6496A0BF2E}" = CCC Help Swedish
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3A9ECD64-DE00-4779-A89E-C878513B2B37}" = Windows Live Writer Resources
"{3AAB08A3-F129-4BD5-B409-AE674F93759D}" = Prerequisite installer
"{3B2A7C83-EFAE-4FC1-BF6B-500042E8B17A}" = TMPGEnc Authoring Works 5
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{400C31E4-796F-4E86-8FDC-C3C4FACC6847}" = Junk Mail filter update
"{42B6C7E0-0DAE-488D-8DAF-838898102F19}" = Windows Live Writer
"{46EA439E-2D16-49B6-AA80-00DE992FE7CE}" = Microsoft Windows Debugging Symbols
"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}" = Photo Story 3 pro Windows
"{5016185F-05AF-455F-AA70-6B6E5D6D4E70}" = AVerTV 3D
"{5036764A-435D-40C9-869C-31085A3D741D}" = HP Setup
"{504C5775-4DD4-40A6-84EA-2837EBC5D268}" = TMPGEnc Authoring Works 5 Theme Pack 3
"{510446D7-2344-B59F-4CA5-66F5381D09FC}" = CCC Help Polish
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}" = Nero Blu-ray Player Help (CHM)
"{5D314FE3-3D51-4C46-9514-8B0A28F7AF77}" = TMPGEnc Authoring Works 5 Premium Theme Pack 1
"{5ECF915E-710A-441E-A7CB-1E599A61D34F}" = TMPGEnc Authoring Works 5 Theme Pack 2
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66DB6D91-BF91-480B-933D-7CB8B1E64D74}" = Windows Live Messenger
"{6947CACF-FAE8-4FAF-B4E0-3CD5F303CAD1}" = HP Software Framework
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{70854FE6-3BF1-4C69-94D0-BEB821102E34}" = Windows Live Mail
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{714ACFF3-B8A3-4AD6-937B-13C833D71029}" = Nero 7 Essentials
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73FBB960-1893-0F86-8EC1-DD0527D3ABCA}" = CCC Help Turkish
"{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{797DC296-ADC5-4A08-8CBC-AEB0D6F4B249}" = Windows Live Essentials
"{7F969F54-1D7F-5DA1-A9E2-59FC0A5F0FE0}" = Catalyst Control Center Graphics Previews Common
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{872B1C80-38EC-4A31-A25C-980820593900}" = HP Power Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8B52057C-15DB-433E-957C-E279BC7D07E3}" = HP QuickWeb
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8DD62FB6-083D-40B9-9D7D-48449FDDDED5}" = Microsoft Windows Debugging Symbols
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.SingleImage_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.SingleImage_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.SingleImage_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.SingleImage_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{909DC555-322F-8A35-2550-6FC2E2EDFA23}" = CCC Help Finnish
"{90AF0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{929EAD99-9874-43BF-B3F4-5F5D2D9D66A9}" = TMPGEnc Authoring Works 5 Theme Pack 1
"{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}" = AVerMedia Applications
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{949D6B51-10E8-4CD4-A81E-064E38240415}" = Catalyst Control Center - Branding
"{957F91DB-A999-4207-A780-828C857370F4}" = Nero Kwik Media
"{95D78710-DEE9-4577-9FC6-35BE431898DC}" = Windows Live Family Safety
"{95E5798A-9827-92AD-5201-1E9B25819886}" = CCC Help Chinese Traditional
"{97C79BEC-43F7-4BD8-A6A7-85C0257E488A}" = Windows Live Writer
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}" = HP On Screen Display
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CDE574D-5471-24A1-07DC-0B0F06810E11}" = CCC Help Thai
"{A035950F-15BA-41C0-9D8F-165FC0536012}" = Movie Maker
"{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}" = Fotogalerie
"{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}" = Nero Blu-ray Player
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A8E15EF1-1523-476E-8720-37FF7C42AF05}" = AVerSDCapture
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAA79CA2-D65D-966B-48C2-D6C16433482C}" = Catalyst Control Center InstallProxy
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{ABEF00D0-FCAE-4E47-8D4E-D4AE5FD72B15}" = HP Quick Launch
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.4)
"{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
"{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{AFD5A54E-E9A1-413D-8AA2-C9EDB6782400}" = LibreOffice 3.6
"{ahd_free_dvd_converter-66712XEEE-ECBC-good-product-mmq}_is1" = Free DVD Converter 4.6.8
"{ahd_free_video_converter-66712XEEE-ECBC-good-pr~84BDB466_is1" = Free Video Converter 4.6.8
"{B479B52B-4DE8-23FC-93CA-186D600F4A52}" = CCC Help Norwegian
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components
"{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
"{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
"{C01A86F5-56E7-101F-9BC9-E3F1025EB779}" = Intel(R) Identity Protection Technology 1.1.2.0
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C1A2F65D-720B-82A0-10F6-4FEE797880BB}" = CCC Help German
"{C1BF14DC-3A45-8E0B-41C6-30E6D30F9968}" = CCC Help Chinese Standard
"{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C6DB958A-50CC-481B-9ED8-3BAD236F7B49}" = Microsoft Windows Debugging Symbols
"{C7861B58-149A-4546-AD1D-798865EF36CF}" = CCC Help Portuguese
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBA9A6BF-1837-F0A4-79B6-15936EDC68AA}" = CCC Help Spanish
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D2C146B1-948D-47EF-8387-5D1C6B980F7C}" = Windows Live Writer
"{D2FFFA5E-FEA5-073B-C371-3B3628D9A453}" = CCC Help French
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{DBCD5E64-7379-4648-9444-8A6558DCB614}" = Recovery Manager
"{DD75B28A-94C3-97C2-C389-EA6BF1C809B7}" = CCC Help Danish
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE15C5EC-7C30-44BF-ACEB-03960FC5601D}" = HP Documentation
"{DFFB2B20-5D76-335C-2C24-CEF3791B30B8}" = CCC Help Dutch
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E18F981B-401C-4D90-BC57-D8903564D558}" = Windows Live UX Platform Language Pack
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E7160D4F-B709-DFE4-9BF2-BB1C38598CF9}" = CCC Help Greek
"{E96CAA2A-0244-4A2A-8403-0C3C9534778B}" = ESU for Microsoft Windows 7 SP1
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{EB91007A-0110-42A6-B869-2709955A9B2A}" = Photo Common
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Display Audio Driver
"{F2235E5E-7881-4293-9B6F-04B2609FBFF0}" = Windows Live Messenger
"{F70B153C-55D6-550A-7F50-6E09D99B1D7A}" = CCC Help Czech
"{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote v. 4.2.3
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"{free_hd_video_converter-66712XEEE-ECBC-good-product-mmq}_is1" = Free HD Video Converter 4.6.8
"Acoustica CD/DVD Label Maker" = Acoustica CD/DVD Label Maker
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AVerMedia A827 series driver" = AVerMedia A827 series driver 2.0.64.126
"AVerMedia MCE Encoder x64" = AVerMedia MCE Encoder x64 3.0.1.6
"AVerMedia Media Center Plug-ins" = AVerMedia Media Center Plug-ins 2.0.7.0
"Avira AntiVir Desktop" = Avira Free Antivirus
"DivX Setup" = DivX Setup
"DVD Shrink_is1" = DVD Shrink 3.2
"DVDx 4.0" = DVDx 4.0
"Formix SE_is1" = Formix SE - formuláře kanceláře
"Freemake Video Converter_is1" = Freemake Video Converter verze 3.1.2
"FreeRIP_is1" = FreeRIP v2.951
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"InstallShield_{5016185F-05AF-455F-AA70-6B6E5D6D4E70}" = AVerTV 3D
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}" = AVerMedia Applications
"InstallShield_{A8E15EF1-1523-476E-8720-37FF7C42AF05}" = AVerSDCapture
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.5.5
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.65.1.1000
"Mirillis Splash Lite" = Splash Lite
"Mirillis Splash PRO" = Splash PRO
"Mirillis Splash PRO EX" = Splash PRO EX
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"VIP Access SDK" = VIP Access SDK (1.0.1.2)
"VLC media player" = VLC media player 2.0.4
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite" = Windows Live Essentials
"WinUAE" = WinUAE 2.4.1
"Wondershare HD Video Converter_is1" = Wondershare HD Video Converter(Build 4.4.3.0)
"WTA-031998ec-91fd-45a1-9316-56d49436a021" = Penguins!
"WTA-048e0a9c-21f5-42c5-a4b3-46d12b4ffc9b" = Polar Bowler
"WTA-18e0622d-dff8-4943-9781-9d33e2112819" = Zuma Deluxe
"WTA-41226aee-e74b-466f-9978-b82eb3595c9b" = Cradle of Rome 2
"WTA-56568175-31fa-4fd6-9afe-d1c3ec5945ae" = Mystery of Mortlake Mansion
"WTA-5a8b12fa-0d01-4042-862d-f05c93dd7e03" = Poker Superstars III
"WTA-5bc8d9a7-7747-494f-997a-66feae837f55" = Vacation Quest - The Hawaiian Islands
"WTA-648688cf-4a6d-4c9e-ab7e-6c2ddfce1212" = Governor of Poker 2 Premium Edition
"WTA-6ffd938a-8327-4836-98a9-d56b5f73c093" = Blackhawk Striker 2
"WTA-84267791-6616-494a-b4ac-f176ed5f9643" = Chronicles of Albian
"WTA-85fccd56-2009-474d-8c0c-0cac57bae5f4" = Bounce Symphony
"WTA-918a638b-a1ea-4c52-9013-1b29f8351dd7" = FATE
"WTA-988660fb-e136-48c9-819b-0a701d9a074c" = Slingo Supreme
"WTA-b1852eed-efd5-4e8a-a8d4-f3cd35d77c57" = Bejeweled 3
"WTA-b32adcc3-8302-40ae-9885-b09265503da4" = Farm Frenzy
"WTA-b841dc5a-b5b3-4b56-a2cb-d4968914724f" = Mah Jong Medley
"WTA-ba4938d4-ceec-4d5a-ae85-9eed3aba1c82" = Namco All-Stars: PAC-MAN
"WTA-ba4b429e-491b-44cb-971c-49fc622c8019" = Agatha Christie - Peril at End House
"WTA-bd9346ed-027a-4c13-9039-b979ddb5f391" = Chuzzle Deluxe
"WTA-c38f9a7b-9a22-4230-b6bd-2f2856132988" = Jewel Quest: The Sleepless Star - Collector's Edition
"WTA-cf6a001d-25e6-4596-bf63-6cbaf388df87" = Final Drive: Nitro
"WTA-d3e0ade8-a7db-4426-ad90-d2f1a73fe28c" = Plants vs. Zombies - Game of the Year
"WTA-d9f62704-595c-4f3c-933b-04b0ac71d75c" = Cake Mania
"WTA-ea3d9677-61ea-4c86-bfb2-071ab834da11" = Virtual Villagers 5 - New Believers
"WTA-f4d5b21e-2935-46cb-952b-78884c1ff66f" = Polar Golfer
"WTA-fe89aa8d-5a32-4bc3-a1d8-afae4b6b763a" = Blasterball 3
"XviD4PSP5" = XviD4PSP 5.0
"ZonerPhotoStudio10_CZ_is1" = Zoner Photo Studio 10

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"SkyDriveSetup.exe" = Microsoft SkyDrive

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 12/5/2012 7:45:40 AM | Computer Name = Ondra-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 12/5/2012 7:45:40 AM | Computer Name = Ondra-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 12/5/2012 7:45:40 AM | Computer Name = Ondra-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 12/5/2012 7:45:40 AM | Computer Name = Ondra-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 12/5/2012 3:27:32 PM | Computer Name = Ondra-HP | Source = WinMgmt | ID = 10
Description =

Error - 12/5/2012 3:28:56 PM | Computer Name = Ondra-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 12/5/2012 5:06:27 PM | Computer Name = Ondra-HP | Source = WinMgmt | ID = 10
Description =

Error - 12/5/2012 6:58:39 PM | Computer Name = Ondra-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 12/5/2012 6:58:39 PM | Computer Name = Ondra-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 12/6/2012 4:58:01 AM | Computer Name = Ondra-HP | Source = WinMgmt | ID = 10
Description =

[ AVer MediaAnywhere Events ]
Error - 12/1/2012 12:31:05 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/1/2012 12:31:08 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/1/2012 12:36:14 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/1/2012 12:36:16 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/1/2012 12:36:19 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/1/2012 12:36:22 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/1/2012 12:36:26 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/1/2012 12:36:29 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

Error - 12/2/2012 11:08:06 AM | Computer Name = Ondra-HP | Source = AMA Server | ID = 64
Description = User account center error. Please contact SnugTV service team for
help.

Error - 12/15/2012 4:03:04 PM | Computer Name = Ondra-HP | Source = AMA Server | ID = 16389
Description =

[ Media Center Events ]
Error - 10/30/2012 1:58:01 PM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/1/2012 1:58:02 PM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/1/2012 1:58:30 PM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/1/2012 2:58:00 PM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/2/2012 4:48:21 AM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/6/2012 3:28:53 AM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/8/2012 5:23:43 AM | Computer Name = Ondra-HP | Source = MCUpdate | ID = 0
Description = 10:23:32 - Načtení položky EpgListings se nezdařilo. (Chyba: Nadřízené
připojení bylo uzavřeno: Nepodařilo se nastavit vztah důvěryhodnosti pro zabezpečený
kanál SSL/TLS..)

Error - 11/13/2012 4:22:47 PM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/20/2012 6:13:55 AM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

Error - 11/29/2012 2:58:00 PM | Computer Name = Ondra-HP | Source = ehRecvr | ID = 3
Description = Televizní karta zjistila chybu. (0xc0040524) AVerMedia Hybrid TV BDA
Tuner

[ System Events ]
Error - 11/20/2012 11:55:59 AM | Computer Name = Ondra-HP | Source = DCOM | ID = 10016
Description =

Error - 11/20/2012 2:35:57 PM | Computer Name = Ondra-HP | Source = Microsoft-Windows-Service Pack Installer | ID = 8
Description = Service Pack installation failed with error code 0x800f0a03.

Error - 11/20/2012 2:43:57 PM | Computer Name = Ondra-HP | Source = Microsoft-Windows-Service Pack Installer | ID = 8
Description = Service Pack installation failed with error code 0x800f0a03.

Error - 11/20/2012 3:52:09 PM | Computer Name = Ondra-HP | Source = Microsoft-Windows-Service Pack Installer | ID = 8
Description = Service Pack installation failed with error code 0x800f0a03.

Error - 11/22/2012 12:24:12 PM | Computer Name = Ondra-HP | Source = DCOM | ID = 10010
Description =

Error - 11/22/2012 8:20:41 PM | Computer Name = Ondra-HP | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.

Error - 11/28/2012 12:35:08 PM | Computer Name = Ondra-HP | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (16:38:01, ?28.?11.?2012) bylo neočekávané.

Error - 12/1/2012 12:55:38 PM | Computer Name = Ondra-HP | Source = DCOM | ID = 10010
Description =

Error - 12/5/2012 3:28:56 PM | Computer Name = Ondra-HP | Source = DCOM | ID = 10010
Description =

Error - 12/6/2012 1:46:00 PM | Computer Name = Ondra-HP | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.


< End of report >

MBAM jste mel odinstalovat, ale stale vam tam bezi



Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands) Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Ondra
->Temp folder emptied: 81737862 bytes
->Temporary Internet Files folder emptied: 666844833 bytes
->Google Chrome cache emptied: 6353728 bytes
->Flash cache emptied: 1954 bytes

User: Public

User: user

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 422956 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 66958 bytes
RecycleBin emptied: 898369145 bytes

Total Files Cleaned = 1,577.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Ondra
->Flash cache emptied: 0 bytes

User: Public

User: user

Total Flash Files Cleaned = 0.00 mb

File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
Error: Unble to create default HOSTS file!
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service SeaPort stopped successfully!
Service SeaPort deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service BBSvc stopped successfully!
Service BBSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service NBService stopped successfully!
Service NBService deleted successfully!
Service NMIndexingService stopped successfully!
Service NMIndexingService deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\HPCeeScheduleForOndra.job moved successfully.
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EE79F747-9DB1-4FF7-A20C-B118B92837C5}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE79F747-9DB1-4FF7-A20C-B118B92837C5}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EE79F747-9DB1-4FF7-A20C-B118B92837C5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE79F747-9DB1-4FF7-A20C-B118B92837C5}\ not found.
HKU\S-1-5-21-435210660-2472884283-4013427881-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{40c3cc16-7269-4b32-9531-17f2950fb06f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40c3cc16-7269-4b32-9531-17f2950fb06f}\ not found.
Registry value HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\SearchScopes\{C7307369-5909-4193-BB30-45C0B8B35F46}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C7307369-5909-4193-BB30-45C0B8B35F46}\ not found.
Registry key HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}\ not found.
Registry key HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\SearchScopes\{EE79F747-9DB1-4FF7-A20C-B118B92837C5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE79F747-9DB1-4FF7-A20C-B118B92837C5}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Nero.com/KM\ deleted successfully.
C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{1EA00BE1-6E54-4E2A-8099-680300BF23E1} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1EA00BE1-6E54-4E2A-8099-680300BF23E1}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ED0E8CA5-42FB-4B18-997B-769E0408E79D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED0E8CA5-42FB-4B18-997B-769E0408E79D}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_USERS\S-1-5-21-435210660-2472884283-4013427881-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{872B5B88-9DB5-4310-BDD0-AC189557E5F5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3191.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3256.tmp\System.Net.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3256.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP96E2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP1B9C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP5CCF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPD604.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPFD13.tmp folder deleted successfully.
C:\Windows\Installer\MSI4BFF.tmp deleted successfully.
ADS C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT deleted successfully.
ADS C:\ProgramData\Temp:0888F409 deleted successfully.
ADS C:\ProgramData\Temp:C7D0F96D deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 12162012_171845

Files\Folders moved on Reboot...
C:\Users\Ondra\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Dejte mi sem novy log z RSIT

Jak je na tom pc? Je s nim nejaky problem?

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ondra at 2012-12-16 18:21:35
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 277 GB (61%) free of 457 GB
Total RAM: 4044 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:21:37, on 16.12.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
C:\Program Files (x86)\Samsung\Kies\Kies.exe
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Program Files (x86)\SnugTV\SnugTV Station\QuickStart.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: SnugTV Quick Start.lnk = ?
O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: FreshDownload - {FDA896CE-DA9D-4E43-9AAF-B9685DD15952} - C:\Program Files (x86)\FreshDevices\FreshDownload\fd.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\25986~1.67\{c16c1~1\browse~1.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Stavová služba ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: AVerUpdateServer - AVerMedia TECHNOLOGIES, Inc. - C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: TrueSuiteService (FPLService) - HP - C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Identity Protection Technology Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SnugTV Service - AVerMedia Technologies, Inc. - C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14416 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\AUDIODG.EXE 0x2e0
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe"
"C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe"
"taskhost.exe"
taskeng.exe {4E8555BE-F335-47ED-91B5-A005B7D86A00}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe" -Embedding
"C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006d0
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload
taskeng.exe {7FFF0391-F8D0-4FBB-8178-DCD2571AAB0F}
"C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe" -startup
"C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE"
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe"
"C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe"
WLIDSvcM.exe 2232
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\SnugTV\SnugTV Station\QuickStart.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k WbioSvcGroup
taskeng.exe {F34C71C0-AEFE-42A4-9204-F83BB7C69C8A}
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ondra\Desktop\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Website Log On - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll [2011-05-06 1746760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Website Log On - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll [2011-05-06 1598280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-04-15 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-04-15 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-04-15 416024]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-06-10 2799912]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-06-07 1128448]
"SetDefault"=C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [2011-06-27 42808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2012-10-11 966072]
"KiesAirMessage"=C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [2012-10-09 580096]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-11-05 843208]
""=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-11-05 843208]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-05-08 336384]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-04-30 284440]
"HPQuickWebProxy"=C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [2011-06-27 168504]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2011-04-08 586808]
"HPOSD"=C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2011-01-27 318520]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2012-10-11 309688]
"Aimersoft Helper Compact.exe"=C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2012-02-28 1667072]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2012-12-04 384800]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
SnugTV Quick Start.lnk - C:\Windows\Installer\{33CFCB69-2FA5-43E8-B8A8-FAA155F870B5}\NewShortcut1_46FEF19C05F1475DAA14D9007DC15270_2.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-15 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-12-16 17:18:45 ----D---- C:\_OTL
2012-12-15 17:51:55 ----D---- C:\Users\Ondra\AppData\Roaming\Malwarebytes
2012-12-15 17:51:52 ----D---- C:\ProgramData\Malwarebytes
2012-12-15 16:48:02 ----A---- C:\AdwCleaner[R2].txt
2012-12-15 16:18:45 ----A---- C:\AdwCleaner[S1].txt
2012-12-15 16:13:11 ----A---- C:\AdwCleaner[R1].txt
2012-12-15 14:58:27 ----D---- C:\Program Files (x86)\Winnydows
2012-12-15 14:20:03 ----D---- C:\Program Files (x86)\Wondershare
2012-12-15 14:15:47 ----D---- C:\Windows\SYSWOW64\URTTEMP
2012-12-15 10:18:23 ----D---- C:\Program Files\trend micro
2012-12-15 10:18:22 ----D---- C:\rsit
2012-12-14 23:38:06 ----D---- C:\Users\Ondra\AppData\Roaming\Avira
2012-12-14 23:35:25 ----D---- C:\Firefox
2012-12-14 23:35:07 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2012-12-14 23:35:07 ----A---- C:\Windows\system32\drivers\avipbb.sys
2012-12-14 23:35:07 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2012-12-14 23:35:06 ----D---- C:\ProgramData\Avira
2012-12-14 23:35:06 ----D---- C:\Program Files (x86)\Avira
2012-12-14 09:05:11 ----A---- C:\Windows\system32\FNTCACHE.DAT
2012-12-13 23:00:04 ----D---- C:\ProgramData\xml_param
2012-12-13 22:56:54 ----A---- C:\Windows\system32\drivers\WsAudio_DeviceS(5).sys
2012-12-13 22:55:39 ----A---- C:\Windows\SYSWOW64\iconv.dll
2012-12-13 22:15:53 ----D---- C:\Users\Ondra\AppData\Roaming\XMedia Recode
2012-12-13 21:01:47 ----D---- C:\Users\Ondra\AppData\Roaming\SpiritON TV Software
2012-12-13 19:25:56 ----D---- C:\Users\Ondra\AppData\Roaming\Nitro
2012-12-13 19:25:56 ----D---- C:\Users\Ondra\AppData\Roaming\FileOpen
2012-12-13 19:25:56 ----D---- C:\ProgramData\FileOpen
2012-12-13 19:17:12 ----D---- C:\ProgramData\Nitro
2012-12-13 19:01:22 ----D---- C:\Users\Ondra\AppData\Roaming\Cuttermaran
2012-12-13 18:01:00 ----D---- C:\Program Files (x86)\FreshDevices
2012-12-13 16:11:12 ----D---- C:\Windows\SYSWOW64\searchplugins
2012-12-13 16:11:12 ----D---- C:\Windows\SYSWOW64\Extensions
2012-12-13 14:33:35 ----D---- C:\Users\Ondra\AppData\Roaming\TuneUp Software
2012-12-13 14:33:25 ----D---- C:\ProgramData\TuneUp Software
2012-12-13 14:33:18 ----SHD---- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2012-12-13 14:33:18 ----HD---- C:\ProgramData\Common Files
2012-12-13 11:57:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-12-13 11:57:28 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-13 11:57:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-12-13 11:57:27 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-12-13 11:57:27 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-13 11:57:27 ----A---- C:\Windows\system32\ieui.dll
2012-12-13 11:57:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-12-13 11:57:26 ----A---- C:\Windows\SYSWOW64\url.dll
2012-12-13 11:57:26 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-12-13 11:57:26 ----A---- C:\Windows\system32\urlmon.dll
2012-12-13 11:57:26 ----A---- C:\Windows\system32\url.dll
2012-12-13 11:57:25 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-12-13 11:57:25 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-13 11:57:25 ----A---- C:\Windows\system32\jscript9.dll
2012-12-13 11:57:24 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-12-13 11:57:24 ----A---- C:\Windows\system32\wininet.dll
2012-12-13 11:57:24 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-13 11:57:23 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-12-13 11:57:23 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-12-13 11:57:23 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-12-13 11:57:23 ----A---- C:\Windows\system32\vbscript.dll
2012-12-13 11:57:23 ----A---- C:\Windows\system32\jscript.dll
2012-12-13 11:57:23 ----A---- C:\Windows\system32\iertutil.dll
2012-12-13 11:57:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-12-13 11:57:21 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-12-13 11:57:19 ----A---- C:\Windows\system32\mshtml.dll
2012-12-13 11:57:19 ----A---- C:\Windows\system32\ieframe.dll
2012-12-13 11:57:18 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-12-13 11:32:18 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-12-13 11:32:18 ----A---- C:\Windows\system32\tzres.dll
2012-12-13 11:31:59 ----A---- C:\Windows\system32\winsrv.dll
2012-12-13 11:31:59 ----A---- C:\Windows\system32\KernelBase.dll
2012-12-13 11:31:59 ----A---- C:\Windows\system32\kernel32.dll
2012-12-13 11:31:58 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-12-13 11:31:58 ----A---- C:\Windows\system32\conhost.exe
2012-12-13 11:31:57 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-12-13 11:31:54 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-12-13 11:31:54 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-12-13 11:31:54 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-12-13 11:31:54 ----A---- C:\Windows\system32\wow64win.dll
2012-12-13 11:31:54 ----A---- C:\Windows\system32\wow64cpu.dll
2012-12-13 11:31:54 ----A---- C:\Windows\system32\wow64.dll
2012-12-13 11:31:54 ----A---- C:\Windows\system32\ntvdm64.dll
2012-12-13 11:31:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-13 11:31:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-13 11:31:53 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-12-13 11:31:53 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-12-13 11:31:52 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-12-13 11:31:51 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-12-13 11:31:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-12-13 11:31:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-12-13 11:31:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-12-13 11:31:50 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-12-13 11:31:49 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-12-13 11:31:48 ----A---- C:\Windows\SYSWOW64\user.exe
2012-12-13 11:31:39 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-13 11:31:39 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-13 11:31:39 ----A---- C:\Windows\system32\atmlib.dll
2012-12-13 11:31:39 ----A---- C:\Windows\system32\atmfd.dll
2012-12-13 11:31:37 ----A---- C:\Windows\system32\win32k.sys
2012-12-13 11:31:37 ----A---- C:\Windows\system32\dpnet.dll
2012-12-13 11:31:36 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2012-12-04 09:10:18 ----RD---- C:\Program Files (x86)\Skype
2012-12-03 11:30:15 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2012-12-03 11:30:15 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2012-12-03 11:30:15 ----A---- C:\Windows\SYSWOW64\lagarith.dll
2012-12-03 11:30:07 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2012-12-03 11:30:05 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2012-12-02 17:21:34 ----D---- C:\Users\Ondra\AppData\Roaming\ahd_free_video_converter
2012-12-02 17:21:20 ----D---- C:\Program Files (x86)\Free Video Converter
2012-12-02 17:21:04 ----D---- C:\Users\Ondra\AppData\Roaming\ahd_free_dvd_converter
2012-12-02 17:20:47 ----D---- C:\Program Files (x86)\Free DVD Converter
2012-12-02 17:15:52 ----D---- C:\77FreewareOutput
2012-12-02 17:15:47 ----D---- C:\Users\Ondra\AppData\Roaming\free_hd_video_converter
2012-12-02 17:15:47 ----A---- C:\Windows\SYSWOW64\wvc1dmod.dll
2012-12-02 17:15:34 ----D---- C:\Program Files (x86)\Free HD Video Converter
2012-12-02 16:48:56 ----D---- C:\ProgramData\Emicsoft Studio
2012-12-02 16:34:28 ----D---- C:\Program Files (x86)\AviSynth 2.5
2012-12-02 13:54:38 ----D---- C:\HUDBA
2012-12-01 20:12:43 ----D---- C:\Users\Ondra\AppData\Roaming\DVDVideoSoft
2012-12-01 20:10:27 ----D---- C:\1
2012-12-01 20:00:46 ----D---- C:\iOrgSoft AVCHDVideoConverter
2012-12-01 19:26:21 ----D---- C:\Program Files (x86)\Freemake1
2012-11-29 13:00:34 ----D---- C:\TS
2012-11-28 16:36:40 ----D---- C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
2012-11-22 18:56:30 ----D---- C:\VIDEO
2012-11-22 17:17:14 ----D---- C:\Program Files (x86)\DVDx 4.0
2012-11-22 16:31:26 ----D---- C:\Users\Ondra\AppData\Roaming\Mirillis
2012-11-22 16:31:26 ----D---- C:\ProgramData\Mirillis
2012-11-20 20:00:55 ----D---- C:\Users\Ondra\AppData\Roaming\Ahead
2012-11-20 19:59:58 ----D---- C:\ProgramData\Ahead
2012-11-20 19:35:38 ----D---- C:\Windows\system32\EventProviders
2012-11-20 19:11:53 ----D---- C:\Symbols
2012-11-20 18:45:54 ----D---- C:\Windows\cs
2012-11-20 18:43:52 ----DC---- C:\Windows\system32\DRVSTORE
2012-11-20 18:43:52 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2012-11-20 18:43:46 ----D---- C:\Program Files\Windows Live
2012-11-20 18:42:53 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-11-20 18:42:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-11-20 18:42:53 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-11-20 18:42:53 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-11-20 18:42:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-11-20 18:42:51 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-11-20 18:42:47 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-11-20 18:42:47 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-11-20 18:42:17 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-11-20 18:42:17 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-11-20 18:41:51 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-11-20 18:41:51 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-11-20 18:41:31 ----D---- C:\Program Files (x86)\Microsoft SkyDrive
2012-11-20 18:41:18 ----D---- C:\ProgramData\Microsoft SkyDrive
2012-11-20 11:26:29 ----D---- C:\DVR2
2012-11-20 11:18:53 ----D---- C:\DVR1
2012-11-19 23:39:58 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2012-11-19 23:39:58 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2012-11-19 23:39:57 ----A---- C:\Windows\system32\Wdfres.dll
2012-11-19 23:26:15 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-11-19 23:26:15 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-11-19 23:26:14 ----A---- C:\Windows\system32\WUDFx.dll
2012-11-19 23:26:14 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-11-19 23:26:14 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-11-19 23:26:14 ----A---- C:\Windows\system32\WUDFHost.exe
2012-11-19 23:26:14 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-11-19 22:42:35 ----D---- C:\DVD_VR
2012-11-19 14:37:03 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2012-11-19 14:37:03 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2012-11-19 14:37:03 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2012-11-19 14:37:03 ----A---- C:\Windows\system32\dhcpcore6.dll
2012-11-19 14:36:53 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-11-19 14:36:52 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2012-11-19 14:36:52 ----A---- C:\Windows\SYSWOW64\netevent.dll
2012-11-19 14:36:52 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2012-11-19 14:36:52 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2012-11-19 14:36:52 ----A---- C:\Windows\system32\nlasvc.dll
2012-11-19 14:36:52 ----A---- C:\Windows\system32\nlaapi.dll
2012-11-19 14:36:52 ----A---- C:\Windows\system32\netevent.dll
2012-11-19 14:36:52 ----A---- C:\Windows\system32\netcorehc.dll
2012-11-19 14:36:52 ----A---- C:\Windows\system32\ncsi.dll
2012-11-19 14:36:52 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-11-19 14:36:52 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2012-11-19 14:36:30 ----A---- C:\Windows\system32\synceng.dll
2012-11-19 14:36:29 ----A---- C:\Windows\SYSWOW64\synceng.dll

======List of files/folders modified in the last 1 month======

2012-12-16 18:21:37 ----D---- C:\Windows\Temp
2012-12-16 18:20:54 ----D---- C:\Windows\Prefetch
2012-12-16 18:18:54 ----A---- C:\Windows\SYSWOW64\log.txt
2012-12-16 18:17:52 ----D---- C:\Temp
2012-12-16 17:35:07 ----D---- C:\Windows\system32\config
2012-12-16 17:19:21 ----SHD---- C:\Windows\Installer
2012-12-16 17:19:20 ----D---- C:\Windows\Tasks
2012-12-16 17:19:04 ----D---- C:\Windows
2012-12-16 17:17:36 ----RD---- C:\Program Files (x86)
2012-12-16 17:17:36 ----D---- C:\Windows\system32\drivers
2012-12-16 15:47:30 ----HD---- C:\ProgramData
2012-12-16 09:57:28 ----D---- C:\Ondra
2012-12-15 22:34:05 ----SHD---- C:\System Volume Information
2012-12-15 16:40:37 ----SD---- C:\Users\Ondra\AppData\Roaming\Microsoft
2012-12-15 16:08:17 ----RD---- C:\Program Files
2012-12-15 16:03:43 ----D---- C:\Windows\SYSWOW64\directx
2012-12-15 16:03:36 ----D---- C:\Windows\Logs
2012-12-15 14:58:50 ----D---- C:\Windows\SysWOW64
2012-12-15 14:32:34 ----D---- C:\Users\Ondra\AppData\Roaming\vlc
2012-12-15 14:16:33 ----D---- C:\Windows\Registration
2012-12-15 14:16:21 ----RSD---- C:\Windows\assembly
2012-12-15 14:16:16 ----D---- C:\Windows\inf
2012-12-15 14:16:16 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-12-15 14:15:47 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-15 08:48:27 ----D---- C:\Vypalit
2012-12-14 23:47:42 ----D---- C:\Windows\Microsoft.NET
2012-12-14 23:35:54 ----D---- C:\Windows\system32\catroot
2012-12-14 23:35:46 ----D---- C:\Windows\system32\Tasks
2012-12-14 23:20:46 ----AD---- C:\ProgramData\Temp
2012-12-14 23:18:06 ----D---- C:\Windows\System32
2012-12-14 23:17:15 ----D---- C:\Program Files (x86)\Pegasys Inc
2012-12-14 23:14:29 ----D---- C:\Windows\system32\catroot2
2012-12-14 23:12:54 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-14 23:12:49 ----D---- C:\Program Files (x86)\QuickTime
2012-12-14 23:11:44 ----D---- C:\Program Files (x86)\Common Files
2012-12-14 23:11:35 ----D---- C:\Program Files\Common Files
2012-12-14 09:12:51 ----D---- C:\Users\Ondra\AppData\Roaming\hpqLog
2012-12-14 09:05:19 ----D---- C:\Windows\debug
2012-12-14 08:59:51 ----D---- C:\Windows\Panther
2012-12-14 08:32:52 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2012-12-13 22:57:56 ----D---- C:\Windows\system32\DriverStore
2012-12-13 21:43:41 ----D---- C:\Users\Ondra\AppData\Roaming\dvdcss
2012-12-13 21:27:27 ----D---- C:\FOTO
2012-12-13 20:26:55 ----D---- C:\Users\Ondra\AppData\Roaming\Pegasys Inc
2012-12-13 16:10:26 ----D---- C:\Windows\Resources
2012-12-13 12:38:00 ----D---- C:\Windows\winsxs
2012-12-13 12:36:18 ----D---- C:\Windows\SYSWOW64\en-US
2012-12-13 12:36:18 ----D---- C:\Windows\SYSWOW64\el-GR
2012-12-13 12:36:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-12-13 12:36:17 ----D---- C:\Windows\system32\en-US
2012-12-13 12:36:17 ----D---- C:\Windows\system32\el-GR
2012-12-13 12:36:17 ----D---- C:\Windows\system32\cs-CZ
2012-12-13 12:36:09 ----D---- C:\Windows\AppPatch
2012-12-13 12:36:08 ----D---- C:\Windows\SYSWOW64\migration
2012-12-13 12:36:08 ----D---- C:\Windows\system32\migration
2012-12-13 12:36:07 ----D---- C:\Program Files\Internet Explorer
2012-12-13 12:01:50 ----D---- C:\ProgramData\Microsoft Help
2012-12-13 11:59:08 ----A---- C:\Windows\system32\MRT.exe
2012-12-11 23:02:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-12-10 22:30:20 ----D---- C:\Program Files\Google
2012-12-10 22:30:20 ----D---- C:\Program Files (x86)\Google
2012-12-10 19:29:01 ----D---- C:\Users\Ondra\AppData\Roaming\Seznam.cz
2012-12-10 19:28:56 ----D---- C:\Program Files (x86)\Seznam.cz
2012-12-10 19:27:05 ----D---- C:\ProgramData\Google
2012-12-06 21:18:32 ----D---- C:\ProgramData\Adobe
2012-12-04 19:12:40 ----D---- C:\ProgramData\DivX
2012-12-04 19:12:40 ----D---- C:\Program Files (x86)\DivX
2012-12-04 17:05:22 ----D---- C:\FOTO1
2012-12-04 15:26:23 ----D---- C:\Program Files (x86)\Formix SE
2012-12-04 09:10:26 ----D---- C:\ProgramData\Skype
2012-12-02 20:54:04 ----D---- C:\Windows\LiveKernelReports
2012-12-02 15:58:02 ----D---- C:\ProgramData\Freemake
2012-12-02 15:57:53 ----D---- C:\Program Files (x86)\Freemake
2012-12-02 14:42:29 ----D---- C:\Program Files (x86)\Elecard
2012-12-02 14:40:21 ----D---- C:\Windows\system32\appmgmt
2012-12-02 14:40:21 ----D---- C:\Program Files (x86)\Mirillis
2012-12-02 14:39:50 ----D---- C:\Program Files (x86)\Nero
2012-12-01 19:56:01 ----D---- C:\Users\Ondra\AppData\Roaming\avidemux
2012-11-29 21:13:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-11-28 17:42:57 ----D---- C:\Windows\system32\NDF
2012-11-28 16:38:06 ----D---- C:\Program Files (x86)\Hewlett-Packard
2012-11-28 16:35:33 ----D---- C:\SWSetup
2012-11-24 09:24:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-11-22 18:20:39 ----D---- C:\Users\Ondra\AppData\Roaming\Hewlett-Packard
2012-11-22 18:20:34 ----D---- C:\Windows\SYSWOW64\%COREALLUSERPATH%
2012-11-22 16:18:18 ----D---- C:\ProgramData\Ulead Systems
2012-11-20 19:59:41 ----D---- C:\Windows\ehome
2012-11-20 19:57:16 ----D---- C:\ProgramData\Nero
2012-11-20 18:44:03 ----D---- C:\Program Files (x86)\Windows Live
2012-11-20 18:43:17 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-11-20 18:34:16 ----D---- C:\ProgramData\Norton
2012-11-20 18:32:48 ----D---- C:\Program Files (x86)\NortonInstaller
2012-11-20 18:31:46 ----D---- C:\ProgramData\NortonInstaller
2012-11-20 18:28:49 ----SD---- C:\ProgramData\Microsoft
2012-11-20 11:37:39 ----D---- C:\ProgramData\DVD Shrink
2012-11-20 10:58:34 ----D---- C:\Windows\system32\drivers\en-US
2012-11-20 10:58:34 ----D---- C:\Windows\system32\drivers\el-GR
2012-11-20 10:58:34 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-11-20 10:58:33 ----D---- C:\Windows\system32\wbem
2012-11-20 10:58:32 ----D---- C:\Windows\PolicyDefinitions
2012-11-20 10:58:22 ----RSD---- C:\Windows\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-12-03 129216]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2012-11-16 27800]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-12-03 99912]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-05-08 9259520]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-05-08 301568]
R3 AVerFx2hbtv64;AVerMedia USB SW Hybrid Tuner; C:\Windows\system32\drivers\AVerFx2hbtv64.sys [2009-12-08 512512]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2011-06-16 133160]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-06-15 620584]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-06-15 165416]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2011-06-15 178728]
R3 BTWDPAN;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\btwdpan.sys [2011-05-21 89640]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-14 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2011-06-15 21544]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-27 425064]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-06-07 528384]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-06-10 1451056]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2012-06-27 36328]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-01-19 4729408]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-02-15 335464]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2012-06-27 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2012-06-27 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2012-06-27 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2012-06-27 146920]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tswNT;toolstar*testWIN support driver; \??\C:\Users\ADMINI~1\AppData\Local\Temp\0009B125\tswnt.sys []
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S4 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-05-08 203776]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-12-04 109344]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-12-04 85280]
R2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2012-12-04 565024]
R2 AVerRemote;AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [2010-04-28 348160]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [2011-04-01 403456]
R2 AVerUpdateServer;AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [2011-01-06 168448]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-06-17 1083680]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 FPLService;TrueSuiteService; C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-05-06 263496]
R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-09-07 100864]
R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2012-08-10 197536]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-04-08 26680]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-02-18 2372096]
R2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service; C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2011-02-24 212944]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
R2 SnugTV Service;SnugTV Service; C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe [2011-04-06 571904]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2011-06-07 301568]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
S2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-21 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Pc, je v pořádku, žádný problém. Jestli je to vše. Děkuji.

Vsechny tyto programy - vcetne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

vyosek píše: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete napriklad program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak napiste, zda vse probehlo bez problemu a pokud ano, bude to vse