Prosim o preventivku, NTB je silene pomaly

Zpráva

#16 Příspěvek od **Márty84** » 01 led 2014 18:20

Dejte novy log z RSIT

Ot@s · #17 Příspěvek od **Ot@s** » 01 led 2014 18:38

Tady je...

Logfile of random's system information tool 1.08 (written by random/random)
Run by Otas at 2014-01-01 18:37:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 27 GB (26%) free of 102 GB
Total RAM: 3948 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:37:16, on 1.1.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16502)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
C:\Program Files (x86)\ASUSTek Computer Inc\ASUS U3100MINI PLUS V2 Utilities\RTLRCtl.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\Common Files\Panasonic\VideoCam Suite AutoStart\VideoCamSuiteAutoStart.exe
C:\Users\Otas\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
E:\Hry\STALKER - Call Of Pripyat\4\4Story_CZ\PrePatch.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe
C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Otas.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [3200 Scan2PC] "C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [4StoryPrePatch] E:\Hry\STALKER - Call Of Pripyat\4\4Story_CZ\PrePatch.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [RIM PeerManager] "C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [MyTomTomSA.exe] C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
O4 - Startup: Dropbox.lnk = Otas\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Global Startup: Remote Control.lnk = C:\Program Files (x86)\ASUSTek Computer Inc\ASUS U3100MINI PLUS V2 Utilities\RTLRCtl.exe
O4 - Global Startup: TMMonitor.lnk = C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
O4 - Global Startup: VideoCam Suite.lnk = ?
O8 - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: Nová poznámka - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\Windows\SysWOW64\bgsvcgen.exe
O23 - Service: BlackBerry Device Manager - Research In Motion Limited - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: DraftSight API Service - Dassault Systemes - C:\Program Files (x86)\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RIM MDNS - Apple Inc. - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
O23 - Service: BlackBerry Link Communication Manager (RIM Tunnel Service) - Research In Motion Limited - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WTService - Unknown owner - C:\Windows\system32\atwtusb.exe (file missing)

--
End of file - 14689 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
/QuitInfo:0000000000000544;0000000000000548; /AddRef;
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe"
"c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\SysWOW64\bgsvcgen.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe"
"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"
"C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe"
"taskhost.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe"
"C:\Windows\system32\Dwm.exe"
/QuitInfo:00000000000005D0;00000000000005D4; /AddRef;
C:\Windows\SysWOW64\PnkBstrA.exe
/QuitInfo:00000000000005CC;00000000000005EC;
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3132
C:\Windows\system32\atwtusb.exe -s
/loadhooks /Parent:0000000000000AE4
C:\Windows\system32\atwtusb.exe
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe" service
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Windows\System32\WTMKM.exe"
C:\Windows\system32\igfxext.exe -Embedding
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe"
"C:\Program Files (x86)\ASUSTek Computer Inc\ASUS U3100MINI PLUS V2 Utilities\RTLRCtl.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe"
"C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Common Files\Panasonic\VideoCam Suite AutoStart\VideoCamSuiteAutoStart.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"
"C:\Users\Otas\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe" KMPProcess
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Windows\Samsung\PanelMgr\SSMMgr.exe" /autorun
"C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\Samsung\PanelMgr\caller64.exe Samsung PanelMgr
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"E:\Hry\STALKER - Call Of Pripyat\4\4Story_CZ\PrePatch.exe"
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe"
ArcCon.ac 132242 0
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe"
"C:\Program Files (x86)\Common Files\Research In Motion\nginx\\nginx.exe" -c "C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry 10 Desktop\RemoteAccess\nginx\conf\nginx.conf"
"C:\Program Files (x86)\Common Files\Research In Motion\nginx\\nginx.exe" -c "C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry 10 Desktop\RemoteAccess\nginx\conf\nginx.conf"
\??\C:\Windows\system32\conhost.exe "-8469221521876814656-999301824417064214-19518002821281368543-19528694111787452807
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6988.0.324258371\1992364074" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0106 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2372 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group2 pct:10a stable:r5 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-1-Percent/group_31/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="6988.3.1834900557\118413405" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Otas\Desktop\RogueKiller.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group2 pct:10a stable:r5 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-1-Percent/group_31/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --disable-accelerated-video-decode --channel="6988.7.67046723\1831468883" /prefetch:673131151
"C:\Users\Otas\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-10-22 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-06-12 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-22 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2013-10-03 583520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-06-12 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-10-22 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-22 606544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-05-09 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-05-09 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-05-09 416024]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2010-11-12 2588968]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-10 11785832]
"Power Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2011-05-10 1831528]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2010-12-17 438784]
"MacrokeyManager"=C:\Windows\system32\WTMKM.exe [2011-06-01 7329792]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14 20584608]
"MyTomTomSA.exe"=C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe [2013-05-23 455608]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-09-14 283160]
"BackupManagerTray"=C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe [2012-01-05 295448]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-03-14 1081424]
"Samsung PanelMgr"=C:\Windows\Samsung\PanelMgr\SSMMgr.exe [2011-07-06 688128]
"3200 Scan2PC"=C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe [2010-05-18 1989120]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"4StoryPrePatch"=E:\Hry\STALKER - Call Of Pripyat\4\4Story_CZ\PrePatch.exe [2013-02-19 327680]
"ArcSoft Connection Service"=C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-10-26 3567800]
"RIMBBLaunchAgent.exe"=C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [2013-09-09 443408]
"RIM PeerManager"=C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [2013-11-05 4424704]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Remote Control.lnk - C:\Program Files (x86)\ASUSTek Computer Inc\ASUS U3100MINI PLUS V2 Utilities\RTLRCtl.exe
TMMonitor.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
VideoCam Suite.lnk - C:\Program Files (x86)\Common Files\Panasonic\VideoCam Suite AutoStart\VideoCamSuiteAutoStart.exe

C:\Users\Otas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Otas\AppData\Roaming\Dropbox\bin\Dropbox.exe
EvernoteClipper.lnk - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-15 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*
.vbs - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-01-01 17:48:39 ----A---- C:\Windows\system32\drivers\WUDFRd.sys.bak
2014-01-01 17:48:39 ----A---- C:\Windows\system32\drivers\WUDFPf.sys.bak
2014-01-01 17:48:39 ----A---- C:\Windows\system32\drivers\ws2ifsl.sys.bak
2014-01-01 17:48:39 ----A---- C:\Windows\system32\drivers\wmilib.sys.bak
2014-01-01 17:48:39 ----A---- C:\Windows\system32\drivers\wmiacpi.sys.bak
2014-01-01 17:48:39 ----A---- C:\Windows\system32\drivers\winusb.sys.bak
2014-01-01 17:48:38 ----A---- C:\Windows\system32\drivers\wimmount.sys.bak
2014-01-01 17:48:38 ----A---- C:\Windows\system32\drivers\wfplwf.sys.bak
2014-01-01 17:48:38 ----A---- C:\Windows\system32\drivers\WdfLdr.sys.bak
2014-01-01 17:48:38 ----A---- C:\Windows\system32\drivers\Wdf01000.sys.bak
2014-01-01 17:48:37 ----A---- C:\Windows\system32\drivers\wd.sys.bak
2014-01-01 17:48:37 ----A---- C:\Windows\system32\drivers\watchdog.sys.bak
2014-01-01 17:48:37 ----A---- C:\Windows\system32\drivers\wanarp.sys.bak
2014-01-01 17:48:37 ----A---- C:\Windows\system32\drivers\walvhid.sys.bak
2014-01-01 17:48:36 ----A---- C:\Windows\system32\drivers\wacompen.sys.bak
2014-01-01 17:48:36 ----A---- C:\Windows\system32\drivers\vwifimp.sys.bak
2014-01-01 17:48:36 ----A---- C:\Windows\system32\drivers\vwififlt.sys.bak
2014-01-01 17:48:36 ----A---- C:\Windows\system32\drivers\vwifibus.sys.bak
2014-01-01 17:48:36 ----A---- C:\Windows\system32\drivers\vsmraid.sys.bak
2014-01-01 17:48:35 ----A---- C:\Windows\system32\drivers\volsnap.sys.bak
2014-01-01 17:48:35 ----A---- C:\Windows\system32\drivers\volmgrx.sys.bak
2014-01-01 17:48:35 ----A---- C:\Windows\system32\drivers\volmgr.sys.bak
2014-01-01 17:48:34 ----A---- C:\Windows\system32\drivers\videoprt.sys.bak
2014-01-01 17:48:34 ----A---- C:\Windows\system32\drivers\viaide.sys.bak
2014-01-01 17:48:34 ----A---- C:\Windows\system32\drivers\vhdmp.sys.bak
2014-01-01 17:48:34 ----A---- C:\Windows\system32\drivers\vgapnp.sys.bak
2014-01-01 17:48:33 ----A---- C:\Windows\system32\drivers\vga.sys.bak
2014-01-01 17:48:33 ----A---- C:\Windows\system32\drivers\vdrvroot.sys.bak
2014-01-01 17:48:33 ----A---- C:\Windows\system32\drivers\usbvideo.sys.bak
2014-01-01 17:48:33 ----A---- C:\Windows\system32\drivers\usbuhci.sys.bak
2014-01-01 17:48:32 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS.bak
2014-01-01 17:48:32 ----A---- C:\Windows\system32\drivers\usbscan.sys.bak
2014-01-01 17:48:32 ----A---- C:\Windows\system32\drivers\usbrpm.sys.bak
2014-01-01 17:48:31 ----A---- C:\Windows\system32\drivers\usbprint.sys.bak
2014-01-01 17:48:31 ----A---- C:\Windows\system32\drivers\usbport.sys.bak
2014-01-01 17:48:31 ----A---- C:\Windows\system32\drivers\usbohci.sys.bak
2014-01-01 17:48:31 ----A---- C:\Windows\system32\drivers\usbhub.sys.bak
2014-01-01 17:48:30 ----A---- C:\Windows\system32\drivers\usbehci.sys.bak
2014-01-01 17:48:30 ----A---- C:\Windows\system32\drivers\usbd.sys.bak
2014-01-01 17:48:30 ----A---- C:\Windows\system32\drivers\usbcir.sys.bak
2014-01-01 17:48:29 ----A---- C:\Windows\system32\drivers\usbccgp.sys.bak
2014-01-01 17:48:29 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys.bak
2014-01-01 17:48:29 ----A---- C:\Windows\system32\drivers\usb8023x.sys.bak
2014-01-01 17:48:29 ----A---- C:\Windows\system32\drivers\usb80236.sys.bak
2014-01-01 17:48:29 ----A---- C:\Windows\system32\drivers\usb8023.sys.bak
2014-01-01 17:48:28 ----A---- C:\Windows\system32\drivers\umpass.sys.bak
2014-01-01 17:48:28 ----A---- C:\Windows\system32\drivers\umbus.sys.bak
2014-01-01 17:48:28 ----A---- C:\Windows\system32\drivers\ULIAGPKX.SYS.bak
2014-01-01 17:48:28 ----A---- C:\Windows\system32\drivers\udfs.sys.bak
2014-01-01 17:48:27 ----A---- C:\Windows\system32\drivers\UBHelper.sys.bak
2014-01-01 17:48:27 ----A---- C:\Windows\system32\drivers\UAGP35.SYS.bak
2014-01-01 17:48:27 ----A---- C:\Windows\system32\drivers\tunnel.sys.bak
2014-01-01 17:48:27 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys.bak
2014-01-01 17:48:27 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys.bak
2014-01-01 17:48:26 ----A---- C:\Windows\system32\drivers\tssecsrv.sys.bak
2014-01-01 17:48:26 ----A---- C:\Windows\system32\drivers\termdd.sys.bak
2014-01-01 17:48:26 ----A---- C:\Windows\system32\drivers\tdx.sys.bak
2014-01-01 17:48:26 ----A---- C:\Windows\system32\drivers\tdtcp.sys.bak
2014-01-01 17:48:26 ----A---- C:\Windows\system32\drivers\tdpipe.sys.bak
2014-01-01 17:48:25 ----A---- C:\Windows\system32\drivers\tdi.sys.bak
2014-01-01 17:48:25 ----A---- C:\Windows\system32\drivers\tcpipreg.sys.bak
2014-01-01 17:48:24 ----A---- C:\Windows\system32\drivers\tcpip.sys.bak
2014-01-01 17:48:24 ----A---- C:\Windows\system32\drivers\tape.sys.bak
2014-01-01 17:48:23 ----A---- C:\Windows\system32\drivers\swenum.sys.bak
2014-01-01 17:48:23 ----A---- C:\Windows\system32\drivers\stream.sys.bak
2014-01-01 17:48:23 ----A---- C:\Windows\system32\drivers\storport.sys.bak
2014-01-01 17:48:23 ----A---- C:\Windows\system32\drivers\stexstor.sys.bak
2014-01-01 17:48:23 ----A---- C:\Windows\system32\drivers\SSPORT.sys.bak
2014-01-01 17:48:22 ----A---- C:\Windows\system32\drivers\srvnet.sys.bak
2014-01-01 17:48:22 ----A---- C:\Windows\system32\drivers\srv2.sys.bak
2014-01-01 17:48:22 ----A---- C:\Windows\system32\drivers\srv.sys.bak
2014-01-01 17:48:21 ----A---- C:\Windows\system32\drivers\sptd.sys.bak
2014-01-01 17:48:21 ----A---- C:\Windows\system32\drivers\spsys.sys.bak
2014-01-01 17:48:20 ----A---- C:\Windows\system32\drivers\spldr.sys.bak
2014-01-01 17:48:20 ----A---- C:\Windows\system32\drivers\smclib.sys.bak
2014-01-01 17:48:20 ----A---- C:\Windows\system32\drivers\smb.sys.bak
2014-01-01 17:48:20 ----A---- C:\Windows\system32\drivers\sisraid4.sys.bak
2014-01-01 17:48:19 ----A---- C:\Windows\system32\drivers\sisraid2.sys.bak
2014-01-01 17:48:19 ----A---- C:\Windows\system32\drivers\Sftvollh.sys.bak
2014-01-01 17:48:19 ----A---- C:\Windows\system32\drivers\Sftredirlh.sys.bak
2014-01-01 17:48:19 ----A---- C:\Windows\system32\drivers\Sftplaylh.sys.bak
2014-01-01 17:48:18 ----A---- C:\Windows\system32\drivers\Sftfslh.sys.bak
2014-01-01 17:48:18 ----A---- C:\Windows\system32\drivers\sfloppy.sys.bak
2014-01-01 17:48:18 ----A---- C:\Windows\system32\drivers\sffp_sd.sys.bak
2014-01-01 17:48:18 ----A---- C:\Windows\system32\drivers\sffp_mmc.sys.bak
2014-01-01 17:48:18 ----A---- C:\Windows\system32\drivers\sffdisk.sys.bak
2014-01-01 17:48:17 ----A---- C:\Windows\system32\drivers\sermouse.sys.bak
2014-01-01 17:48:17 ----A---- C:\Windows\system32\drivers\serial.sys.bak
2014-01-01 17:48:17 ----A---- C:\Windows\system32\drivers\serenum.sys.bak
2014-01-01 17:48:17 ----A---- C:\Windows\system32\drivers\secdrv.sys.bak
2014-01-01 17:48:16 ----A---- C:\Windows\system32\drivers\sdbus.sys.bak
2014-01-01 17:48:16 ----A---- C:\Windows\system32\drivers\scsiport.sys.bak
2014-01-01 17:48:15 ----A---- C:\Windows\system32\drivers\scfilter.sys.bak
2014-01-01 17:48:15 ----A---- C:\Windows\system32\drivers\sbp2port.sys.bak
2014-01-01 17:48:14 ----A---- C:\Windows\system32\drivers\RTL2832UUSB.sys.bak
2014-01-01 17:48:14 ----A---- C:\Windows\system32\drivers\RTL2832UBDA.sys.bak
2014-01-01 17:48:13 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys.bak
2014-01-01 17:48:13 ----A---- C:\Windows\system32\drivers\rspndr.sys.bak
2014-01-01 17:48:13 ----A---- C:\Windows\system32\drivers\rootmdm.sys.bak
2014-01-01 17:48:12 ----A---- C:\Windows\system32\drivers\rndismpx.sys.bak
2014-01-01 17:48:12 ----A---- C:\Windows\system32\drivers\rndismp6.sys.bak
2014-01-01 17:48:12 ----A---- C:\Windows\system32\drivers\RNDISMP.sys.bak
2014-01-01 17:48:12 ----A---- C:\Windows\system32\drivers\rmcast.sys.bak
2014-01-01 17:48:11 ----A---- C:\Windows\system32\drivers\rimvndis6_AMD64.sys.bak
2014-01-01 17:48:11 ----A---- C:\Windows\system32\drivers\RimUsb_AMD64.sys.bak
2014-01-01 17:48:11 ----A---- C:\Windows\system32\drivers\RimSerial_AMD64.sys.bak
2014-01-01 17:48:11 ----A---- C:\Windows\system32\drivers\rdyboost.sys.bak
2014-01-01 17:48:10 ----A---- C:\Windows\system32\drivers\rdpwd.sys.bak
2014-01-01 17:48:10 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys.bak
2014-01-01 17:48:10 ----A---- C:\Windows\system32\drivers\RDPREFMP.sys.bak
2014-01-01 17:48:10 ----A---- C:\Windows\system32\drivers\RDPENCDD.sys.bak
2014-01-01 17:48:10 ----A---- C:\Windows\system32\drivers\RDPCDD.sys.bak
2014-01-01 17:48:09 ----A---- C:\Windows\system32\drivers\rdpbus.sys.bak
2014-01-01 17:48:09 ----A---- C:\Windows\system32\drivers\rdbss.sys.bak
2014-01-01 17:48:09 ----A---- C:\Windows\system32\drivers\rassstp.sys.bak
2014-01-01 17:48:09 ----A---- C:\Windows\system32\drivers\raspptp.sys.bak
2014-01-01 17:48:08 ----A---- C:\Windows\system32\drivers\raspppoe.sys.bak
2014-01-01 17:48:08 ----A---- C:\Windows\system32\drivers\rasl2tp.sys.bak
2014-01-01 17:48:08 ----A---- C:\Windows\system32\drivers\rasacd.sys.bak
2014-01-01 17:48:08 ----A---- C:\Windows\system32\drivers\qwavedrv.sys.bak
2014-01-01 17:48:07 ----A---- C:\Windows\system32\drivers\qrkis.sys.bak
2014-01-01 17:48:07 ----A---- C:\Windows\system32\drivers\ql40xx.sys.bak
2014-01-01 17:48:07 ----A---- C:\Windows\system32\drivers\ql2300.sys.bak
2014-01-01 17:48:06 ----A---- C:\Windows\system32\drivers\PxHlpa64.sys.bak
2014-01-01 17:48:06 ----A---- C:\Windows\system32\drivers\processr.sys.bak
2014-01-01 17:48:06 ----A---- C:\Windows\system32\drivers\portcls.sys.bak
2014-01-01 17:48:05 ----A---- C:\Windows\system32\drivers\PEAuth.sys.bak
2014-01-01 17:48:05 ----A---- C:\Windows\system32\drivers\pcw.sys.bak
2014-01-01 17:48:04 ----A---- C:\Windows\system32\drivers\pcouffin.sys.bak
2014-01-01 17:48:04 ----A---- C:\Windows\system32\drivers\pcmcia.sys.bak
2014-01-01 17:48:04 ----A---- C:\Windows\system32\drivers\pciidex.sys.bak
2014-01-01 17:48:04 ----A---- C:\Windows\system32\drivers\pciide.sys.bak
2014-01-01 17:48:03 ----A---- C:\Windows\system32\drivers\pci.sys.bak
2014-01-01 17:48:03 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys.bak
2014-01-01 17:48:03 ----A---- C:\Windows\system32\drivers\partmgr.sys.bak
2014-01-01 17:48:03 ----A---- C:\Windows\system32\drivers\parport.sys.bak
2014-01-01 17:48:02 ----A---- C:\Windows\system32\drivers\pacer.sys.bak
2014-01-01 17:48:02 ----A---- C:\Windows\system32\drivers\ohci1394.sys.bak
2014-01-01 17:48:02 ----A---- C:\Windows\system32\drivers\nwifi.sys.bak
2014-01-01 17:48:02 ----A---- C:\Windows\system32\drivers\NV_AGP.SYS.bak
2014-01-01 17:48:01 ----A---- C:\Windows\system32\drivers\nvstor.sys.bak
2014-01-01 17:48:01 ----A---- C:\Windows\system32\drivers\nvraid.sys.bak
2014-01-01 17:47:59 ----A---- C:\Windows\system32\drivers\nvpciflt.sys.bak
2014-01-01 17:47:57 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys.bak
2014-01-01 17:47:57 ----A---- C:\Windows\system32\drivers\null.sys.bak
2014-01-01 17:47:56 ----A---- C:\Windows\system32\drivers\NTIDrvr.sys.bak
2014-01-01 17:47:56 ----A---- C:\Windows\system32\drivers\ntfs.sys.bak
2014-01-01 17:47:55 ----A---- C:\Windows\system32\drivers\nsiproxy.sys.bak
2014-01-01 17:47:55 ----A---- C:\Windows\system32\drivers\npfs.sys.bak
2014-01-01 17:47:55 ----A---- C:\Windows\system32\drivers\npf.sys.bak
2014-01-01 17:47:54 ----A---- C:\Windows\system32\drivers\nfrd960.sys.bak
2014-01-01 17:47:54 ----A---- C:\Windows\system32\drivers\netio.sys.bak
2014-01-01 17:47:54 ----A---- C:\Windows\system32\drivers\netbt.sys.bak
2014-01-01 17:47:54 ----A---- C:\Windows\system32\drivers\netbios.sys.bak
2014-01-01 17:47:53 ----A---- C:\Windows\system32\drivers\ndproxy.sys.bak
2014-01-01 17:47:53 ----A---- C:\Windows\system32\drivers\ndiswan.sys.bak
2014-01-01 17:47:52 ----A---- C:\Windows\system32\drivers\ndisuio.sys.bak
2014-01-01 17:47:52 ----A---- C:\Windows\system32\drivers\ndistapi.sys.bak
2014-01-01 17:47:52 ----A---- C:\Windows\system32\drivers\ndiscap.sys.bak
2014-01-01 17:47:51 ----A---- C:\Windows\system32\drivers\ndis.sys.bak
2014-01-01 17:47:51 ----A---- C:\Windows\system32\drivers\mup.sys.bak
2014-01-01 17:47:50 ----A---- C:\Windows\system32\drivers\MTConfig.sys.bak
2014-01-01 17:47:50 ----A---- C:\Windows\system32\drivers\mstee.sys.bak
2014-01-01 17:47:50 ----A---- C:\Windows\system32\drivers\mssmbios.sys.bak
2014-01-01 17:47:49 ----A---- C:\Windows\system32\drivers\msrpc.sys.bak
2014-01-01 17:47:49 ----A---- C:\Windows\system32\drivers\mspqm.sys.bak
2014-01-01 17:47:49 ----A---- C:\Windows\system32\drivers\mspclock.sys.bak
2014-01-01 17:47:48 ----A---- C:\Windows\system32\drivers\mskssrv.sys.bak
2014-01-01 17:47:48 ----A---- C:\Windows\system32\drivers\msiscsi.sys.bak
2014-01-01 17:47:48 ----A---- C:\Windows\system32\drivers\msisadrv.sys.bak
2014-01-01 17:47:47 ----A---- C:\Windows\system32\drivers\mshidkmdf.sys.bak
2014-01-01 17:47:47 ----A---- C:\Windows\system32\drivers\msfs.sys.bak
2014-01-01 17:47:47 ----A---- C:\Windows\system32\drivers\msdsm.sys.bak
2014-01-01 17:47:46 ----A---- C:\Windows\system32\drivers\msahci.sys.bak
2014-01-01 17:47:46 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys.bak
2014-01-01 17:47:46 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys.bak
2014-01-01 17:47:45 ----A---- C:\Windows\system32\drivers\mrxsmb.sys.bak
2014-01-01 17:47:45 ----A---- C:\Windows\system32\drivers\mrxdav.sys.bak
2014-01-01 17:47:44 ----A---- C:\Windows\system32\drivers\mpsdrv.sys.bak
2014-01-01 17:47:44 ----A---- C:\Windows\system32\drivers\mpio.sys.bak
2014-01-01 17:47:44 ----A---- C:\Windows\system32\drivers\mountmgr.sys.bak
2014-01-01 17:47:43 ----A---- C:\Windows\system32\drivers\mouhid.sys.bak
2014-01-01 17:47:43 ----A---- C:\Windows\system32\drivers\moufiltr.sys.bak
2014-01-01 17:47:43 ----A---- C:\Windows\system32\drivers\mouclass.sys.bak
2014-01-01 17:47:43 ----A---- C:\Windows\system32\drivers\monitor.sys.bak
2014-01-01 17:47:42 ----A---- C:\Windows\system32\drivers\modem.sys.bak
2014-01-01 17:47:42 ----A---- C:\Windows\system32\drivers\MegaSR.sys.bak
2014-01-01 17:47:41 ----A---- C:\Windows\system32\drivers\megasas.sys.bak
2014-01-01 17:47:41 ----A---- C:\Windows\system32\drivers\mcd.sys.bak
2014-01-01 17:47:41 ----A---- C:\Windows\system32\drivers\MarvinBus64.sys.bak
2014-01-01 17:47:40 ----A---- C:\Windows\system32\drivers\luafv.sys.bak
2014-01-01 17:47:40 ----A---- C:\Windows\system32\drivers\lsi_scsi.sys.bak
2014-01-01 17:47:40 ----A---- C:\Windows\system32\drivers\lsi_sas2.sys.bak
2014-01-01 17:47:39 ----A---- C:\Windows\system32\drivers\lsi_sas.sys.bak
2014-01-01 17:47:39 ----A---- C:\Windows\system32\drivers\lsi_fc.sys.bak
2014-01-01 17:47:39 ----A---- C:\Windows\system32\drivers\lltdio.sys.bak
2014-01-01 17:47:38 ----A---- C:\Windows\system32\drivers\lirsgt.sys.bak
2014-01-01 17:47:38 ----A---- C:\Windows\system32\drivers\ksthunk.sys.bak
2014-01-01 17:47:38 ----A---- C:\Windows\system32\drivers\ksecpkg.sys.bak
2014-01-01 17:47:37 ----A---- C:\Windows\system32\drivers\ksecdd.sys.bak
2014-01-01 17:47:37 ----A---- C:\Windows\system32\drivers\ks.sys.bak
2014-01-01 17:47:37 ----A---- C:\Windows\system32\drivers\kbdhid.sys.bak
2014-01-01 17:47:36 ----A---- C:\Windows\system32\drivers\kbdclass.sys.bak
2014-01-01 17:47:36 ----A---- C:\Windows\system32\drivers\k57nd60a.sys.bak
2014-01-01 17:47:35 ----A---- C:\Windows\system32\drivers\isapnp.sys.bak
2014-01-01 17:47:35 ----A---- C:\Windows\system32\drivers\irenum.sys.bak
2014-01-01 17:47:35 ----A---- C:\Windows\system32\drivers\irda.sys.bak
2014-01-01 17:47:34 ----A---- C:\Windows\system32\drivers\ipnat.sys.bak
2014-01-01 17:47:34 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys.bak
2014-01-01 17:47:34 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys.bak
2014-01-01 17:47:33 ----A---- C:\Windows\system32\drivers\intelppm.sys.bak
2014-01-01 17:47:33 ----A---- C:\Windows\system32\drivers\intelide.sys.bak
2014-01-01 17:47:33 ----A---- C:\Windows\system32\drivers\IntcDAud.sys.bak
2014-01-01 17:47:32 ----A---- C:\Windows\system32\drivers\iirsp.sys.bak
2014-01-01 17:47:28 ----A---- C:\Windows\system32\drivers\igdkmd64.sys.bak
2014-01-01 17:47:26 ----A---- C:\Windows\system32\drivers\iaStorV.sys.bak
2014-01-01 17:47:26 ----A---- C:\Windows\system32\drivers\iaStor.sys.bak
2014-01-01 17:47:25 ----A---- C:\Windows\system32\drivers\i8042prt.sys.bak
2014-01-01 17:47:25 ----A---- C:\Windows\system32\drivers\hwpolicy.sys.bak
2014-01-01 17:47:24 ----A---- C:\Windows\system32\drivers\http.sys.bak
2014-01-01 17:47:24 ----A---- C:\Windows\system32\drivers\HpSAMD.sys.bak
2014-01-01 17:47:24 ----A---- C:\Windows\system32\drivers\hidusb.sys.bak
2014-01-01 17:47:23 ----A---- C:\Windows\system32\drivers\hidparse.sys.bak
2014-01-01 17:47:23 ----A---- C:\Windows\system32\drivers\hidir.sys.bak
2014-01-01 17:47:22 ----A---- C:\Windows\system32\drivers\hidclass.sys.bak
2014-01-01 17:47:22 ----A---- C:\Windows\system32\drivers\hidbth.sys.bak
2014-01-01 17:47:22 ----A---- C:\Windows\system32\drivers\hidbatt.sys.bak
2014-01-01 17:47:21 ----A---- C:\Windows\system32\drivers\HECIx64.sys.bak
2014-01-01 17:47:21 ----A---- C:\Windows\system32\drivers\HdAudio.sys.bak
2014-01-01 17:47:21 ----A---- C:\Windows\system32\drivers\hdaudbus.sys.bak
2014-01-01 17:47:20 ----A---- C:\Windows\system32\drivers\hcw85cir.sys.bak
2014-01-01 17:47:20 ----A---- C:\Windows\system32\drivers\ggsemc.sys.bak
2014-01-01 17:47:20 ----A---- C:\Windows\system32\drivers\ggflt.sys.bak
2014-01-01 17:47:19 ----A---- C:\Windows\system32\drivers\GAGP30KX.SYS.bak
2014-01-01 17:47:19 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS.bak
2014-01-01 17:47:19 ----A---- C:\Windows\system32\drivers\fvevol.sys.bak
2014-01-01 17:47:18 ----A---- C:\Windows\system32\drivers\fsdepends.sys.bak
2014-01-01 17:47:18 ----A---- C:\Windows\system32\drivers\fs_rec.sys.bak
2014-01-01 17:47:18 ----A---- C:\Windows\system32\drivers\fltMgr.sys.bak
2014-01-01 17:47:17 ----A---- C:\Windows\system32\drivers\flpydisk.sys.bak
2014-01-01 17:47:17 ----A---- C:\Windows\system32\drivers\filetrace.sys.bak
2014-01-01 17:47:17 ----A---- C:\Windows\system32\drivers\fileinfo.sys.bak
2014-01-01 17:47:16 ----A---- C:\Windows\system32\drivers\fdc.sys.bak
2014-01-01 17:47:16 ----A---- C:\Windows\system32\drivers\fastfat.sys.bak
2014-01-01 17:47:15 ----A---- C:\Windows\system32\drivers\exfat.sys.bak
2014-01-01 17:47:14 ----A---- C:\Windows\system32\drivers\evbda.sys.bak
2014-01-01 17:47:12 ----A---- C:\Windows\system32\drivers\ETD.sys.bak
2014-01-01 17:47:12 ----A---- C:\Windows\system32\drivers\errdev.sys.bak
2014-01-01 17:47:12 ----A---- C:\Windows\system32\drivers\elxstor.sys.bak
2014-01-01 17:47:11 ----A---- C:\Windows\system32\drivers\dxgmms1.sys.bak
2014-01-01 17:47:11 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys.bak
2014-01-01 17:47:11 ----A---- C:\Windows\system32\drivers\dxg.sys.bak
2014-01-01 17:47:11 ----A---- C:\Windows\system32\drivers\dxapi.sys.bak
2014-01-01 17:47:10 ----A---- C:\Windows\system32\drivers\dumpfve.sys.bak
2014-01-01 17:47:10 ----A---- C:\Windows\system32\drivers\Dumpata.sys.bak
2014-01-01 17:47:09 ----A---- C:\Windows\system32\drivers\drmkaud.sys.bak
2014-01-01 17:47:09 ----A---- C:\Windows\system32\drivers\drmk.sys.bak
2014-01-01 17:47:09 ----A---- C:\Windows\system32\drivers\Diskdump.sys.bak
2014-01-01 17:47:09 ----A---- C:\Windows\system32\drivers\disk.sys.bak
2014-01-01 17:47:08 ----A---- C:\Windows\system32\drivers\discache.sys.bak
2014-01-01 17:47:08 ----A---- C:\Windows\system32\drivers\dfsc.sys.bak
2014-01-01 17:47:08 ----A---- C:\Windows\system32\drivers\crcdisk.sys.bak
2014-01-01 17:47:08 ----A---- C:\Windows\system32\drivers\crashdmp.sys.bak
2014-01-01 17:47:08 ----A---- C:\Windows\system32\drivers\CompositeBus.sys.bak
2014-01-01 17:47:08 ----A---- C:\Windows\system32\drivers\compbatt.sys.bak
2014-01-01 17:47:07 ----A---- C:\Windows\system32\drivers\cng.sys.bak
2014-01-01 17:47:07 ----A---- C:\Windows\system32\drivers\cmdide.sys.bak
2014-01-01 17:47:07 ----A---- C:\Windows\system32\drivers\CmBatt.sys.bak
2014-01-01 17:47:07 ----A---- C:\Windows\system32\drivers\Classpnp.sys.bak
2014-01-01 17:47:07 ----A---- C:\Windows\system32\drivers\circlass.sys.bak
2014-01-01 17:47:07 ----A---- C:\Windows\system32\drivers\cdrom.sys.bak
2014-01-01 17:47:06 ----A---- C:\Windows\system32\drivers\cdrbsdrv.sys.bak
2014-01-01 17:47:06 ----A---- C:\Windows\system32\drivers\cdralw2k.sys.bak
2014-01-01 17:47:06 ----A---- C:\Windows\system32\drivers\cdr4_xp.sys.bak
2014-01-01 17:47:06 ----A---- C:\Windows\system32\drivers\cdfs.sys.bak
2014-01-01 17:47:06 ----A---- C:\Windows\system32\drivers\bxvbda.sys.bak
2014-01-01 17:47:06 ----A---- C:\Windows\system32\drivers\bthmodem.sys.bak
2014-01-01 17:47:05 ----A---- C:\Windows\system32\drivers\bScsiSDa.sys.bak
2014-01-01 17:47:05 ----A---- C:\Windows\system32\drivers\bScsiMSa.sys.bak
2014-01-01 17:47:05 ----A---- C:\Windows\system32\drivers\BrUsbSer.sys.bak
2014-01-01 17:47:05 ----A---- C:\Windows\system32\drivers\BrUsbMdm.sys.bak
2014-01-01 17:47:05 ----A---- C:\Windows\system32\drivers\BrSerWdm.sys.bak
2014-01-01 17:47:05 ----A---- C:\Windows\system32\drivers\BrSerId.sys.bak
2014-01-01 17:47:05 ----A---- C:\Windows\system32\drivers\bridge.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\BrFiltUp.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\BrFiltLo.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\bowser.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\blbdrive.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\beep.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\BdaSup.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\battc.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\b57xdmp.sys.bak
2014-01-01 17:47:04 ----A---- C:\Windows\system32\drivers\b57xdbd.sys.bak
2014-01-01 17:47:03 ----A---- C:\Windows\system32\drivers\b57nd60a.sys.bak
2014-01-01 17:47:03 ----A---- C:\Windows\system32\drivers\atksgt.sys.bak
2014-01-01 17:47:02 ----A---- C:\Windows\system32\drivers\athrx.sys.bak
2014-01-01 17:47:02 ----A---- C:\Windows\system32\drivers\ataport.sys.bak
2014-01-01 17:47:02 ----A---- C:\Windows\system32\drivers\atapi.sys.bak
2014-01-01 17:47:02 ----A---- C:\Windows\system32\drivers\asyncmac.sys.bak
2014-01-01 17:47:02 ----A---- C:\Windows\system32\drivers\AsusVRC64.sys.bak
2014-01-01 17:47:01 ----A---- C:\Windows\system32\drivers\arcsas.sys.bak
2014-01-01 17:47:01 ----A---- C:\Windows\system32\drivers\arc.sys.bak
2014-01-01 17:47:01 ----A---- C:\Windows\system32\drivers\appid.sys.bak
2014-01-01 17:47:01 ----A---- C:\Windows\system32\drivers\amdxata.sys.bak
2014-01-01 17:47:01 ----A---- C:\Windows\system32\drivers\amdsbs.sys.bak
2014-01-01 17:47:01 ----A---- C:\Windows\system32\drivers\amdsata.sys.bak
2014-01-01 17:47:00 ----A---- C:\Windows\system32\drivers\amdppm.sys.bak
2014-01-01 17:47:00 ----A---- C:\Windows\system32\drivers\amdk8.sys.bak
2014-01-01 17:47:00 ----A---- C:\Windows\system32\drivers\amdide.sys.bak
2014-01-01 17:47:00 ----A---- C:\Windows\system32\drivers\aliide.sys.bak
2014-01-01 17:47:00 ----A---- C:\Windows\system32\drivers\AGP440.sys.bak
2014-01-01 17:47:00 ----A---- C:\Windows\system32\drivers\agilevpn.sys.bak
2014-01-01 17:46:59 ----A---- C:\Windows\system32\drivers\afd.sys.bak
2014-01-01 17:46:59 ----A---- C:\Windows\system32\drivers\adpu320.sys.bak
2014-01-01 17:46:59 ----A---- C:\Windows\system32\drivers\adpahci.sys.bak
2014-01-01 17:46:59 ----A---- C:\Windows\system32\drivers\adp94xx.sys.bak
2014-01-01 17:46:59 ----A---- C:\Windows\system32\drivers\acpipmi.sys.bak
2014-01-01 17:46:59 ----A---- C:\Windows\system32\drivers\acpi.sys.bak
2014-01-01 17:46:58 ----A---- C:\Windows\system32\drivers\1394ohci.sys.bak
2014-01-01 17:46:58 ----A---- C:\Windows\system32\drivers\1394bus.sys.bak
2014-01-01 13:13:11 ----D---- C:\AdwCleaner
2013-12-31 20:18:45 ----D---- C:\Users\Otas\AppData\Roaming\Malwarebytes
2013-12-31 20:18:39 ----D---- C:\ProgramData\Malwarebytes
2013-12-31 19:11:40 ----D---- C:\Program Files\trend micro
2013-12-31 19:11:39 ----D---- C:\rsit
2013-12-23 20:08:01 ----D---- C:\ProgramData\T-Mobile
2013-12-22 19:04:22 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 months======

2014-01-01 18:37:15 ----D---- C:\Windows\Temp
2014-01-01 18:36:25 ----D---- C:\Users\Otas\AppData\Roaming\Skype
2014-01-01 18:04:54 ----D---- C:\Windows\system32\drivers
2014-01-01 17:51:10 ----D---- C:\Windows\system32\config
2014-01-01 17:43:08 ----A---- C:\Windows\SYSWOW64\log.txt
2014-01-01 17:42:23 ----D---- C:\Users\Otas\AppData\Roaming\Dropbox
2014-01-01 17:40:58 ----A---- C:\Windows\win.ini
2014-01-01 17:18:56 ----RD---- C:\Program Files (x86)
2014-01-01 17:18:53 ----D---- C:\Windows\Prefetch
2014-01-01 13:43:49 ----HD---- C:\ProgramData
2013-12-31 19:11:40 ----RD---- C:\Program Files
2013-12-31 16:31:17 ----D---- C:\Windows\inf
2013-12-30 21:36:58 ----D---- C:\Users\Otas\AppData\Roaming\SoftGrid Client
2013-12-30 13:13:53 ----D---- C:\Program Files (x86)\The KMPlayer
2013-12-28 21:04:45 ----SHD---- C:\System Volume Information
2013-12-25 15:49:14 ----D---- C:\Windows\System32
2013-12-25 15:49:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-12-23 23:23:25 ----D---- C:\Windows\system32\catroot2
2013-12-23 18:13:12 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-14 19:22:19 ----SHD---- C:\Windows\Installer
2013-12-14 19:22:18 ----SHD---- C:\Config.Msi
2013-12-11 18:59:29 ----D---- C:\Windows\SysWOW64
2013-12-11 18:59:27 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-12-06 22:16:17 ----D---- C:\Users\Otas\AppData\Roaming\vlc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-22 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-10-22 205320]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-09-14 437272]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-10-08 30056]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-09-17 834544]
R1 aswKbd;aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [2013-10-22 28184]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-22 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-10-22 1032416]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-11-09 409832]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-10-22 65264]
R1 cdrbsdrv;cdrbsdrv; C:\Windows\system32\drivers\cdrbsdrv.sys [2006-08-25 39208]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-10-22 38984]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-10-22 84328]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-01-18 88480]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-01-18 46400]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2011-03-14 11576]
R3 Afc;PPdus ASPI Shell; C:\Windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 ASUSVRC64;ASUSTeK Virtual Capture Device; C:\Windows\system32\DRIVERS\AsusVRC64.sys [2008-10-13 23424]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-09 2377216]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\DRIVERS\b57xdbd.sys [2011-01-21 67624]
R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\DRIVERS\b57xdmp.sys [2011-01-21 19496]
R3 bScsiMSa;bScsiMSa; C:\Windows\system32\DRIVERS\bScsiMSa.sys [2011-05-16 51240]
R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-11-12 138024]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-15 12228128]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-15 2814952]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-01-17 412712]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 moufiltr;Tablet Mouse Filter Driver; C:\Windows\system32\DRIVERS\moufiltr.sys [2009-03-08 7680]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-09-18 82816]
R3 rimvndis;BlackBerry Virtual Private Network; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [2013-04-26 17920]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [2012-12-10 44544]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 11264]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 721768]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 269672]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 22376]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
R3 vhidmini;Generic Virtual HID Driver; C:\Windows\system32\DRIVERS\walvhid.sys [2009-08-26 7552]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 ASPI32;ASPI32; C:\Windows\system32\drivers\ASPI32.sys []
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2012-09-09 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2012-09-09 27760]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 qrkis;Tether Miniport; C:\Windows\system32\DRIVERS\qrkis.sys [2009-07-31 50856]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2013-06-27 79872]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver; C:\Windows\system32\drivers\RTL2832UBDA.sys [2011-07-01 225128]
S3 RTL2832UUSB;REALTEK 2832U USB Driver; C:\Windows\System32\Drivers\RTL2832UUSB.sys [2011-05-17 39016]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 usbrndis6;Adaptér USB RNDIS6; C:\Windows\system32\DRIVERS\usb80236.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-10-22 50344]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\Windows\SysWOW64\bgsvcgen.exe [2007-06-15 145504]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-03-14 352336]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2011-05-10 872552]
R2 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2011-05-26 29696]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-14 13336]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-22 325656]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [2012-01-05 256536]
R2 NVSvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-10-26 76888]
R2 RIM MDNS;RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [2013-11-05 389632]
R2 RIM Tunnel Service;BlackBerry Link Communication Manager; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [2013-11-05 1286656]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]
R3 BlackBerry Device Manager;BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [2013-09-09 585728]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-07 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-08 1258856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 DraftSight API Service;DraftSight API Service; C:\Program Files (x86)\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [2012-01-24 78336]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-01-09 1030600]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-07 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-22 119408]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-11-19 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#18 Příspěvek od **Márty84** » 02 led 2014 09:52

Jeste jeden sken a budem mazat.

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Ot@s · #19 Příspěvek od **Ot@s** » 02 led 2014 19:22

Tu jsou ty logy

OTL logfile created on: 1/2/2014 6:18:51 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Otas\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.86 Gb Total Physical Memory | 1.87 Gb Available Physical Memory | 48.42% Memory free
7.71 Gb Paging File | 5.55 Gb Available in Paging File | 71.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 100.01 Gb Total Space | 25.96 Gb Free Space | 25.95% Space Free | Partition Type: NTFS
Drive E: | 345.65 Gb Total Space | 25.44 Gb Free Space | 7.36% Space Free | Partition Type: NTFS

Computer Name: KRAM | User Name: Otas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/01/02 18:14:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Otas\Desktop\OTL.exe
PRC - [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013/11/05 11:30:44 | 004,424,704 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe
PRC - [2013/11/05 11:12:12 | 000,389,632 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
PRC - [2013/11/05 11:12:06 | 001,286,656 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
PRC - [2013/10/26 18:01:19 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013/10/26 17:13:06 | 003,567,800 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2013/10/22 19:46:55 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/10/22 19:30:28 | 000,661,008 | ---- | M] () -- C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
PRC - [2013/10/09 09:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2013/10/03 15:30:28 | 001,103,200 | ---- | M] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) -- C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
PRC - [2013/09/09 11:51:56 | 000,585,728 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
PRC - [2013/09/09 11:43:50 | 000,443,408 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
PRC - [2013/07/08 09:42:48 | 001,922,600 | ---- | M] (Pandora.TV) -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
PRC - [2013/07/08 09:42:38 | 001,798,696 | ---- | M] (PandoraTV) -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
PRC - [2013/06/05 18:28:40 | 027,370,808 | ---- | M] (Dropbox, Inc.) -- C:\Users\Otas\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2013/05/23 12:53:18 | 000,455,608 | ---- | M] (TomTom) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
PRC - [2013/05/10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/01/05 14:22:10 | 000,256,536 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
PRC - [2012/01/05 14:22:02 | 000,295,448 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
PRC - [2011/07/06 12:24:37 | 000,688,128 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
PRC - [2011/06/16 03:20:16 | 000,094,208 | R--- | M] () -- C:\Program Files (x86)\ASUSTek Computer Inc\ASUS U3100MINI PLUS V2 Utilities\RTLRCtl.exe
PRC - [2011/05/26 07:40:48 | 000,029,696 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
PRC - [2011/04/22 17:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
PRC - [2011/03/14 12:44:38 | 000,414,800 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe
PRC - [2011/03/14 12:44:38 | 000,334,416 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
PRC - [2011/03/14 12:44:36 | 001,081,424 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2011/03/14 12:44:36 | 000,352,336 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
PRC - [2010/12/22 21:25:02 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010/12/22 21:24:58 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010/10/27 18:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010/09/30 02:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2010/09/14 02:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010/09/14 02:32:30 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2010/08/25 10:27:44 | 000,309,824 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010/05/18 07:46:01 | 001,989,120 | ---- | M] () -- C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
PRC - [2010/03/18 10:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2009/12/26 20:02:22 | 000,349,600 | ---- | M] (Panasonic Corporation) -- C:\Program Files (x86)\Common Files\Panasonic\VideoCam Suite AutoStart\VideoCamSuiteAutoStart.exe
PRC - [2009/12/02 22:23:38 | 000,209,768 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2009/12/02 22:23:32 | 000,483,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2009/01/12 17:01:46 | 000,258,048 | ---- | M] (ArcSoft, Inc.) -- C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
PRC - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\Windows\SysWOW64\bgsvcgen.exe

========== Modules (No Company Name) ==========

MOD - [2013/12/04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll
MOD - [2013/12/04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
MOD - [2013/12/04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
MOD - [2013/12/04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
MOD - [2013/12/04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
MOD - [2013/10/22 19:47:00 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013/10/22 19:30:28 | 000,661,008 | ---- | M] () -- C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe
MOD - [2013/09/26 12:50:14 | 000,433,664 | ---- | M] () -- C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
MOD - [2013/09/26 12:49:28 | 000,315,392 | ---- | M] () -- C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
MOD - [2013/08/26 22:23:57 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\ebdb3050959d9be47d33d2c77d6cc291\IAStorUtil.ni.dll
MOD - [2013/08/26 22:23:57 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\34002b75cd0faab68bf8079299c1aa46\IAStorCommon.ni.dll
MOD - [2013/08/23 17:23:57 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\dd8f4efb7e81c75fe444a180f6f1aacf\System.Runtime.Remoting.ni.dll
MOD - [2013/08/23 17:23:28 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll
MOD - [2013/08/23 17:23:20 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
MOD - [2013/08/23 17:23:04 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1f6f220f9efe936d1158c79b9d4b451f\WindowsBase.ni.dll
MOD - [2013/08/23 17:22:58 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
MOD - [2013/08/23 17:22:54 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8f7d83126a3cf283e5ac97f2d6d99f12\System.Configuration.ni.dll
MOD - [2013/08/23 17:22:53 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
MOD - [2013/08/23 17:22:46 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
MOD - [2013/05/23 12:53:28 | 000,026,040 | ---- | M] () -- C:\Program Files (x86)\MyTomTom 3\DeviceDetection.dll
MOD - [2013/05/23 12:53:22 | 000,279,480 | ---- | M] () -- C:\Program Files (x86)\MyTomTom 3\TomTomSupporterProxy.dll
MOD - [2013/05/23 12:53:20 | 000,074,680 | ---- | M] () -- C:\Program Files (x86)\MyTomTom 3\TomTomSupporterBase.dll
MOD - [2013/03/13 21:48:52 | 024,978,944 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2012/11/14 00:32:50 | 003,558,400 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2012/01/05 14:22:36 | 000,465,344 | ---- | M] () -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\sqlite3.dll
MOD - [2011/07/12 01:37:35 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_cs_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2011/07/06 12:24:37 | 000,688,128 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
MOD - [2011/06/16 03:20:16 | 000,094,208 | R--- | M] () -- C:\Program Files (x86)\ASUSTek Computer Inc\ASUS U3100MINI PLUS V2 Utilities\RTLRCtl.exe
MOD - [2010/11/13 03:00:59 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010/05/18 07:46:01 | 001,989,120 | ---- | M] () -- C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
MOD - [2009/11/19 13:10:25 | 001,384,520 | ---- | M] () -- C:\Windows\twain_32\Samsung\SCX3200\SSOle.dll
MOD - [2009/07/14 02:15:45 | 000,364,544 | ---- | M] () -- C:\Windows\SysWOW64\msjetoledb40.dll
MOD - [2007/04/19 08:33:00 | 000,035,584 | ---- | M] () -- C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\uPiApi.dll

========== Services (SafeList) ==========

SRV:64bit: - [2013/10/22 19:46:55 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013/05/27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012/01/09 21:21:47 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2011/05/10 22:01:08 | 000,872,552 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe -- (ePowerSvc)
SRV:64bit: - [2011/04/27 16:23:24 | 000,916,992 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\atwtusb.exe -- (WTService)
SRV:64bit: - [2011/04/22 17:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe -- (Live Updater Service)
SRV:64bit: - [2010/09/23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2013/12/22 19:04:29 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/12/11 18:59:28 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/11/05 11:12:12 | 000,389,632 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe -- (RIM MDNS)
SRV - [2013/11/05 11:12:06 | 001,286,656 | ---- | M] (Research In Motion Limited) [Auto | Running] -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe -- (RIM Tunnel Service)
SRV - [2013/10/26 18:01:19 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013/10/23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/10/09 09:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2013/09/09 11:51:56 | 000,585,728 | ---- | M] (Research In Motion Limited) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe -- (BlackBerry Device Manager)
SRV - [2013/07/08 09:42:48 | 001,922,600 | ---- | M] (Pandora.TV) [Auto | Running] -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe -- (PanService)
SRV - [2013/05/10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/02/04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2012/10/08 10:42:54 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/01/24 11:25:20 | 000,078,336 | ---- | M] (Dassault Systèmes) [On_Demand | Stopped] -- C:\Program Files (x86)\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe -- (DraftSight API Service)
SRV - [2012/01/05 14:22:10 | 000,256,536 | ---- | M] (NTI Corporation) [Auto | Running] -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2012/01/04 12:32:36 | 000,718,888 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011/05/26 07:40:48 | 000,029,696 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe -- (GREGService)
SRV - [2011/03/14 12:44:36 | 000,352,336 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2010/12/22 21:25:02 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010/12/22 21:24:58 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010/10/12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/09/30 02:06:46 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/09/14 02:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/18 10:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2009/12/02 22:23:38 | 000,209,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2009/12/02 22:23:32 | 000,483,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\Windows\SysWOW64\bgsvcgen.exe -- (bgsvcgen)

Ot@s · #20 Příspěvek od **Ot@s** » 02 led 2014 19:23

========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/11/09 19:40:19 | 000,409,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
DRV:64bit: - [2013/10/22 19:47:03 | 001,032,416 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013/10/22 19:47:03 | 000,205,320 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013/10/22 19:47:03 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013/10/22 19:47:03 | 000,065,264 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013/10/22 19:47:02 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013/10/22 19:47:02 | 000,084,328 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013/10/22 19:47:02 | 000,038,984 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013/10/22 19:46:50 | 000,028,184 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd)
DRV:64bit: - [2013/06/27 10:35:46 | 000,079,872 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV:64bit: - [2013/04/26 06:23:00 | 000,017,920 | ---- | M] (Research in Motion Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rimvndis6_AMD64.sys -- (rimvndis)
DRV:64bit: - [2013/02/12 05:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2013/02/12 05:12:05 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb80236.sys -- (usbrndis6)
DRV:64bit: - [2012/12/10 14:48:02 | 000,044,544 | ---- | M] (Research in Motion Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort)
DRV:64bit: - [2012/10/08 10:42:36 | 000,030,056 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2012/09/09 17:04:54 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:64bit: - [2012/09/09 17:04:54 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:64bit: - [2012/08/23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012/08/23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/03/01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/01/18 17:36:21 | 000,088,480 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2012/01/18 17:36:19 | 000,046,400 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2011/09/18 08:24:53 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2011/09/17 19:44:40 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011/07/01 07:48:58 | 000,225,128 | ---- | M] (REALTEK SEMICONDUCTOR Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RTL2832UBDA.sys -- (RTL2832UBDA)
DRV:64bit: - [2011/05/17 07:48:22 | 000,039,016 | ---- | M] (REALTEK SEMICONDUCTOR Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RTL2832UUSB.sys -- (RTL2832UUSB)
DRV:64bit: - [2011/05/16 22:57:32 | 000,051,240 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bScsiMSa.sys -- (bScsiMSa)
DRV:64bit: - [2011/05/06 18:11:12 | 000,086,056 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bScsiSDa.sys -- (bScsiSDa)
DRV:64bit: - [2011/04/15 19:08:28 | 012,228,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/14 07:36:08 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.sys -- (SSPORT)
DRV:64bit: - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/01/21 02:15:30 | 000,019,496 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdmp.sys -- (b57xdmp)
DRV:64bit: - [2011/01/21 02:15:28 | 000,067,624 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdbd.sys -- (b57xdbd)
DRV:64bit: - [2011/01/17 23:56:14 | 000,412,712 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
DRV:64bit: - [2010/11/21 04:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/12 07:23:40 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2010/11/09 11:26:46 | 002,377,216 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010/10/20 01:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010/10/15 09:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2010/09/14 02:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/03/19 02:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/01/27 03:09:02 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (npf)
DRV:64bit: - [2009/12/02 22:23:38 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2009/12/02 22:23:34 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2009/12/02 22:23:32 | 000,269,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2009/12/02 22:23:26 | 000,721,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2009/08/26 14:15:10 | 000,007,552 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\walvhid.sys -- (vhidmini)
DRV:64bit: - [2009/07/31 13:40:06 | 000,050,856 | ---- | M] (Tether) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qrkis.sys -- (qrkis)
DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/14 01:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/06 00:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2009/05/06 00:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2009/03/08 20:16:14 | 000,007,680 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\moufiltr.sys -- (moufiltr)
DRV:64bit: - [2008/10/13 13:25:16 | 000,023,424 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsusVRC64.sys -- (ASUSVRC64)
DRV:64bit: - [2008/08/28 10:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2006/08/25 13:36:52 | 000,039,208 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cdrbsdrv.sys -- (cdrbsdrv)
DRV:64bit: - [2005/09/23 21:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
DRV - [2009/10/28 06:09:33 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\SSPORT.SYS -- (SSPORT)
DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2002/07/17 07:53:02 | 000,016,877 | ---- | M] (Adaptec) [Kernel | System | Stopped] -- C:\Windows\SysWow64\drivers\Aspi32.sys -- (ASPI32)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.chatzum.com/?q={searchTerms}
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..\SearchScopes\{890C15F3-0F34-4D29-82D6-0F6566D50494}: "URL" = http://websearch.ask.com/redirect?clien ... 78925AAA75
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Otas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/10/22 19:47:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/12/22 19:04:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

[2012/01/07 15:10:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Otas\AppData\Roaming\Mozilla\Extensions
[2013/12/22 19:04:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/12/22 19:04:23 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/12/22 19:04:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/12/22 19:04:22 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/12/22 19:04:29 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/02/10 19:03:07 | 000,001,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\mall-cz.xml

========== Chrome ==========

CHR - default_search_provider: Seznam (Enabled)
CHR - default_search_provider: search_url = http://search.seznam.cz/?q={searchTerms}
CHR - default_search_provider: suggest_url = http:///suggest.fulltext.seznam.cz/?dict=fulltext_ff&phrase={searchTerms}&encoding={inputEncoding}&response_encoding=utf-8,
CHR - homepage: http://www.seznam.cz/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U25 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - plugin: BlackBerry AppWorld (Enabled) = C:\Program Files (x86)\Research In Motion Limited\BlackBerry App World Browser Plugin\npappworld.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Otas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.16 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: Dokumenty Google = C:\Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Battlefield Heroes = C:\Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh\5.0.203.0_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Pen\u011B\u017Eenka Google = C:\Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Gmail = C:\Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2014/01/01 18:07:05 | 000,000,741 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Evernote extension) - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe ()
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [MacrokeyManager] C:\Windows\SysNative\WTMKM.exe ()
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Power Management] C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [3200 Scan2PC] C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe ()
O4 - HKLM..\Run: [4StoryPrePatch] E:\Hry\STALKER - Call Of Pripyat\4\4Story_CZ\PrePatch.exe (Zemi Interactive Inc.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe (NTI Corporation)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [RIM PeerManager] C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe (Research In Motion Limited)
O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001..\Run: [MyTomTomSA.exe] C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe (TomTom)
O4 - Startup: C:\Users\Otas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Otas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Otas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8:64bit: - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
O8:64bit: - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
O8:64bit: - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8:64bit: - Extra context menu item: Nová poznámka - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
O8 - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8 - Extra context menu item: Nová poznámka - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O1364bit: - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKLM\..Trusted Domains: mojebanka.cz ([etrading] https in Trusted sites)
O15 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..Trusted Domains: mojebanka.cz ([*] https in Důvěryhodné servery)
O15 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..Trusted Domains: mojebanka.cz ([etrading] https in Důvěryhodné servery)
O15 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..Trusted Domains: mojebanka.cz ([www] https in Důvěryhodné servery)
O16:64bit: - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} http://www.battlefieldheroes.com/static ... .203.0.cab (Battlefield Heroes Updater)
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.25.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.240.239.1 89.203.152.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BE7C7AAF-315F-4366-BF12-71197C33332E}: DhcpNameServer = 10.240.239.1 89.203.152.3
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{1e77d657-c90d-11e2-92f0-b870f4a77181}\Shell - "" = AutoRun
O33 - MountPoints2\{1e77d657-c90d-11e2-92f0-b870f4a77181}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\start.exe
O33 - MountPoints2\{61f59cfe-f3b6-11e2-9b53-021068550701}\Shell - "" = AutoRun
O33 - MountPoints2\{61f59cfe-f3b6-11e2-9b53-021068550701}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\{63321d48-3023-11e3-94b2-029025520701}\Shell - "" = AutoRun
O33 - MountPoints2\{63321d48-3023-11e3-94b2-029025520701}\Shell\AutoRun\command - "" = G:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.asv2 - asusasv2.dll File not found
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FMVC - C:\Windows\SysWow64\fmcodec.DLL (Fox Magic Software)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014/01/02 18:14:28 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Otas\Desktop\OTL.exe
[2014/01/01 17:48:39 | 000,016,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wmilib.sys.bak
[2014/01/01 17:48:38 | 000,054,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys.bak
[2014/01/01 17:48:37 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\watchdog.sys.bak
[2014/01/01 17:48:37 | 000,007,552 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\walvhid.sys.bak
[2014/01/01 17:48:34 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\videoprt.sys.bak
[2014/01/01 17:48:32 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbrpm.sys.bak
[2014/01/01 17:48:31 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys.bak
[2014/01/01 17:48:30 | 000,007,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys.bak
[2014/01/01 17:48:29 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBCAMD2.sys.bak
[2014/01/01 17:48:29 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023x.sys.bak
[2014/01/01 17:48:29 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb80236.sys.bak
[2014/01/01 17:48:29 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys.bak
[2014/01/01 17:48:27 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys.bak
[2014/01/01 17:48:27 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbGD.sys.bak
[2014/01/01 17:48:27 | 000,016,896 | ---- | C] (NewTech Infosystems Corporation) -- C:\Windows\SysNative\drivers\UBHelper.sys.bak
[2014/01/01 17:48:25 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys.bak
[2014/01/01 17:48:24 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tape.sys.bak
[2014/01/01 17:48:23 | 000,189,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys.bak
[2014/01/01 17:48:23 | 000,068,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\stream.sys.bak
[2014/01/01 17:48:23 | 000,024,656 | ---- | C] (Promise Technology) -- C:\Windows\SysNative\drivers\stexstor.sys.bak
[2014/01/01 17:48:23 | 000,011,576 | ---- | C] (Samsung Electronics) -- C:\Windows\SysNative\drivers\SSPORT.sys.bak
[2014/01/01 17:48:21 | 000,834,544 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys.bak
[2014/01/01 17:48:21 | 000,426,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spsys.sys.bak
[2014/01/01 17:48:20 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\smclib.sys.bak
[2014/01/01 17:48:19 | 000,269,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftplaylh.sys.bak
[2014/01/01 17:48:19 | 000,025,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftredirlh.sys.bak
[2014/01/01 17:48:19 | 000,022,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftvollh.sys.bak
[2014/01/01 17:48:18 | 000,721,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftfslh.sys.bak
[2014/01/01 17:48:16 | 000,171,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scsiport.sys.bak
[2014/01/01 17:48:16 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys.bak
[2014/01/01 17:48:14 | 000,225,128 | ---- | C] (REALTEK SEMICONDUCTOR Corp.) -- C:\Windows\SysNative\drivers\RTL2832UBDA.sys.bak
[2014/01/01 17:48:14 | 000,039,016 | ---- | C] (REALTEK SEMICONDUCTOR Corp.) -- C:\Windows\SysNative\drivers\RTL2832UUSB.sys.bak
[2014/01/01 17:48:13 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rootmdm.sys.bak
[2014/01/01 17:48:12 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys.bak
[2014/01/01 17:48:12 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rndismpx.sys.bak
[2014/01/01 17:48:12 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys.bak
[2014/01/01 17:48:12 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rndismp6.sys.bak
[2014/01/01 17:48:11 | 000,079,872 | ---- | C] (Research In Motion Limited) -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys.bak
[2014/01/01 17:48:11 | 000,044,544 | ---- | C] (Research in Motion Ltd) -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys.bak
[2014/01/01 17:48:11 | 000,017,920 | ---- | C] (Research in Motion Limited) -- C:\Windows\SysNative\drivers\rimvndis6_AMD64.sys.bak
[2014/01/01 17:48:10 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys.bak
[2014/01/01 17:48:07 | 000,050,856 | ---- | C] (Tether) -- C:\Windows\SysNative\drivers\qrkis.sys.bak
[2014/01/01 17:48:06 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys.bak
[2014/01/01 17:48:06 | 000,055,856 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\PxHlpa64.sys.bak
[2014/01/01 17:48:04 | 000,082,816 | ---- | C] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys.bak
[2014/01/01 17:48:04 | 000,048,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pciidex.sys.bak
[2014/01/01 17:48:03 | 000,025,600 | ---- | C] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys.bak
[2014/01/01 17:47:59 | 000,030,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys.bak
[2014/01/01 17:47:56 | 000,018,432 | ---- | C] (NewTech Infosystems, Inc.) -- C:\Windows\SysNative\drivers\NTIDrvr.sys.bak
[2014/01/01 17:47:55 | 000,047,632 | ---- | C] (CACE Technologies, Inc.) -- C:\Windows\SysNative\drivers\npf.sys.bak
[2014/01/01 17:47:54 | 000,376,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys.bak
[2014/01/01 17:47:43 | 000,007,680 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\drivers\moufiltr.sys.bak
[2014/01/01 17:47:41 | 000,261,120 | ---- | C] (Pinnacle Systems GmbH) -- C:\Windows\SysNative\drivers\MarvinBus64.sys.bak
[2014/01/01 17:47:41 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\mcd.sys.bak
[2014/01/01 17:47:40 | 000,065,600 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys.bak
[2014/01/01 17:47:36 | 000,412,712 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\k57nd60a.sys.bak
[2014/01/01 17:47:35 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\irda.sys.bak
[2014/01/01 17:47:33 | 000,317,440 | ---- | C] (Intel(R) Corporation) -- C:\Windows\SysNative\drivers\IntcDAud.sys.bak
[2014/01/01 17:47:28 | 012,228,128 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\igdkmd64.sys.bak
[2014/01/01 17:47:26 | 000,437,272 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iaStor.sys.bak
[2014/01/01 17:47:24 | 000,078,720 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys.bak
[2014/01/01 17:47:23 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys.bak
[2014/01/01 17:47:22 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys.bak
[2014/01/01 17:47:21 | 000,056,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys.bak
[2014/01/01 17:47:20 | 000,031,232 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys.bak
[2014/01/01 17:47:20 | 000,027,760 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggsemc.sys.bak
[2014/01/01 17:47:20 | 000,014,448 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggflt.sys.bak
[2014/01/01 17:47:19 | 000,288,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS.bak
[2014/01/01 17:47:18 | 000,023,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys.bak
[2014/01/01 17:47:14 | 003,286,016 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\evbda.sys.bak
[2014/01/01 17:47:12 | 000,138,024 | ---- | C] (ELAN Microelectronics Corp.) -- C:\Windows\SysNative\drivers\ETD.sys.bak
[2014/01/01 17:47:11 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys.bak
[2014/01/01 17:47:11 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxg.sys.bak
[2014/01/01 17:47:11 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxapi.sys.bak
[2014/01/01 17:47:10 | 000,055,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpfve.sys.bak
[2014/01/01 17:47:10 | 000,028,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Dumpata.sys.bak
[2014/01/01 17:47:09 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys.bak
[2014/01/01 17:47:09 | 000,027,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys.bak
[2014/01/01 17:47:08 | 000,039,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\crashdmp.sys.bak
[2014/01/01 17:47:07 | 000,179,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys.bak
[2014/01/01 17:47:06 | 000,468,480 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bxvbda.sys.bak
[2014/01/01 17:47:06 | 000,039,208 | ---- | C] (B.H.A Corporation) -- C:\Windows\SysNative\drivers\cdrbsdrv.sys.bak
[2014/01/01 17:47:06 | 000,010,224 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdralw2k.sys.bak
[2014/01/01 17:47:06 | 000,010,224 | ---- | C] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdr4_xp.sys.bak
[2014/01/01 17:47:05 | 000,086,056 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bScsiSDa.sys.bak
[2014/01/01 17:47:05 | 000,051,240 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bScsiMSa.sys.bak
[2014/01/01 17:47:04 | 000,067,624 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57xdbd.sys.bak
[2014/01/01 17:47:04 | 000,028,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\battc.sys.bak
[2014/01/01 17:47:04 | 000,019,496 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57xdmp.sys.bak
[2014/01/01 17:47:04 | 000,016,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BdaSup.sys.bak
[2014/01/01 17:47:03 | 000,270,848 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57nd60a.sys.bak
[2014/01/01 17:47:02 | 002,377,216 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys.bak
[2014/01/01 17:47:02 | 000,155,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys.bak
[2014/01/01 17:47:02 | 000,023,424 | ---- | C] (ASUSTeK COMPUTER INC.) -- C:\Windows\SysNative\drivers\AsusVRC64.sys.bak
[2014/01/01 17:47:01 | 000,194,128 | ---- | C] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys.bak
[2014/01/01 17:47:01 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys.bak
[2014/01/01 17:47:01 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys.bak
[2014/01/01 17:46:58 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\1394bus.sys.bak
[2014/01/01 13:13:11 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/12/31 20:18:45 | 000,000,000 | ---D | C] -- C:\Users\Otas\AppData\Roaming\Malwarebytes
[2013/12/31 20:18:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/12/31 19:11:40 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013/12/31 19:11:39 | 000,000,000 | ---D | C] -- C:\rsit
[2013/12/31 16:32:18 | 000,000,000 | ---D | C] -- C:\Users\Otas\Documents\BLACKBERRYERIK
[2013/12/25 20:14:37 | 000,000,000 | ---D | C] -- C:\Users\Otas\Desktop\M1
[2013/12/23 20:08:01 | 000,000,000 | ---D | C] -- C:\ProgramData\T-Mobile
[2013/12/22 19:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013/12/11 17:23:55 | 000,000,000 | ---D | C] -- C:\Users\Otas\Desktop\Fotky pro HF
[2011/09/18 08:24:53 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Otas\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 30 Days ==========

[2014/01/02 18:23:03 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/02 18:22:39 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014/01/02 18:17:55 | 000,016,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/01/02 18:17:55 | 000,016,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/01/02 18:14:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Otas\Desktop\OTL.exe
[2014/01/02 18:10:31 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/01/02 18:10:10 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/01/02 18:10:04 | 3104,722,944 | -HS- | M] () -- C:\hiberfil.sys
[2014/01/01 20:20:25 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/01/01 18:04:54 | 000,016,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wmilib.sys.bak
[2014/01/01 18:04:53 | 000,054,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys.bak
[2014/01/01 18:04:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\watchdog.sys.bak
[2014/01/01 18:04:52 | 000,007,552 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\walvhid.sys.bak
[2014/01/01 18:04:51 | 000,129,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\videoprt.sys.bak
[2014/01/01 18:04:50 | 000,325,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys.bak
[2014/01/01 18:04:50 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbrpm.sys.bak
[2014/01/01 18:04:49 | 000,032,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBCAMD2.sys.bak
[2014/01/01 18:04:49 | 000,007,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys.bak
[2014/01/01 18:04:48 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023x.sys.bak
[2014/01/01 18:04:48 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb80236.sys.bak
[2014/01/01 18:04:48 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys.bak
[2014/01/01 18:04:48 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) -- C:\Windows\SysNative\drivers\UBHelper.sys.bak
[2014/01/01 18:04:47 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys.bak
[2014/01/01 18:04:47 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbGD.sys.bak
[2014/01/01 18:04:46 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tape.sys.bak
[2014/01/01 18:04:46 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys.bak
[2014/01/01 18:04:45 | 000,189,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys.bak
[2014/01/01 18:04:45 | 000,068,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\stream.sys.bak
[2014/01/01 18:04:45 | 000,024,656 | ---- | M] (Promise Technology) -- C:\Windows\SysNative\drivers\stexstor.sys.bak
[2014/01/01 18:04:45 | 000,011,576 | ---- | M] (Samsung Electronics) -- C:\Windows\SysNative\drivers\SSPORT.sys.bak
[2014/01/01 18:04:44 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys.bak
[2014/01/01 18:04:44 | 000,426,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spsys.sys.bak
[2014/01/01 18:04:44 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\smclib.sys.bak
[2014/01/01 18:04:43 | 000,721,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftfslh.sys.bak
[2014/01/01 18:04:43 | 000,269,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftplaylh.sys.bak
[2014/01/01 18:04:43 | 000,025,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftredirlh.sys.bak
[2014/01/01 18:04:43 | 000,022,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftvollh.sys.bak
[2014/01/01 18:04:42 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys.bak
[2014/01/01 18:04:41 | 000,225,128 | ---- | M] (REALTEK SEMICONDUCTOR Corp.) -- C:\Windows\SysNative\drivers\RTL2832UBDA.sys.bak
[2014/01/01 18:04:41 | 000,171,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scsiport.sys.bak
[2014/01/01 18:04:41 | 000,039,016 | ---- | M] (REALTEK SEMICONDUCTOR Corp.) -- C:\Windows\SysNative\drivers\RTL2832UUSB.sys.bak
[2014/01/01 18:04:39 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys.bak
[2014/01/01 18:04:39 | 000,079,872 | ---- | M] (Research In Motion Limited) -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys.bak
[2014/01/01 18:04:39 | 000,044,544 | ---- | M] (Research in Motion Ltd) -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys.bak
[2014/01/01 18:04:39 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rndismpx.sys.bak
[2014/01/01 18:04:39 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys.bak
[2014/01/01 18:04:39 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rndismp6.sys.bak
[2014/01/01 18:04:39 | 000,017,920 | ---- | M] (Research in Motion Limited) -- C:\Windows\SysNative\drivers\rimvndis6_AMD64.sys.bak
[2014/01/01 18:04:39 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rootmdm.sys.bak
[2014/01/01 18:04:38 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys.bak
[2014/01/01 18:04:36 | 000,050,856 | ---- | M] (Tether) -- C:\Windows\SysNative\drivers\qrkis.sys.bak
[2014/01/01 18:04:35 | 000,230,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys.bak
[2014/01/01 18:04:35 | 000,082,816 | ---- | M] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys.bak
[2014/01/01 18:04:35 | 000,055,856 | ---- | M] (Sonic Solutions) -- C:\Windows\SysNative\drivers\PxHlpa64.sys.bak
[2014/01/01 18:04:34 | 000,048,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pciidex.sys.bak
[2014/01/01 18:04:34 | 000,025,600 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys.bak
[2014/01/01 18:04:32 | 000,030,056 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys.bak
[2014/01/01 18:04:30 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Windows\SysNative\drivers\NTIDrvr.sys.bak
[2014/01/01 18:04:29 | 000,376,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys.bak
[2014/01/01 18:04:29 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) -- C:\Windows\SysNative\drivers\npf.sys.bak
[2014/01/01 18:04:24 | 000,007,680 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\drivers\moufiltr.sys.bak
[2014/01/01 18:04:23 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) -- C:\Windows\SysNative\drivers\MarvinBus64.sys.bak
[2014/01/01 18:04:23 | 000,065,600 | ---- | M] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys.bak
[2014/01/01 18:04:23 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\mcd.sys.bak
[2014/01/01 18:04:22 | 000,046,400 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys.bak
[2014/01/01 18:04:21 | 000,412,712 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\k57nd60a.sys.bak
[2014/01/01 18:04:21 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\irda.sys.bak
[2014/01/01 18:04:20 | 000,317,440 | ---- | M] (Intel(R) Corporation) -- C:\Windows\SysNative\drivers\IntcDAud.sys.bak
[2014/01/01 18:04:19 | 012,228,128 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\igdkmd64.sys.bak
[2014/01/01 18:04:17 | 000,437,272 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\iaStor.sys.bak
[2014/01/01 18:04:16 | 000,078,720 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys.bak
[2014/01/01 18:04:16 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys.bak
[2014/01/01 18:04:16 | 000,056,344 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys.bak
[2014/01/01 18:04:16 | 000,032,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys.bak
[2014/01/01 18:04:15 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys.bak
[2014/01/01 18:04:15 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggsemc.sys.bak
[2014/01/01 18:04:15 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggflt.sys.bak
[2014/01/01 18:04:14 | 000,288,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS.bak
[2014/01/01 18:04:14 | 000,023,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys.bak
[2014/01/01 18:04:12 | 003,286,016 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\evbda.sys.bak
[2014/01/01 18:04:12 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) -- C:\Windows\SysNative\drivers\ETD.sys.bak
[2014/01/01 18:04:11 | 000,265,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys.bak
[2014/01/01 18:04:11 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxg.sys.bak
[2014/01/01 18:04:11 | 000,055,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpfve.sys.bak
[2014/01/01 18:04:11 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxapi.sys.bak
[2014/01/01 18:04:10 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys.bak
[2014/01/01 18:04:10 | 000,028,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Dumpata.sys.bak
[2014/01/01 18:04:10 | 000,027,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys.bak
[2014/01/01 18:04:09 | 000,179,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys.bak
[2014/01/01 18:04:09 | 000,039,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\crashdmp.sys.bak
[2014/01/01 18:04:08 | 000,468,480 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bxvbda.sys.bak
[2014/01/01 18:04:08 | 000,039,208 | ---- | M] (B.H.A Corporation) -- C:\Windows\SysNative\drivers\cdrbsdrv.sys.bak
[2014/01/01 18:04:08 | 000,010,224 | ---- | M] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdralw2k.sys.bak
[2014/01/01 18:04:08 | 000,010,224 | ---- | M] (Sonic Solutions) -- C:\Windows\SysNative\drivers\cdr4_xp.sys.bak
[2014/01/01 18:04:07 | 000,086,056 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bScsiSDa.sys.bak
[2014/01/01 18:04:07 | 000,051,240 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bScsiMSa.sys.bak
[2014/01/01 18:04:06 | 000,270,848 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57nd60a.sys.bak
[2014/01/01 18:04:06 | 000,067,624 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57xdbd.sys.bak
[2014/01/01 18:04:06 | 000,028,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\battc.sys.bak
[2014/01/01 18:04:06 | 000,019,496 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57xdmp.sys.bak
[2014/01/01 18:04:06 | 000,016,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BdaSup.sys.bak
[2014/01/01 18:04:05 | 002,377,216 | ---- | M] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys.bak
[2014/01/01 18:04:05 | 000,155,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys.bak
[2014/01/01 18:04:05 | 000,088,480 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys.bak
[2014/01/01 18:04:04 | 000,194,128 | ---- | M] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys.bak
[2014/01/01 18:04:04 | 000,027,008 | ---- | M] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys.bak
[2014/01/01 18:04:04 | 000,023,424 | ---- | M] (ASUSTeK COMPUTER INC.) -- C:\Windows\SysNative\drivers\AsusVRC64.sys.bak
[2014/01/01 18:04:03 | 000,107,904 | ---- | M] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys.bak
[2014/01/01 18:04:01 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\1394bus.sys.bak
[2014/01/01 17:44:17 | 003,810,304 | ---- | M] () -- C:\Users\Otas\Desktop\RogueKiller.exe
[2014/01/01 13:12:53 | 001,233,962 | ---- | M] () -- C:\Users\Otas\Desktop\adwcleaner.exe
[2013/12/31 19:09:41 | 000,832,273 | ---- | M] () -- C:\Users\Otas\Desktop\RSITx64.exe
[2013/12/31 17:14:30 | 000,071,112 | ---- | M] () -- C:\ads_err.adt
[2013/12/31 17:14:30 | 000,004,096 | ---- | M] () -- C:\ads_err.adi
[2013/12/30 20:44:17 | 000,239,844 | ---- | M] () -- C:\Users\Otas\Desktop\pf 2014.cdr
[2013/12/30 20:37:07 | 000,239,848 | ---- | M] () -- C:\Users\Otas\Desktop\Záloha_pf 2014.cdr
[2013/12/25 15:49:14 | 001,578,994 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/12/25 15:49:14 | 000,667,116 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013/12/25 15:49:14 | 000,652,820 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/12/25 15:49:14 | 000,140,522 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013/12/25 15:49:14 | 000,121,494 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/12/11 18:59:27 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/12/11 18:59:27 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

Ot@s · #21 Příspěvek od **Ot@s** » 02 led 2014 19:25

========== Files Created - No Company Name ==========

[2014/01/01 17:47:38 | 000,046,400 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys.bak
[2014/01/01 17:47:03 | 000,088,480 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys.bak
[2014/01/01 17:44:12 | 003,810,304 | ---- | C] () -- C:\Users\Otas\Desktop\RogueKiller.exe
[2014/01/01 13:12:44 | 001,233,962 | ---- | C] () -- C:\Users\Otas\Desktop\adwcleaner.exe
[2013/12/31 19:09:34 | 000,832,273 | ---- | C] () -- C:\Users\Otas\Desktop\RSITx64.exe
[2013/12/30 20:44:17 | 000,239,848 | ---- | C] () -- C:\Users\Otas\Desktop\Záloha_pf 2014.cdr
[2013/12/30 20:37:07 | 000,239,844 | ---- | C] () -- C:\Users\Otas\Desktop\pf 2014.cdr
[2013/09/14 10:54:07 | 000,294,974 | R--- | C] () -- C:\Windows\SysWow64\RTL283XACCESS.dll
[2013/09/08 19:06:57 | 000,234,010 | ---- | C] () -- C:\Windows\SysWow64\poclbm130302GeForce GT 520Mgv1w256l4.bin
[2013/09/08 19:06:33 | 000,000,000 | ---- | C] () -- C:\Users\Otas\regbcm
[2012/12/14 21:46:36 | 000,844,288 | ---- | C] () -- C:\Windows\RmTablet.exe
[2012/11/04 17:10:50 | 000,000,600 | ---- | C] () -- C:\Windows\Rtcw.INI
[2012/09/08 13:15:27 | 000,000,029 | ---- | C] () -- C:\Windows\wordpad.ini
[2012/09/08 13:14:08 | 000,136,620 | ---- | C] () -- C:\Windows\cep1unin.exe
[2012/09/08 13:13:52 | 000,000,159 | ---- | C] () -- C:\Windows\cool.ini
[2012/06/09 19:02:12 | 000,282,296 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012/06/09 19:02:10 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012/06/02 16:29:08 | 000,000,384 | ---- | C] () -- C:\Windows\ODBC.INI
[2012/02/23 21:40:39 | 000,000,266 | ---- | C] () -- C:\Windows\headache.ini
[2012/02/11 09:46:07 | 000,019,456 | ---- | C] () -- C:\Users\Otas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/01/19 21:17:04 | 000,210,032 | ---- | C] () -- C:\Windows\SysWow64\DBCLIENT.DLL
[2011/09/18 08:25:33 | 000,001,057 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\vso_ts_preview.xml
[2011/09/18 08:24:53 | 000,099,384 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\inst.exe
[2011/09/18 08:24:53 | 000,007,859 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\pcouffin.cat
[2011/09/18 08:24:53 | 000,001,167 | ---- | C] () -- C:\Users\Otas\AppData\Roaming\pcouffin.inf

========== ZeroAccess Check ==========

[2009/07/14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/02/27 06:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 05:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/08/01 20:08:59 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\.minecraft
[2012/01/09 21:24:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Autodesk
[2013/10/23 18:33:42 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\AVAST Software
[2011/11/09 20:44:01 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Bioshock2
[2012/04/01 08:16:57 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/10/05 19:25:20 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/02/22 22:26:30 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Crossword Compiler 8
[2013/04/12 12:58:18 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DAEMON Tools Lite
[2012/02/15 18:28:08 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DraftSight
[2014/01/02 18:12:00 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Dropbox
[2011/11/13 10:40:30 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\ESET
[2012/05/08 13:26:12 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Nokia
[2012/05/08 13:26:11 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\PC Suite
[2013/05/30 16:12:02 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Research In Motion
[2012/01/17 18:36:56 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Samsung
[2011/09/15 19:27:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SNS
[2013/12/30 21:36:58 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SoftGrid Client
[2012/09/09 17:00:07 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Sony
[2013/10/08 15:44:38 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\T-Mobile
[2011/09/17 18:40:59 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Tific
[2011/09/14 20:11:39 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\TP
[2013/09/07 13:05:10 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\TuneUp Software
[2012/12/08 13:45:28 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Unity
[2013/04/12 12:58:18 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Vso
[2011/12/09 19:03:16 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Windows Live Writer
[2013/09/14 13:59:54 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\XCPCSync.OEM
[2012/01/29 15:59:38 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\XRay Engine
[2012/02/18 13:44:58 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Zoner

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009/07/14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 06:08:49 | 000,032,584 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/06/16 12:10:09 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013/09/07 10:05:47 | 000,000,944 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013/09/07 10:05:48 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: AGP440.SYS >
[2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010/11/21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012/06/02 05:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2010/11/21 04:24:16 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2013/05/10 05:49:59 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=33ADF6E0853AB39EA1723BE82842C1D3 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_77d7a417f9359661\cryptsvc.dll
[2013/05/13 05:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2013/07/09 15:47:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=434CCE8E7150CD1324C5FAA088D1D061 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll
[2013/07/09 06:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\SysNative\cryptsvc.dll
[2013/07/09 06:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll
[2013/07/09 14:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013/07/09 05:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\SysWOW64\cryptsvc.dll
[2013/07/09 05:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2012/06/04 08:52:35 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=7E7D2DACF65D750D466F36BD3D09AE20 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll
[2013/05/10 06:49:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=7FDC4626B01106A8EF328C88C7C0DEE3 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_d3f63f9bb1930797\cryptsvc.dll
[2013/05/11 06:18:23 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=8122252F0A4ACFA92FA0C1D50D18493B -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll
[2012/06/02 05:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2012/06/02 06:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=9C01375BE382E834CC26D1B7EAF2C4FE -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll
[2010/11/21 04:24:32 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013/05/11 05:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2013/05/10 06:18:53 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=CA13C4F92BEE66DB48E58AB3223DDF6E -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_d4a14e5aca976a0c\cryptsvc.dll
[2013/05/13 06:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=D8129C49798CBBFB2E4351D4B7B8EF9C -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll
[2013/05/10 06:06:21 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=E122AA1C9A3CC46FF9DDDE46E5EB0C58 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_7882b2d71239f8d6\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2009/12/26 19:41:36 | 000,043,520 | ---- | M] (Panasonic Corporation) MD5=7D9B6B1537EA2ADB5E4835A2BD6676EE -- C:\Program Files (x86)\Panasonic\VideoCam Suite 3.0\Core\EventLog\EventLog.dll
[2009/12/26 19:41:36 | 000,043,520 | ---- | M] (Panasonic Corporation) MD5=7D9B6B1537EA2ADB5E4835A2BD6676EE -- C:\Program Files (x86)\Panasonic\VideoCam Suite 3.0\Core\Spec\AVCHD\BDCore\EventLog.dll

< MD5 for: EXPLORER.EXE >
[2011/02/26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011/02/25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/02/25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/21 04:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/21 04:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: HAL.DLL >
[2010/11/21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTOR.SYS >
[2010/09/14 02:18:16 | 000,353,304 | ---- | M] (Intel Corporation) MD5=F4F4CBC7F6C7CB940AA9F0AAF3EF1104 -- C:\OEM\Preload\Autorun\DRV\Intel AHCI\f6flpy-x86\iaStor.sys
[2010/09/14 02:24:26 | 000,437,272 | ---- | M] (Intel Corporation) MD5=F7CE9BE72EDAC499B713ECA6DAE5D26F -- C:\OEM\Preload\Autorun\DRV\Intel AHCI\f6flpy-x64\iaStor.sys
[2010/09/14 02:24:26 | 000,437,272 | ---- | M] (Intel Corporation) MD5=F7CE9BE72EDAC499B713ECA6DAE5D26F -- C:\Windows\SysNative\drivers\iaStor.sys
[2010/09/14 02:24:26 | 000,437,272 | ---- | M] (Intel Corporation) MD5=F7CE9BE72EDAC499B713ECA6DAE5D26F -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_2b0c50dc63f09dae\iaStor.sys

< MD5 for: IASTORV.SYS >
[2010/11/21 04:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/21 04:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011/03/11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/03/11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011/03/11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009/07/14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009/07/14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009/07/14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009/07/14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011/11/17 07:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2012/08/24 18:43:36 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=77119F1F9B492B260030C34F9BE327FA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22099_none_04a88ce28cc4eb33\lsass.exe
[2012/06/04 08:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
[2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
[2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
[2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17940_none_044c26dd7386a58a\lsass.exe

< MD5 for: NDIS.SYS >
[2010/12/29 11:33:33 | 000,950,656 | ---- | M] (Microsoft Corporation) MD5=303310C91F8C0740ED1C76851C759874 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.21628_none_066fff3d4bd0b870\ndis.sys
[2012/08/22 19:06:07 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=5E74508FCB5820B29EEAFE24E6035BCF -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_06232d534c0a8d67\ndis.sys
[2012/08/22 19:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\SysNative\drivers\ndis.sys
[2012/08/22 19:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_05dc9a6832ba428a\ndis.sys
[2010/11/21 04:23:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2010/12/29 11:57:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=C38B8AE57F78915905064A9A24DC1586 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17530_none_05d3903632c269df\ndis.sys

< MD5 for: NETLOGON.DLL >
[2010/11/21 04:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010/11/21 04:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/21 04:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010/11/21 04:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011/03/11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011/03/11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011/03/11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2010/11/21 04:23:47 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010/11/21 04:23:47 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011/03/11 07:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2011/03/11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/03/11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011/03/11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/21 04:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/21 04:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2010/11/21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009/07/14 02:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe
[2013/03/19 03:57:17 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=498E2A20E145199709CD100CDBA8603D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe
[2013/03/19 04:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\SysNative\smss.exe
[2013/03/19 04:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2012/10/03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2011/09/29 18:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
[2010/11/21 04:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2012/08/22 19:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
[2012/03/30 11:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2011/04/25 06:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011/06/21 07:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
[2012/03/30 12:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2013/07/06 06:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013/01/03 07:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2011/04/25 07:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2013/01/04 06:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2011/03/19 08:45:16 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=CB6A53EF141CC3DA32DA54F7E75D301B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21687_none_118505f696597a9d\tcpip.sys
[2012/10/03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013/07/06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013/07/06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2011/03/19 08:39:54 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=DC08410DB2D0CC542DACAC7A90E6CB7A -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17582_none_10f667b97d405c20\tcpip.sys
[2011/06/21 07:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
[2012/08/22 19:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys
[2011/09/29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010/11/21 04:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010/11/21 04:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2010/11/21 04:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010/11/21 04:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[4 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[313 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2013/08/01 20:08:59 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\.minecraft
[2012/04/01 08:24:13 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Adobe
[2013/09/14 10:59:47 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\ArcSoft
[2012/01/09 21:24:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Autodesk
[2013/10/23 18:33:42 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\AVAST Software
[2011/11/09 20:44:01 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Bioshock2
[2012/04/01 08:16:57 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/10/05 19:25:20 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/09/18 07:47:46 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Corel
[2012/02/22 22:26:30 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Crossword Compiler 8
[2011/10/01 18:59:28 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\CyberLink
[2013/04/12 12:58:18 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DAEMON Tools Lite
[2012/02/15 18:28:08 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\DraftSight
[2014/01/02 18:12:00 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Dropbox
[2011/11/13 10:40:30 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\ESET
[2011/09/13 18:35:33 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Identities
[2012/03/06 20:23:38 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\InstallShield
[2011/09/13 18:36:01 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Intel Corporation
[2011/09/13 18:35:49 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Macromedia
[2013/12/31 20:18:45 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Malwarebytes
[2010/11/21 08:16:41 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Media Center Programs
[2012/11/29 17:52:17 | 000,000,000 | --SD | M] -- C:\Users\Otas\AppData\Roaming\Microsoft
[2011/09/13 19:32:31 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Mozilla
[2011/10/23 14:41:22 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Nero
[2012/05/08 13:26:12 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Nokia
[2013/09/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\NVIDIA
[2012/05/08 13:26:11 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\PC Suite
[2013/05/30 16:12:02 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Research In Motion
[2012/01/17 18:36:56 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Samsung
[2011/09/20 17:48:10 | 000,000,000 | RH-D | M] -- C:\Users\Otas\AppData\Roaming\SecuROM
[2014/01/02 18:45:43 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Skype
[2011/09/15 19:27:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SNS
[2013/12/30 21:36:58 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\SoftGrid Client
[2012/09/09 17:00:07 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Sony
[2013/10/08 15:44:38 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\T-Mobile
[2011/09/17 18:40:59 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Tific
[2011/09/14 20:11:39 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\TP
[2013/09/07 13:05:10 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\TuneUp Software
[2012/01/07 17:56:55 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\U3
[2012/12/08 13:45:28 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Unity
[2013/12/06 22:16:17 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\vlc
[2013/04/12 12:58:18 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Vso
[2011/12/09 19:03:16 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Windows Live Writer
[2011/09/15 21:19:35 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\WinRAR
[2013/09/14 13:59:54 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\XCPCSync.OEM
[2012/01/29 15:59:38 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\XRay Engine
[2012/02/18 13:44:58 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\Zoner

Ot@s · #22 Příspěvek od **Ot@s** » 02 led 2014 19:25

< %APPDATA%\*.exe /s >
[2011/09/18 08:39:45 | 000,099,384 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\inst.exe
[2013/06/05 18:28:40 | 027,370,808 | ---- | M] (Dropbox, Inc.) -- C:\Users\Otas\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2013/06/05 18:28:50 | 000,229,288 | ---- | M] (Dropbox, Inc.) -- C:\Users\Otas\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2013/06/05 18:28:42 | 000,919,048 | ---- | M] (Dropbox, Inc.) -- C:\Users\Otas\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2012/04/01 08:22:49 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Otas\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2011/09/17 20:12:56 | 000,029,926 | R--- | M] () -- C:\Users\Otas\AppData\Roaming\Microsoft\Installer\{6DE721A5-5E89-4D74-994C-652BB3C0672E}\ARPPRODUCTICON.exe
[2013/06/18 14:14:58 | 000,067,646 | R--- | M] () -- C:\Users\Otas\AppData\Roaming\Microsoft\Installer\{748590DB-44CD-48D2-8585-2496BBFE919F}\_2DCE6EB90782985AD7905E.exe
[2013/06/18 14:14:58 | 000,067,646 | R--- | M] () -- C:\Users\Otas\AppData\Roaming\Microsoft\Installer\{748590DB-44CD-48D2-8585-2496BBFE919F}\_362439E005B13BC0F5DE74.exe
[2011/11/04 19:52:52 | 000,099,678 | R--- | M] () -- C:\Users\Otas\AppData\Roaming\Microsoft\Installer\{E2B4FE1C-2CFA-47EE-A88C-A14D0FF1F0B0}\_FA1973C448F0CDEF5FD499.exe
[2013/12/31 16:51:36 | 164,974,096 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry 10 Desktop\Updates\33484803-750F-4154-A0A3-C0474F3BE1BE\Extractor.exe
[2012/07/11 12:09:50 | 002,959,376 | ---- | M] (Microsoft Corporation) -- C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry Desktop\Updates\33484803-750F-4154-A0A3-C0474F3BE1BE\dotnetfx35setup.exe
[2012/08/02 18:29:47 | 115,772,504 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry Desktop\Updates\33484803-750F-4154-A0A3-C0474F3BE1BE\Extractor.exe
[2012/07/11 12:09:50 | 000,128,472 | ---- | M] (Macrovision Corporation) -- C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry Desktop\Updates\33484803-750F-4154-A0A3-C0474F3BE1BE\Helper.exe
[2012/07/11 12:09:50 | 004,216,840 | ---- | M] (Microsoft Corporation) -- C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry Desktop\Updates\33484803-750F-4154-A0A3-C0474F3BE1BE\vcredist_x86.exe
[2012/07/11 12:09:50 | 000,424,536 | ---- | M] (Research In Motion Limited) -- C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry Desktop\Updates\33484803-750F-4154-A0A3-C0474F3BE1BE\InstallerUtils\InstallerUtils.exe
[2012/07/11 12:09:50 | 000,083,032 | ---- | M] (Research In Motion Limited) -- C:\Users\Otas\AppData\Roaming\Research In Motion\BlackBerry Desktop\Updates\33484803-750F-4154-A0A3-C0474F3BE1BE\InstallerUtils\Setup.exe
[2007/10/23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\Otas\AppData\Roaming\U3\temp\cleanup.exe
[2008/05/02 10:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Users\Otas\AppData\Roaming\U3\temp\Launchpad Removal.exe
[2011/09/16 23:13:36 | 012,505,560 | ---- | M] (ZONER software ) -- C:\Users\Otas\AppData\Roaming\Zoner\NLMDB\product.0034\autoupdate.cz\ZPS13_Update_Build07.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2014/01/02 18:12:50 | 000,000,018 | ---- | M] () -- C:\Windows\system32\log.txt

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010/11/21 04:24:51 | 001,475,584 | ---- | M] (Microsoft Corporation)
"Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun -- [2013/11/14 16:42:42 | 020,584,608 | R--- | M] (Skype Technologies S.A.)
"MyTomTomSA.exe" = C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe -- [2013/05/23 12:53:18 | 000,455,608 | ---- | M] (TomTom)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014/01/02 18:22:39 | 000,000,512 | ---- | M] () MD5=1E1482CCEDFBA055B75520430B18F807 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[1999/06/11 19:18:36 | 000,092,827 | ---- | M] () -- \Program Files (x86)\Corel\Corel Graphics 11\Custom Data\Bumpmap\Cracks.cpt
[2002/01/30 17:31:34 | 000,016,068 | ---- | M] () -- \Program Files (x86)\Corel\Corel Graphics 11\Custom Data\Canvas\cracks2c.pcx
[2002/01/30 18:15:39 | 000,010,560 | ---- | M] () -- \Program Files (x86)\Corel\Corel Graphics 11\Custom Data\Tiles\CRACKS2M.CPT
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\sounds\firecrackle.ogg
[2011/12/04 13:33:21 | 000,165,972 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sounds\cached_firecrackle.wav
[2003/06/24 21:49:00 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sounds\firecrackle.ogg
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\sounds\firecrackle.ogg
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\sounds\firecrackle.ogg
[2008/04/25 17:51:06 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\sounds\firecrackle.ogg
[2005/10/28 05:07:42 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\sounds\firecrackle.ogg
[2005/10/28 05:07:42 | 000,016,978 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\sounds\firecrackle.ogg
[2010/09/30 00:06:32 | 001,674,383 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.jpg
[2010/09/30 00:06:32 | 000,001,560 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.metadata.xml
[2010/09/30 00:06:32 | 000,001,344 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.thumbnail.jpg
[2010/09/30 00:07:10 | 000,448,049 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.jpg
[2010/09/30 00:07:10 | 000,001,014 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.metadata.xml
[2010/09/30 00:07:10 | 000,002,577 | ---- | M] () -- \ProgramData\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.thumbnail.jpg
[2010/09/30 00:06:32 | 001,674,383 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.jpg
[2010/09/30 00:06:32 | 000,001,560 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.metadata.xml
[2010/09/30 00:06:32 | 000,001,344 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\BG_Creamcrackled.thumbnail.jpg
[2010/09/30 00:07:10 | 000,448,049 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.jpg
[2010/09/30 00:07:10 | 000,001,014 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.metadata.xml
[2010/09/30 00:07:10 | 000,002,577 | ---- | M] () -- \Users\All Users\Adobe\Photoshop Elements\9.0\Photo Creations\backgrounds\Cracked Paint.thumbnail.jpg
[2013/09/26 15:31:36 | 000,003,608 | ---- | M] () -- \Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_crackberry.com_0.localstorage-journal
[2013/10/02 17:20:06 | 000,003,608 | ---- | M] () -- \Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_forums.crackberry.com_0.localstorage-journal

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2010/09/30 02:06:40 | 005,326,272 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\PhotoDownloader.exe
[2011/09/13 18:45:41 | 000,000,025 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\PhotoDownloader.ini
[2010/09/30 01:42:50 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2010/09/30 02:01:34 | 000,000,273 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\apd\shared_assets\locales\cs_CZ\Photodownloader.ini
[2010/09/30 01:42:54 | 000,011,196 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\Assets\bitmaps\main_window\C_LoadError.PNG
[2010/09/30 01:44:14 | 000,002,713 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 9 Organizer\Mozilla\components\uriloader.xpt
[2010/08/11 18:35:04 | 000,161,792 | ---- | M] () -- \Program Files (x86)\BBSAK\javaloader.exe
[2013/11/06 08:49:32 | 012,605,968 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\Loader.exe
[2013/11/06 08:49:36 | 000,654,352 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderClient.dll
[2013/11/06 08:49:36 | 000,289,808 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1025.dll
[2013/11/06 08:49:38 | 000,319,504 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1027.dll
[2013/11/06 08:49:38 | 000,241,168 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1028.dll
[2013/11/06 08:49:38 | 000,301,072 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1029.dll
[2013/11/06 08:49:40 | 000,304,144 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1030.dll
[2013/11/06 08:49:40 | 000,323,088 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1031.dll
[2013/11/06 08:49:40 | 000,321,552 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1032.dll
[2013/11/06 08:49:42 | 000,320,528 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1034.dll
[2013/11/06 08:49:42 | 000,302,096 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1035.dll
[2013/11/06 08:49:44 | 000,322,576 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1036.dll
[2013/11/06 08:49:44 | 000,278,544 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1037.dll
[2013/11/06 08:49:44 | 000,310,288 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1038.dll
[2013/11/06 08:49:46 | 000,317,968 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1040.dll
[2013/11/06 08:49:46 | 000,261,136 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1041.dll
[2013/11/06 08:49:48 | 000,256,528 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1042.dll
[2013/11/06 08:49:48 | 000,310,800 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1043.dll
[2013/11/06 08:49:48 | 000,299,024 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1044.dll
[2013/11/06 08:49:50 | 000,312,336 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1045.dll
[2013/11/06 08:49:50 | 000,310,288 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1046.dll
[2013/11/06 08:49:52 | 000,312,336 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1048.dll
[2013/11/06 08:49:52 | 000,308,240 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1049.dll
[2013/11/06 08:49:52 | 000,324,624 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1050.dll
[2013/11/06 08:49:54 | 000,301,072 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1053.dll
[2013/11/06 08:49:54 | 000,294,928 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1054.dll
[2013/11/06 08:49:54 | 000,300,560 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1055.dll
[2013/11/06 08:49:56 | 000,305,168 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1057.dll
[2013/11/06 08:49:56 | 000,317,968 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1066.dll
[2013/11/06 08:49:58 | 000,326,672 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1069.dll
[2013/11/06 08:49:58 | 000,306,192 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1078.dll
[2013/11/06 08:49:58 | 000,305,680 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1081.dll
[2013/11/06 08:50:00 | 000,304,144 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1086.dll
[2013/11/06 08:50:00 | 000,334,864 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes1110.dll
[2013/11/06 08:50:02 | 000,236,048 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes2052.dll
[2013/11/06 08:50:02 | 000,321,552 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes2057.dll
[2013/11/06 08:50:02 | 000,317,456 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\AppLoader\LoaderRes2070.dll
[2011/01/20 20:44:20 | 000,011,710 | ---- | M] () -- \Program Files (x86)\CyberLink\HomeMedia\mm\MediaCtrl\ImageLoader.kc
[2011/01/20 20:44:26 | 000,003,489 | ---- | M] () -- \Program Files (x86)\CyberLink\HomeMedia\widget\langloader.kc
[2011/01/20 20:44:26 | 000,012,539 | ---- | M] () -- \Program Files (x86)\CyberLink\HomeMedia\widget\layoutloader.kc
[2013/10/01 09:48:42 | 000,000,922 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\ContextMenuLoader.js
[2013/09/26 12:51:20 | 000,000,321 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\JQueryLoader.js
[2013/10/01 09:48:42 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\Loader.js
[2013/09/26 12:49:18 | 000,000,626 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\NotebooksLoader.js
[2013/09/26 12:51:20 | 000,001,343 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\TagsCachedLoader.js
[2009/05/31 11:21:00 | 000,071,008 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2009/05/31 11:21:00 | 000,073,568 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader.gif
[2009/02/16 20:19:46 | 000,043,117 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:19:46 | 000,004,525 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar_.gif
[2009/02/16 20:19:46 | 000,034,066 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:19:46 | 000,037,271 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_de\images\title_loaderbar_clickhere_over.jpg
[2004/04/08 22:29:00 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\blue-Loader.jpg
[2004/04/08 02:08:00 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Flash-Loader.jpg
[2004/04/08 02:13:00 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Flash-Loader_.jpg
[2004/04/08 02:11:00 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Loader.jpg
[2003/12/17 20:32:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\loaderbar.png
[2004/04/08 02:12:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\Loader_.jpg
[2004/03/12 02:25:00 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader.gif
[2004/03/11 00:08:00 | 000,011,370 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlay.jpg
[2004/03/12 02:36:00 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlaylit.jpg
[2004/03/12 02:36:00 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlaylit_.gif
[2004/05/07 01:35:00 | 000,003,829 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\nr_reloader_overlay_.gif
[2004/04/14 18:17:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\purple-Loader.jpg
[2004/03/11 19:29:00 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar.jpg
[2004/03/17 22:20:00 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbarlit.jpg
[2004/03/17 22:20:00 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbarlit_.gif
[2004/03/11 19:30:00 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar_.gif
[2004/04/06 00:45:00 | 000,008,190 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar_clickhere.jpg
[2004/04/06 00:40:00 | 000,008,725 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\images\title_loaderbar_clickhere_over.jpg
[2011/12/04 13:33:19 | 000,013,218 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\blue-Loader.tga
[2011/12/04 13:33:19 | 000,263,570 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\flash-Loader.tga
[2011/12/04 13:33:19 | 000,073,938 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\Loader.tga
[2011/12/04 13:33:19 | 000,060,562 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_default\sm_images\purple-Loader.tga
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader.gif
[2009/02/16 20:20:00 | 000,044,676 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:20:00 | 000,003,291 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar_.gif
[2009/02/16 20:20:00 | 000,035,513 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:20:00 | 000,038,007 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_es\images\title_loaderbar_clickhere_over.jpg
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader.gif
[2009/02/16 20:19:40 | 000,042,889 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:19:40 | 000,004,018 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar_.gif
[2009/02/16 20:19:40 | 000,008,190 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:19:40 | 000,008,725 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_fr\images\title_loaderbar_clickhere_over.jpg
[2008/04/25 17:51:02 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\blue-Loader.jpg
[2008/04/25 17:51:04 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Flash-Loader.jpg
[2008/04/25 17:51:04 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Flash-Loader_.jpg
[2008/04/25 17:50:58 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Loader.jpg
[2008/04/25 17:51:00 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\loaderbar.png
[2008/04/25 17:51:00 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\Loader_.jpg
[2008/04/25 17:51:04 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader.gif
[2009/02/16 20:19:52 | 000,045,772 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlay.jpg
[2008/04/25 17:50:58 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlaylit.jpg
[2008/04/25 17:51:02 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlaylit_.gif
[2009/02/16 20:19:52 | 000,004,495 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\nr_reloader_overlay_.gif
[2008/04/25 17:51:00 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\purple-Loader.jpg
[2008/04/25 17:51:02 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar.jpg
[2008/04/25 17:50:58 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbarlit.jpg
[2008/04/25 17:51:02 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbarlit_.gif
[2008/04/25 17:51:02 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar_.gif
[2009/02/16 20:19:54 | 000,034,040 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar_clickhere.jpg
[2009/02/16 20:19:54 | 000,036,601 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_it\images\title_loaderbar_clickhere_over.jpg
[2005/10/28 05:07:42 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\blue-Loader.jpg
[2005/10/28 05:07:42 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Flash-Loader.jpg
[2005/10/28 05:07:42 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Flash-Loader_.jpg
[2005/10/28 05:07:42 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Loader.jpg
[2005/10/28 05:07:42 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\loaderbar.png
[2005/10/28 05:07:42 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\Loader_.jpg
[2005/10/28 05:07:42 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader.gif
[2006/01/11 01:07:08 | 000,035,413 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlay.jpg
[2005/10/28 05:07:42 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlaylit.jpg
[2005/10/28 05:07:42 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlaylit_.gif
[2006/01/11 01:06:48 | 000,002,373 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\nr_reloader_overlay_.gif
[2005/10/28 05:07:42 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\purple-Loader.jpg
[2005/10/28 05:07:42 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar.jpg
[2005/10/28 05:07:42 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbarlit.jpg
[2005/10/28 05:07:42 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbarlit_.gif
[2005/10/28 05:07:42 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar_.gif
[2006/01/11 02:01:20 | 000,032,145 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar_clickhere.jpg
[2006/01/11 02:01:04 | 000,034,542 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_ko\images\title_loaderbar_clickhere_over.jpg
[2005/10/28 05:07:42 | 000,002,116 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\blue-Loader.jpg
[2005/10/28 05:07:42 | 000,007,604 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Flash-Loader.jpg
[2005/10/28 05:07:42 | 000,007,963 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Flash-Loader_.jpg
[2005/10/28 05:07:42 | 000,006,428 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Loader.jpg
[2005/10/28 05:07:42 | 000,028,201 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\loaderbar.png
[2005/10/28 05:07:42 | 000,002,693 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\Loader_.jpg
[2005/10/28 05:07:42 | 000,110,633 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader.gif
[2006/02/04 02:34:26 | 000,040,450 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlay.jpg
[2005/10/28 05:07:42 | 000,003,973 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlaylit.jpg
[2005/10/28 05:07:42 | 000,001,932 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlaylit_.gif
[2006/02/04 02:34:28 | 000,002,506 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\nr_reloader_overlay_.gif
[2005/10/28 05:07:42 | 000,006,343 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\purple-Loader.jpg
[2005/10/28 05:07:42 | 000,006,979 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar.jpg
[2005/10/28 05:07:42 | 000,004,691 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbarlit.jpg
[2005/10/28 05:07:42 | 000,002,208 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbarlit_.gif
[2005/10/28 05:07:42 | 000,003,075 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar_.gif
[2006/02/04 21:12:56 | 000,030,006 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar_clickhere.jpg
[2006/02/04 21:13:00 | 000,031,549 | ---- | M] () -- \Program Files (x86)\Packard Bell Games\Bejeweled 2 Deluxe\wtmui_zh\images\title_loaderbar_clickhere_over.jpg
[2009/12/26 20:02:26 | 000,054,688 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\YouTubeUploaderMain.exe
[2009/12/26 19:58:00 | 003,361,792 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\YTUploader.dll
[2009/11/26 09:56:24 | 000,000,112 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\YTUploader.ini
[2009/12/26 19:45:24 | 000,150,016 | ---- | M] () -- \Program Files (x86)\Panasonic\VideoCam Suite 3.0\Core\Spec\AVCHD\BDCore\MediaLoader.dll
[2013/11/06 19:29:16 | 000,000,500 | ---- | M] () -- \Program Files (x86)\Research In Motion\BlackBerry Link\DataUploaderConfig.xml
[2011/05/13 19:27:58 | 000,058,600 | ---- | M] () -- \Program Files (x86)\Social Networks\Koan\pyloader.dll
[2011/05/13 19:28:02 | 000,015,587 | ---- | M] () -- \Program Files (x86)\Social Networks\System\KernelCtrl\ImageLoader2.kc
[2013/05/16 12:27:36 | 000,001,702 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\licenses\loaderbinarylegal.txt
[2011/03/23 22:04:26 | 000,124,200 | ---- | M] () -- \Program Files (x86)\Video Web Camera\Koan\pyloader.dll
[2012/01/07 15:37:20 | 000,416,896 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\WTDownloader.exe
[2011/09/14 21:32:33 | 000,002,191 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\GamePlay_Loader.html
[2011/09/14 21:32:34 | 000,009,072 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\Scripts\gameplay_loader.js
[2010/11/03 22:17:00 | 000,002,355 | ---- | M] () -- \Program Files (x86)\WildTangent Games\App\UI\Skins\default\gameplay_loader.css
[2011/05/28 21:04:04 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2011/03/08 17:09:04 | 000,194,048 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Picasa\ZPSPicasaUploader.exe
[2010/04/29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\zoner\Photo Studio 13\Plugins\Picasa\ZPSPluginLoader.exe
[2012/07/10 09:33:04 | 000,430,080 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Plugins\Facebook\ZPSFacebookUploader.exe
[2010/04/29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Plugins\Facebook\ZPSPluginLoader.exe
[2012/06/05 12:35:30 | 000,442,368 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Plugins\Flickr\ZPSFlickrUploader.exe
[2010/04/29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Plugins\Flickr\ZPSPluginLoader.exe
[2011/03/08 17:09:04 | 000,194,048 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Plugins\Picasa\ZPSPicasaUploader.exe
[2010/04/29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Plugins\Picasa\ZPSPluginLoader.exe
[2012/07/13 11:59:04 | 000,102,824 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Program32\8bfLoader.exe
[2012/07/13 11:59:16 | 000,016,808 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Program32\WICLoader.exe
[2012/07/13 11:59:54 | 000,019,368 | ---- | M] () -- \Program Files\zoner\Photo Studio 14\Program64\WICLoader.exe
[2011/10/09 18:02:16 | 000,000,024 | ---- | M] () -- \ProgramData\__FileUploader.log
[2012/12/04 17:00:50 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012/12/04 17:00:50 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2013/11/11 14:39:40 | 000,006,012 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\normal\loader_15fps.gif
[2013/11/11 14:39:40 | 000,021,956 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\normal\loader_30fps.gif
[2012/12/04 17:00:50 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2011/10/09 18:02:16 | 000,000,024 | ---- | M] () -- \Users\All Users\__FileUploader.log
[2012/12/04 17:00:50 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012/12/04 17:00:50 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2013/11/11 14:39:40 | 000,006,012 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\normal\loader_15fps.gif
[2013/11/11 14:39:40 | 000,021,956 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\normal\loader_30fps.gif
[2012/12/04 17:00:50 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2012/10/11 19:22:46 | 028,136,448 | ---- | M] () -- \Users\Otas\AppData\Local\Downloaded Installations\Research In Motion\WebSL\{38676C9C-270F-43D1-926A-E45DE8820A6B}\Apploader.msi
[2013/11/06 21:18:06 | 000,110,642 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\751HF0TE\AdLoader-05424a4ab7d836fbf1bc3b5c2b3458f1.min[1].js
[2013/12/22 18:21:47 | 000,001,537 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\751HF0TE\AdLoader[1].htm
[2013/12/22 18:21:47 | 000,110,991 | ---- | M] () -- \Users\Otas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BC6E4X3T\AdLoader-7b857a7be889bd57f92da60a9b6146bb.min[1].js
[2012/10/13 19:53:31 | 000,335,362 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_accessibility.cod
[2012/10/13 19:54:41 | 000,518,986 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_avatars.cod
[2012/10/13 19:53:39 | 002,015,538 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_backgrounds_480x360_01a_b.cod
[2012/10/13 19:53:48 | 001,890,258 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_backgrounds_480x360_01b_b.cod
[2012/10/13 19:54:04 | 005,543,774 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_music_480x360_09_b.cod
[2012/10/13 19:54:29 | 004,737,142 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_ringtones_480x360_01a_b.cod
[2012/10/13 19:54:39 | 002,960,482 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_ringtones_480x360_01b_b.cod
[2012/10/13 19:52:59 | 004,841,692 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_toolkit_480x360_Apollo_01.cod
[2012/10/13 19:53:17 | 005,531,480 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_toolkit_480x360_Apollo_02.cod
[2012/10/13 19:53:30 | 004,237,586 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_toolkit_480x360_Apollo_03.cod
[2012/10/13 19:54:18 | 004,814,534 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_bb_medialoader_video_480x360_09_b.cod
[2012/10/13 19:55:37 | 000,229,594 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_loader.cod
[2012/06/13 14:42:08 | 000,002,615 | ---- | M] () -- \Users\Otas\AppData\Roaming\.minecraft\ModLoader.txt
[2012/06/13 14:41:50 | 000,000,215 | ---- | M] () -- \Users\Otas\AppData\Roaming\.minecraft\config\ModLoader.cfg
[2012/04/18 17:45:37 | 025,818,112 | ---- | M] () -- \Users\Otas\AppData\Roaming\Research In Motion\BlackBerry\Apploader.msi
[2012/04/18 17:52:49 | 001,156,008 | ---- | M] () -- \Users\Otas\Documents\LoaderBackup-(2012-04-18).ipd
[2013/08/26 22:24:42 | 000,149,504 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\YouTubeUploaderMain\f97f147b65db55245b0892a799d1e9f2\YouTubeUploaderMain.ni.exe
[2013/08/26 22:24:43 | 003,770,368 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\YTUploader\b6384cc215e3a76dcf5c0d042aece104\YTUploader.ni.dll
[2011/06/27 12:50:54 | 009,724,240 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\Loader.exe.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:50:58 | 000,633,680 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\loaderclient.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:00 | 000,876,880 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\loaderres1025.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:02 | 000,827,216 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1028.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:02 | 000,889,168 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1029.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:04 | 000,908,624 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1031.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:04 | 000,910,160 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\loaderres1032.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:06 | 000,910,672 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1034.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:08 | 000,910,160 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1036.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:08 | 000,865,104 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\loaderres1037.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:10 | 000,896,336 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1038.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:12 | 000,906,064 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1040.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:12 | 000,847,696 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1041.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:14 | 000,843,600 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1042.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:16 | 000,897,872 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\loaderres1043.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:16 | 000,900,432 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1045.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:18 | 000,898,896 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1046.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:20 | 000,894,800 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1049.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:20 | 000,888,144 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes1055.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:22 | 000,893,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\loaderres1057.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:24 | 000,823,120 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\LoaderRes2052.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/06/27 12:51:24 | 000,906,064 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\loaderres2070.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:12:58 | 010,020,184 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\Loader.exe.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:02 | 000,635,224 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\loaderclient.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:04 | 000,876,888 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\loaderres1025.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:04 | 000,827,736 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1028.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:06 | 000,889,176 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1029.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:08 | 000,908,632 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1031.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:08 | 000,910,168 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\loaderres1032.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:10 | 000,910,680 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1034.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:10 | 000,910,168 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1036.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:12 | 000,865,624 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\loaderres1037.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:12 | 000,896,344 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1038.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:14 | 000,906,072 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1040.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:16 | 000,848,216 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1041.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:16 | 000,844,120 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1042.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:18 | 000,897,880 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\loaderres1043.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:18 | 000,900,440 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1045.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:20 | 000,899,416 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1046.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:20 | 000,894,808 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1049.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:22 | 000,888,152 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes1055.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:24 | 000,893,272 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\loaderres1057.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:24 | 000,823,640 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\LoaderRes2052.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2011/03/14 16:13:26 | 000,906,072 | R--- | M] () -- \Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-3243394068-3903203777-451099978-1001\3230F324D45881D4CB12AEAF619B56E1\6.1.0\loaderres2070.dll.24CE78C0_7BB7_4BB7_83E3_BB689AA09A22
[2012/11/30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2012/11/30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:38:32 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:09:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/12 01:38:22 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2011/07/12 01:38:22 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2011/07/12 01:38:22 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2011/07/12 01:38:22 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2011/07/12 01:38:22 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2011/05/31 10:29:30 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/05/31 10:29:30 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2011/05/31 10:29:30 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2011/05/31 10:29:30 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2011/05/31 10:29:30 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2011/07/12 01:33:42 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2010/11/21 04:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 18:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 18:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 05:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >
[2012/10/13 19:56:22 | 000,028,580 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_plazmic_pushactivator.cod

< *serial* /s >
[2013/11/26 18:06:29 | 000,008,725 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\rimserial.cat
[2013/11/26 18:06:29 | 000,002,697 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\RimSerial.inf
[2012/12/10 15:48:12 | 000,035,840 | R--- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\RimSerial.sys
[2012/12/10 15:48:02 | 000,044,544 | R--- | M] () -- \Program Files (x86)\Common Files\Research In Motion\Modem Drivers\RimSerial_AMD64.sys
[2013/02/15 14:17:20 | 000,286,720 | ---- | M] () -- \Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\rim_serial.dll
[2013/09/26 12:51:20 | 000,000,917 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\AbstractElementSerializer.js
[2013/09/26 12:51:20 | 000,000,407 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\ElementSerializerFactory.js
[2013/10/01 09:48:42 | 000,008,106 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\JSSerializer.js
[2013/10/01 09:48:42 | 000,014,644 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\NodeSerializer.js
[2013/09/26 12:51:20 | 000,000,670 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\SerializedNode.js
[2013/09/26 12:51:20 | 000,001,526 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\custom\DataImageSerializer.js
[2013/09/26 12:51:20 | 000,001,554 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\custom\VideoElementSerializer.js
[2013/09/26 12:51:20 | 000,009,553 | ---- | M] () -- \Program Files (x86)\Evernote\Evernote\EvernoteIERes\scripts\serialization\custom\YoutubeElementSerializer.js
[2013/05/13 14:14:36 | 000,434,368 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\5.1.20513.0\System.Runtime.Serialization.dll
[2013/08/23 16:33:36 | 001,164,288 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\5.1.20513.0\System.Runtime.Serialization.ni.dll
[2012/10/05 11:53:23 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2011/03/14 07:35:26 | 000,236,032 | ---- | M] () -- \Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\W2PSerializer.dll
[2013/05/16 12:25:40 | 000,049,217 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.serialio_2.13.6.201305161305.jar
[2013/05/16 12:25:50 | 000,005,999 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\plugins\com.sonymobile.cs.serialcommunication_2.13.6.201305161305.jar
[2010/04/15 02:20:46 | 000,415,592 | ---- | M] () -- \Program Files (x86)\Windows Live\Mesh\System.Runtime.Serialization.dll
[2010/04/15 02:20:46 | 000,141,168 | ---- | M] () -- \Program Files (x86)\Windows Live\Mesh\System.Runtime.Serialization.Json.dll
[2010/04/15 02:20:46 | 000,321,376 | ---- | M] () -- \Program Files (x86)\Windows Live\Mesh\System.Xml.Serialization.dll
[2013/05/13 16:04:04 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20513.0\System.Runtime.Serialization.dll
[2013/08/23 16:34:10 | 001,546,240 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20513.0\System.Runtime.Serialization.ni.dll
[2012/10/05 11:52:37 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2013/09/08 19:32:46 | 000,001,128 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\AVG-Internet-Security-2013 v.2742+serial-[licence-do-2018]\AVG-Internet-Security-2013 v.2742+serial-[licence-do-2018].lnk
[2013/09/08 19:32:46 | 000,001,128 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\AVG-Internet-Security-2013 v.2742+serial-[licence-do-2018]\AVG-Internet-Security-2013 v.2742+serial-[licence-do-2018].lnk
[2013/10/14 20:46:49 | 000,003,608 | ---- | M] () -- \Users\Otas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.serialzone.cz_0.localstorage-journal
[2012/10/13 19:52:50 | 000,058,468 | ---- | M] () -- \Users\Otas\AppData\Local\Research In Motion\Application Loader\Cache\0308f6a65a86c16a4fe0e5f5f104348b77958f81\Java\net_rim_serialformats.cod
[2008/09/04 08:06:40 | 000,079,120 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\HfxSerial.exe
[2008/09/04 08:07:02 | 000,010,512 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-CHS.dll
[2008/09/04 08:07:04 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-DEU.dll
[2008/09/04 08:07:04 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ESP.dll
[2008/09/04 08:07:06 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-FRA.dll
[2008/09/04 08:07:10 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ITA.dll
[2008/09/04 08:07:14 | 000,010,512 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-JPN.dll
[2008/09/04 08:07:14 | 000,010,512 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-KOR.dll
[2008/09/04 08:07:16 | 000,011,024 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-NLD.dll
[2011/07/12 01:37:31 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010/11/13 03:02:06 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2012/10/05 11:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013/08/23 17:23:28 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d462f459c4353e2c628e6def1430aed7\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/23 17:24:28 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e043ad64456256a8ee5b934e227d9782\System.Runtime.Serialization.ni.dll
[2013/08/23 17:19:17 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\845e04461d3d879b24c5b0d30947050a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/23 17:22:01 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\dbfc784cc4bde7b16fb471e14563569d\System.Runtime.Serialization.ni.dll
[2013/08/30 20:28:47 | 002,647,552 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\420022aad3481c670eb86a4ca72d5b43\System.Runtime.Serialization.ni.dll
[2013/08/30 20:28:26 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/30 20:31:39 | 000,009,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\cda839ea462e123d42cb6d0883cf0f4d\System.Xml.Serialization.ni.dll
[2013/08/23 18:30:34 | 003,414,016 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\b00c987c6d13ba24a30b471ae12a23d5\System.Runtime.Serialization.ni.dll
[2013/08/30 20:33:41 | 000,376,832 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\cd2da26160fba6400b0353e558e35da6\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/08/23 16:51:15 | 003,412,992 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\e9ea86e500cd0a903a6f2fba21e83667\System.Runtime.Serialization.ni.dll
[2013/08/30 20:37:40 | 000,010,240 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\252726355005e3388101a3f1dfa1c727\System.Xml.Serialization.ni.dll
[2009/06/18 16:59:04 | 000,176,128 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\C89AAB21DD8F9CB4BB6EC14836111479\6.0.1\rim_serial.dll.DF165662_B3B3_4663_A928_189069C7EE64
[2011/10/13 19:38:39 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013/08/23 16:53:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011/10/13 19:38:38 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013/08/23 16:53:27 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013/08/23 16:53:31 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2011/07/12 01:37:35 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012/10/05 11:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/06 15:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2010/06/15 01:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/06/15 01:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009/06/10 21:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2011/07/12 01:37:29 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2012/10/05 11:52:38 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 12:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/06 15:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2010/06/15 01:48:20 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/06/15 01:48:20 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2011/07/12 01:37:19 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009/07/14 01:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2011/09/14 20:38:11 | 000,009,127 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\RimSerial.cat
[2011/09/14 20:38:11 | 000,001,594 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\rimserial.inf
[2011/09/14 20:38:13 | 000,007,584 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\rimserial.PNF
[2009/01/09 15:02:08 | 000,031,744 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_095f8f326d5d196a\RimSerial_AMD64.sys
[2013/05/30 16:11:38 | 000,008,725 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_8089aa44baeaf242\RimSerial.cat
[2013/05/30 16:11:38 | 000,002,697 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_8089aa44baeaf242\rimserial.inf
[2013/05/30 16:11:39 | 000,009,484 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_8089aa44baeaf242\rimserial.PNF
[2012/12/10 14:48:02 | 000,044,544 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_8089aa44baeaf242\RimSerial_AMD64.sys
[2012/07/25 18:55:16 | 000,008,159 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_cfa3552f34b187f9\RimSerial.cat
[2012/07/25 18:55:16 | 000,002,696 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_cfa3552f34b187f9\rimserial.inf
[2012/07/25 18:55:17 | 000,009,484 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_cfa3552f34b187f9\rimserial.PNF
[2011/07/20 13:58:22 | 000,044,032 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\rimserial.inf_amd64_neutral_cfa3552f34b187f9\RimSerial_AMD64.sys
[2009/06/10 21:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2011/07/12 01:37:19 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\cs-CZ\serialui.dll.mui
[2011/07/12 01:37:29 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_1e527062c1f59d5f\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2011/07/12 01:37:35 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23\serialui.dll.mui
[2009/07/14 02:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_bb9a1800691e639c\System.RunTime.Serialization.Resources.dll
[2011/07/12 01:37:38 | 000,009,728 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_20ab142d65ed6acc\serial.sys.mui
[2009/07/14 01:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009/06/10 21:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 21:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012/10/05 11:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2012/10/05 11:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2010/11/21 04:24:53 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012/10/05 11:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2012/10/05 11:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2011/05/31 10:29:30 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/05/31 10:29:30 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2011/07/12 01:38:22 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23_serialui.dll.mui_7d29d2a3
[2009/07/14 03:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2011/07/12 01:38:21 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009/07/14 03:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009/07/14 03:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011/02/05 18:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/02/05 14:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009/07/14 03:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2010/11/21 04:17:50 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012/10/05 19:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2012/10/05 19:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2010/11/21 04:17:50 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012/10/05 19:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2012/10/05 19:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2010/11/21 04:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012/10/05 18:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012/10/05 18:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2011/07/12 01:35:41 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2012/10/05 21:12:17 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f.manifest
[2012/10/05 20:59:28 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797.manifest
[2010/11/21 04:17:50 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012/10/05 18:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012/10/05 18:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2010/11/21 04:18:20 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012/10/05 18:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012/10/05 18:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009/06/10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2011/07/12 01:37:31 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012/10/05 11:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012/10/05 11:56:07 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2010/11/13 03:02:06 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f\System.RunTime.Serialization.Resources.dll
[2010/11/13 03:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:24:53 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012/10/05 11:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012/10/05 11:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2011/07/12 01:37:35 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_28a71ab4f6565f5a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011/07/12 01:37:19 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009/07/14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2011/07/12 01:37:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2010/11/21 04:25:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012/10/05 11:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012/10/05 11:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:30FD0CBD

< End of report >

Ot@s · #23 Příspěvek od **Ot@s** » 02 led 2014 19:26

Druhy textak

OTL Extras logfile created on: 1/2/2014 6:18:51 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Otas\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.86 Gb Total Physical Memory | 1.87 Gb Available Physical Memory | 48.42% Memory free
7.71 Gb Paging File | 5.55 Gb Available in Paging File | 71.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 100.01 Gb Total Space | 25.96 Gb Free Space | 25.95% Space Free | Partition Type: NTFS
Drive E: | 345.65 Gb Total Space | 25.44 Gb Free Space | 7.36% Space Free | Partition Type: NTFS

Computer Name: KRAM | User Name: Otas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.js[@ = JSFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.vbe[@ = VBEFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\SysWow64\CScript.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
vbefile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
wsffile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
vbefile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
wsffile [open] -- %SystemRoot%\SysWow64\CScript.exe "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{10C380F1-C8F9-48D6-B8E4-A8B57EED0092}" = lport=137 | protocol=17 | dir=in | app=system |
"{11AB1F95-67A3-4FD8-BF54-886A223AC619}" = rport=445 | protocol=6 | dir=out | app=system |
"{1CCD6E2F-7423-456A-982B-1E0D8645F08B}" = rport=139 | protocol=6 | dir=out | app=system |
"{2958DBC2-F5CA-4976-A882-17687928F153}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{3CCBABC8-1656-4713-8A02-6EEB8B328B94}" = rport=137 | protocol=17 | dir=out | app=system |
"{4820C094-201F-4CC5-85C8-A2EA409DFA30}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5BFB24E3-8AB0-4062-B56F-66C0E0D4939A}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{60FAE69D-E3D1-49A3-849A-66B8ECE40802}" = lport=138 | protocol=17 | dir=in | app=system |
"{6E0ECFDA-8C03-4C58-A45C-1026384FBA19}" = rport=138 | protocol=17 | dir=out | app=system |
"{70823DDC-13B3-4165-A1E0-8858CBFB734C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{833A8EBF-8AA0-443D-ABDA-FDBC5EC56A7B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{97C37692-6279-490E-861E-CDAAD41B1B12}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{97FFAE84-1183-4153-9143-7614E113E619}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9B5E129B-7BC3-4309-8166-99085A380AF0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9BDAB0AE-0771-446C-85EE-D59901E46BAA}" = rport=10243 | protocol=6 | dir=out | app=system |
"{A622072F-54AC-4F0F-AC0E-994838BE5B62}" = lport=139 | protocol=6 | dir=in | app=system |
"{B49F450B-7601-4E1F-89A0-F21AC945AD2E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B4A92AFF-EA6F-482C-B12E-7D522E97F348}" = lport=8080 | protocol=6 | dir=in | app=c:\program files (x86)\common files\research in motion\nginx\nginx.exe |
"{B9189C0D-475A-4772-8171-693D715D5285}" = lport=10243 | protocol=6 | dir=in | app=system |
"{BED5C951-73BB-4A6E-A6A2-3A154FD32BAE}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C636C905-60CF-4965-8405-461410E67C62}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C9F12231-915E-457A-8529-5880A3149D85}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E4EAB50B-6736-4502-9106-E0ACC4618D18}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{F2A877C9-AC1D-42F7-8301-BA16A23157C6}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F85F67C4-760D-4E03-A3B0-CE975A720B0D}" = lport=445 | protocol=6 | dir=in | app=system |
"{F969E448-575B-48B5-8DF1-A2F21FEDCB3E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08861E7C-B3AA-4D80-945D-36A2C7A41FFB}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{0BDF06AF-5327-443B-803F-2A54FD74A726}" = protocol=17 | dir=in | app=c:\program files (x86)\yourfiledownloader\yourfile.exe |
"{0F7E007E-29D0-4F31-A780-620C63D32239}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{11CB86A1-40AB-4E73-99E3-9755AAC0FD2C}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{163ACC32-D453-401A-9CEA-05CF1D918C2F}" = protocol=6 | dir=in | app=c:\users\otas\appdata\roaming\dropbox\bin\dropbox.exe |
"{16AACA48-D8D4-4E97-9482-C42B3595BEF0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{18A4F816-76B7-4F3A-AD1F-168EF0929E72}" = protocol=17 | dir=in | app=c:\program files (x86)\arcsoft\totalmedia 3.5\totalmedia.exe |
"{1C419159-F02B-4DB7-B13F-078003FE1B59}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ids.application.exe |
"{1D57AAF7-19AD-49C8-87A6-E29234E16A1A}" = protocol=6 | dir=in | app=c:\program files (x86)\yourfiledownloader\yourfile.exe |
"{2054428E-8F2E-47DC-812A-A7F697CDEF9F}" = protocol=17 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{22B857FB-170C-4459-9257-F9F6BCEC6CFE}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ids.application.exe |
"{23CDC410-E62D-454B-809B-B335C39FB3B3}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\research in motion\tunnel manager\peermanager.exe |
"{2437293D-DBA9-480B-BE2F-C21C47E0A34D}" = protocol=17 | dir=in | app=c:\program files\common files\common desktop agent\cdasrv.exe |
"{24F1C65A-E613-41E0-BCD4-C5B790EB3C7D}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\idsalert.exe |
"{25283120-13D5-4011-B737-7BD6AEF0A0AC}" = protocol=17 | dir=in | svc=* | app=c:\program files (x86)\common files\research in motion\tunnel manager\tunmgr.exe |
"{271D8BE6-78E8-41D4-8D27-F026452615ED}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{272AFD09-4813-4B39-BE26-3422AA2C0FA1}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2B0BC56B-BACC-4168-A3A6-211CB4DBBE55}" = protocol=17 | dir=in | app=c:\windows\twain_32\samsung\scx3200\scan2pc.exe |
"{2FD67F06-0456-42B7-BB67-9BEE11008726}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{3137D4B8-5D86-46F7-8A6F-6E029D98E12D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{31702677-0C65-448A-837F-DC65529019AE}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{322E8F9C-38A9-47FD-8D46-722151600095}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ordersupplies.exe |
"{37FBA64F-F3DA-4A0D-94CE-98CFB28229AA}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\umi.exe |
"{3E48FC75-4ECB-4DF6-A9B3-05BB781A352C}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{41B9523B-9C70-4ADA-84BD-66CF3730F367}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\cdas2pc\cdas2pc.exe |
"{42A6FAB8-0072-4501-9A15-C6730079D55B}" = protocol=17 | dir=in | app=c:\windows\twain_32\samsung\scx3200\sscan2io.exe |
"{4A57C0EC-5F20-4EA2-A967-1D21C08AFAB8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4AF304A3-0F0F-448E-B6C2-6F1833C0B639}" = protocol=6 | dir=in | app=c:\program files (x86)\arcsoft\totalmedia 3.5\totalmedia.exe |
"{4F1F71FF-E6DA-462C-B813-701BFED3A08B}" = protocol=6 | dir=in | app=c:\windows\twain_32\samsung\scx3200\scan2pc.exe |
"{4F45E723-F517-4AFB-AFDE-58B39BCFF828}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\kmpprocess.exe |
"{53A136FF-45E7-40E2-A21A-D9FD6AD80722}" = protocol=6 | dir=in | app=c:\program files (x86)\gsc world publishing\s.t.a.l.k.e.r. - call of pripyat\bin\xrengine.exe |
"{5476BCBB-A803-46C6-992D-1DC34FE60867}" = protocol=17 | dir=in | app=c:\users\otas\appdata\roaming\dropbox\bin\dropbox.exe |
"{557BFDC1-FA88-4AD0-A9EC-0BC2EE09667D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{569539D3-5FE6-47D6-A38E-A33FCED322A9}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\studio.exe |
"{575023C0-6511-44AA-8631-5AA72635AF4E}" = protocol=17 | dir=in | app=c:\windows\twain_32\samsung\scanmgr.exe |
"{5A9C56E6-971A-4D37-B3F9-6C94C4BA2CEF}" = protocol=6 | dir=out | app=system |
"{5B538D05-2B74-4BCC-9EAE-27B3F122F0DD}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{64C58526-9654-42DA-A8FB-7700E09EEAC3}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\cdas2pc\cdas2pc.exe |
"{6BD4D6A9-04BA-46C4-BA8F-ED3536FBB947}" = protocol=6 | dir=in | app=c:\windows\twain_32\samsung\scx3200\sscan2io.exe |
"{79AD475B-3EC7-471F-A548-5DBEFB2F4C2A}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\kmpprocess.exe |
"{7F27DA52-F639-4B71-9659-CECC9C21DC1D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7F9AA5F0-04CC-4A5E-97BD-63C9DB6546DC}" = protocol=6 | dir=in | svc=* | app=c:\program files (x86)\common files\research in motion\tunnel manager\mdnsresponder.exe |
"{83D4DEA6-3CEC-4911-850E-211E33166FDB}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{942FC838-8D70-4EC6-94B9-5B940A2CFDB2}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\ordersupplies.exe |
"{978D5E54-6AAE-4DB3-BCA6-91224DE1C015}" = protocol=6 | dir=in | app=c:\program files (x86)\gsc world publishing\s.t.a.l.k.e.r. - call of pripyat\bin\dedicated\xrengine.exe |
"{A2042732-046D-470D-BC1C-DCDEC64CB6DF}" = protocol=17 | dir=in | app=c:\program files (x86)\gsc world publishing\s.t.a.l.k.e.r. - call of pripyat\bin\xrengine.exe |
"{AAA8D3C6-86D8-4656-987B-FCCFD15664FE}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{AC65680A-EF50-481C-8DF0-375FCBB5313D}" = protocol=58 | dir=in | app=system |
"{B18285B4-A477-4F1B-AF83-0981ED58362E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B7B2A6DB-A5E8-478E-AF5A-99F13878E08E}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\kmpprocess.exe |
"{BAB5FDD6-169C-42E6-9681-D4FDAD01E30C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{BD89EB70-B014-46DF-8A17-561ED667E92B}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\rm.exe |
"{C301DE0A-8DB7-4BFB-BB84-CE50B017AF61}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C54E8859-0033-4832-AA15-67715B9B72B6}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{C56D6470-2C04-4D7B-8D3C-42D0F26B4603}" = protocol=6 | dir=in | svc=* | app=c:\program files (x86)\common files\research in motion\tunnel manager\tunmgr.exe |
"{CF62AC11-A62F-4FB8-955F-43EA84C2FCC0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{CFFC4497-F844-4839-A71E-FE8E63D9812D}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{D0248CA1-41D3-4765-9409-53C990091FAD}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\studio.exe |
"{D1A1C3EE-5DD5-4CFD-938E-8ECBBA2B1FCE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{D2E39AF5-30DD-492D-8A0D-B87CFF8933C7}" = protocol=6 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{D5230F72-5B48-4A9A-98E0-FA11AF72F46F}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\kmpprocess.exe |
"{D5E87B81-3F78-4B05-B14E-8A4FBB96EF93}" = dir=in | app=c:\program files (x86)\cyberlink\homemedia\homemedia.exe |
"{D9712347-5558-4454-A9EE-1FC1C4946421}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{DA41A05D-516A-40E6-BDF1-806009B2956C}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\easy printer manager\idsalert.exe |
"{E3C7594A-42E3-4940-9630-ECF505CB7EFC}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\rm.exe |
"{E811774E-A2E1-49CD-8064-9B57CF612C32}" = protocol=17 | dir=in | svc=* | app=c:\program files (x86)\common files\research in motion\tunnel manager\mdnsresponder.exe |
"{EC706A78-0797-471B-9F97-389A4101F8B2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{ECCF857D-8401-42EE-A964-9D0BBD882858}" = protocol=6 | dir=in | app=c:\program files\common files\common desktop agent\cdasrv.exe |
"{F0265C62-D03F-4319-B978-FA8071B4EF26}" = protocol=17 | dir=in | app=c:\program files (x86)\gsc world publishing\s.t.a.l.k.e.r. - call of pripyat\bin\dedicated\xrengine.exe |
"{F23526F5-171E-4019-95A7-08D39AF14519}" = protocol=6 | dir=in | app=c:\windows\twain_32\samsung\scanmgr.exe |
"{F842B30A-5399-4AAA-87C2-79B90D8C3740}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\umi.exe |
"{F8B1907C-ED6A-48D3-BD4B-4BA2C8C89FB9}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{FE581862-09E8-439F-8484-4AEA6AAE95CD}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"TCP Query User{493A7BD0-3DCE-438C-8413-AD1AA60497EE}C:\users\otas\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\otas\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{4EF12FEC-BE24-4102-A6F5-3D9955E4A964}E:\hry\crysis2 instalace hry\bin32\crysis2.exe" = protocol=6 | dir=in | app=e:\hry\crysis2 instalace hry\bin32\crysis2.exe |
"TCP Query User{8184E89D-B50E-4DAF-8ACD-DDC9CBC320C9}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ea games\battlefield heroes\bfheroes.exe |
"TCP Query User{ABAB5642-A0C4-46CA-B0EB-7797451CD03B}E:\hry\crysis2 instalace hry\bin32\crysis2.exe" = protocol=6 | dir=in | app=e:\hry\crysis2 instalace hry\bin32\crysis2.exe |
"UDP Query User{9E7351B3-22BE-4DDD-BA28-20E0A494DECF}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ea games\battlefield heroes\bfheroes.exe |
"UDP Query User{A8F741FF-3E87-4089-9F2F-42F0248C18A0}C:\users\otas\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\otas\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{C767D2C0-642A-474B-9997-4C8B27E264C0}E:\hry\crysis2 instalace hry\bin32\crysis2.exe" = protocol=17 | dir=in | app=e:\hry\crysis2 instalace hry\bin32\crysis2.exe |
"UDP Query User{EC03C602-0AAB-48DE-9807-AEED5DC28326}E:\hry\crysis2 instalace hry\bin32\crysis2.exe" = protocol=17 | dir=in | app=e:\hry\crysis2 instalace hry\bin32\crysis2.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{031A0E14-0413-4C97-9772-2639B782F46F}" = Common Desktop Agent
"{0919C44F-F18A-4E3B-A737-03685272CE72}" = Windows Live Remote Service Resources
"{1553D712-B35F-4A82-BC72-D6B11A94BE3E}" = Windows Live Remote Service Resources
"{1685AE50-97ED-485B-80F6-145071EE14B0}" = Windows Live Remote Service Resources
"{17A4FD95-A507-43F1-BC92-D8572AF8340A}" = Windows Live Remote Service Resources
"{19F09425-3C20-4730-9E2A-FC2E17C9F362}" = Windows Live Remote Service Resources
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}" = Windows Live Remote Service Resources
"{21B133D6-5979-47F0-BE1C-F6A6B304693F}" = Visual Studio 2010 x64 Redistributables
"{22AB5CFD-B3DB-414E-9F99-4D024CCF1DA6}" = Windows Live Remote Client Resources
"{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources
"{2C1A6191-9804-4FDC-AB01-6F9183C91A13}" = Windows Live Remote Client Resources
"{2F304EF4-0C31-47F4-8557-0641AAE4197C}" = Windows Live Remote Client Resources
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{350FD0E7-175A-4F86-84EF-05B77FCD7161}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{456FB9B5-AFBC-4761-BBDC-BA6BAFBB818F}" = Windows Live Remote Client Resources
"{4710662C-8204-4334-A977-B1AC9E547819}" = Broadcom Card Reader Driver Installer
"{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4C2E49C0-9276-4324-841D-774CCCE5DB48}" = Windows Live Remote Client Resources
"{5141AA6E-5FAC-4473-BFFB-BEE69DDC7F2B}" = Windows Live Remote Service Resources
"{5151E2DB-0748-4FD1-86A2-72E2F94F8BE7}" = Windows Live Remote Service Resources
"{57F2BD1C-14A3-4785-8E48-2075B96EB2DF}" = Windows Live Remote Service Resources
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5F44A3A1-5D24-4708-8776-66B42B174C64}" = Windows Live Remote Client Resources
"{5FCD6EFE-C2E7-4D77-8212-4BA223D8DF8E}" = Windows Live Remote Client Resources
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{5FEAD3E5-A158-4B66-B92B-0C959D7CF838}" = Windows Live Remote Service Resources
"{61407251-7F7D-4303-810D-226A04D5CFF3}" = Windows Live Remote Service Resources
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{692CCE55-9EAE-4F57-A834-092882E7FE0B}" = Windows Live Remote Client Resources
"{6C9D3F1D-DBBE-46F9-96A0-726CC72935AF}" = Windows Live Remote Service Resources
"{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}" = Windows Live Remote Service Resources
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Ovladače videa společnosti Pinnacle
"{702A632F-99CE-4E2D-B8F2-BF980E9CF62F}" = Windows Live Remote Client Resources
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7AEC844D-448A-455E-A34E-E1032196BBCD}" = Windows Live Remote Service Resources
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{850B8072-2EA7-4EDC-B930-7FE569495E76}" = Windows Live Remote Client Resources
"{8970AE69-40BE-4058-9916-0ACB1B974A3D}" = Windows Live Remote Client Resources
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{8F7F2D9C-2DBE-4F10-9C7C-2724110A3339}" = Windows Live Remote Service Resources
"{90140000-006D-0405-1000-0000000FF1CE}" = Microsoft Office Klikni a spusť 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97A295A7-8840-4B35-BB61-27A8F4512CA3}" = Windows Live Remote Service Resources
"{9E9C960F-7F47-46D5-A95D-950B354DE2B8}" = Windows Live Remote Service Resources
"{A060182D-CDBE-4AD6-B9B4-860B435D6CBD}" = Windows Live Remote Client Resources
"{A324DC11-FF02-3CE8-9D6F-67EBC006D970}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A508D5A2-3AC1-4594-A718-A663D6D3CF11}" = Windows Live Remote Service Resources
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{A6E0F6BE-30AC-4D36-97B0-1AC20E23CB83}" = Windows Live Remote Client Resources
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{B0BF8602-EA52-4B0A-A2BD-EDABB0977030}" = Windows Live Remote Client Resources
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B680A663-1A15-47A5-A07C-7DF9A97558B7}" = Windows Live Remote Client Resources
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{C504EC13-E122-4939-BD6E-EE5A3BAA5FEC}" = Windows Live Remote Client Resources
"{C91DCB72-F5BB-410D-A91A-314F5D1B4284}" = Broadcom Gigabit NetLink Controller
"{C9F05151-95A9-4B9B-B534-1760E2D014A5}" = Windows Live Remote Client Resources
"{CFF3C688-2198-4BC3-A399-598226949C39}" = Windows Live Remote Client Resources
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D1C1556C-7FF3-48A3-A5D6-7126F0FAFB66}" = Windows Live Remote Client Resources
"{D3E4F422-7E0F-49C7-8B00-F42490D7A385}" = Windows Live Remote Service Resources
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DBEDAF67-C5A3-4C91-951D-31F3FE63AF3F}" = Windows Live Remote Client Resources
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{ED421F97-E1C3-4E78-9F54-A53888215D58}" = Windows Live Remote Client Resources
"{EFB20CF5-1A6D-41F3-8895-223346CE6291}" = Windows Live Remote Service Resources
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6CB2C5F-B2C1-4DF1-BF44-39D0DC06FE6F}" = Windows Live Remote Service Resources
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"{FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}" = Windows Live Remote Client Resources
"CCleaner" = CCleaner
"Elantech" = ETDWare PS/2-X64 8.0.6.0_WHQL
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"RmTablet" = Tablet Driver With Macrokey Manager
"WinRAR archiver" = WinRAR 4.01 (64-bit)
"ZonerPhotoStudio14_CZ_is1" = Zoner Photo Studio 14

Ot@s · #24 Příspěvek od **Ot@s** » 02 led 2014 19:27

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007F778D-F15C-4EAB-AE92-071D21FAF632}" = Adobe Photoshop Elements 9
"{00884F14-05BD-4D8E-90E5-1ABF78948CA4}" = Windows Live Mesh
"{0125DB4D-98A0-4DBF-B68A-23BF08FFA6A3}" = Windows Live Messenger
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Video Web Camera
"{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
"{0557BBDA-69D3-4FA4-A93C-A5300F7034B4}" = Windows Live Writer
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common
"{06B05153-97E4-427E-B1A8-E098F6C5E52F}" = Windows Live Essentials
"{073F306D-9851-4969-B828-7B6444D07D55}" = Windows Live Photo Common
"{0785A0B6-07DF-43CF-B147-E1EB4CEA0345}" = Windows Live Messenger
"{07A540AB-D785-11D5-8E89-0090275862A0}" = Corel Graphics Suite 11
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{09922FFE-D153-44AE-8B60-EA3CB8088F93}" = Windows Live UX Platform Language Pack
"{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
"{0A9256E0-C924-46DE-921B-F6C4548A1C64}" = Windows Live Messenger
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Backup Manager V3
"{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack
"{0C975FCC-A06E-4CB6-8F54-A9B52CF37781}" = Windows Liven sähköposti
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
"{10186F1A-6A14-43DF-A404-F0105D09BB07}" = Windows Live Mail
"{110668B7-54C6-47C9-BAC4-1CE77F156AF5}" = Windows Live Mesh
"{11417707-1F72-4279-95A3-01E0B898BBF5}" = Windows Live Mesh
"{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
"{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar
"{120C160F-F53D-4A15-A873-E79BF5B98B48}" = Windows Live Photo Common
"{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
"{133D9D67-D475-4407-AC3C-D558087B2453}" = Windows Live Movie Maker
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
"{17835B63-8308-427F-8CF5-D76E0D5FE457}" = Windows Live Essentials
"{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
"{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1A72337E-D126-4BAF-AC89-E6122DB71866}" = Windows Liven valokuvavalikoima
"{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
"{1D5EB783-25F8-495B-8B01-DE6D1BFBB8B4}" = VideoCam Suite 3.0
"{1D6C2068-807F-4B76-A0C2-62ED05656593}" = Windows Live Writer
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FC83EAE-74C8-4C72-8400-2D8E40A017DE}" = Windows Live Writer
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20381A8A-808E-4A53-B6CD-AD2B85E16365}" = Windows Live UX Platform Language Pack
"{220C7F8C-929D-4F71-9DC7-F7A6823B38E4}" = Windows Live UX Platform Language Pack
"{226F0D93-76DE-4F1C-B14D-DE10443ADB60}" = Windows Live Movie Maker
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{249EE21B-8EDD-4F36-8A23-E580E9DBE80A}" = Windows Live Mail
"{24DF33E0-F924-4D0D-9B96-11F28F0D602D}" = Windows Live UX Platform Language Pack
"{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
"{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
"{25CD4B12-8CC5-433E-B723-C9CB41FA8C5A}" = Windows Live Writer
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217009F0}" = Java 7 Update 9
"{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 25
"{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{28B9D2D8-4304-483F-AD71-51890A063A74}" = Windows Live Photo Common
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2AD2DD70-27F7-4343-BB4E-DE50A32D854B}" = Windows Live Messenger
"{2BA5FD10-653F-4CAF-9CCD-F685082A1DC1}" = Windows Live Writer
"{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
"{2C7E8AA1-9C03-4606-BF34-5D99D07964DA}" = Windows Live Messenger
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{2D3E034E-F76B-410A-A169-55755D2637BB}" = Windows Live Mesh
"{2E50E321-4747-4EB5-9ECB-BBC6C3AC0F31}" = Windows Live Writer Resources
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{303143DD-1F6D-4BC5-9342-FFC2E19B2DBD}" = Windows Live Messenger
"{3125D9DE-8D7A-4987-95F3-8A42389833D8}" = Windows Live Writer Resources
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{34C4F5AF-D757-4E6A-ABCA-65AB5A50A1A8}" = Windows Live Messenger
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{39BDD209-5704-480C-9F4A-B69D0370DDBB}" = Windows Live Messenger
"{39F95B0B-A0B7-4FA7-BB6C-197DA2546468}" = Windows Live Mesh
"{3B72C1E0-26A1-40F6-8516-D50C651DFB3C}" = Windows Live Essentials
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3D0C22FA-96D7-4789-BC5B-991A5A99BFFA}" = Windows Live Messenger
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Packard Bell Power Management
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
"{406FB8A4-F539-48A9-809C-F94706F9C9F6}_is1" = S.T.A.L.K.E.R. - Call of Pripyat [v1.6.01]
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{410DF0AA-882D-450D-9E1B-F5397ACFFA80}" = Windows Live Essentials
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{429DF1A0-3610-4E9E-8ACE-3C8AC1BA8FCA}" = Windows Live Photo Gallery
"{433EACD8-4747-4A6A-826A-FFA9F39B0D40}" = Elements 9 Organizer
"{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
"{4412F224-3849-4461-A3E9-DEEF8D252790}" = Visual Studio C++ 10.0 Runtime
"{4444F27C-B1A8-464E-9486-4C37BAB39A09}" = Фотогалерия на Windows Live
"{458F399F-62AC-4747-99F5-499BBF073D29}" = Windows Live Writer Resources
"{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources
"{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
"{4736B0ED-F6A1-48EC-A1B7-C053027648F1}" = Galeria fotogràfica del Windows Live
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{48F597DD-D397-4CFA-91A0-4C033A0113BD}" = Windows Live Mail
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A04DB63-8F81-4EF4-9D09-61A2057EF419}" = Windows Live Essentials
"{4A275FD1-2F24-4274-8C01-813F5AD1A92D}" = Windows Live Messenger
"{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
"{4C378B16-46B7-4DA1-A2CE-2EE676F74680}" = Windows Live UX Platform Language Pack
"{4D141929-141B-4605-95D6-2B8650C1C6DA}" = Windows Live UX Platform Language Pack
"{4D7BAC8A-51B8-4243-8567-1415C4272D13}" = Windows Live Writer
"{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack
"{5275D81E-83AD-4DE4-BC2B-6E6BA3A33244}" = Windows Live Writer Resources
"{5454085C-840F-4070-8FAA-441000038301}" = BioShock 2
"{5454085C-840F-4070-8FAA-441000038302}" = BioShock 2
"{5454085C-840F-4070-8FAA-441000038303}" = BioShock 2
"{5495E9A4-501A-4D4C-87C9-E80916CA9478}" = Windows Live UX Platform Language Pack
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{556F2137-B772-43BB-9A45-E0275234DD16}" = Free Notes & Office Ink
"{55D8440D-6577-46DC-9571-8E5E3046AC11}" = ASUS US2-400 Utilities
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5C2F5C1B-9732-4F81-8FBF-6711627DC508}" = Windows Live Fotogalleri
"{5CDCB19B-1C44-46EE-82D6-3FA85A531DE8}" = ArcSoft TotalMedia 3.5
"{5CF5B1A5-CBC3-42F0-8533-5A5090665862}" = Windows Live Mesh
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5D2E7BD7-4B6F-4086-BA8A-E88484750624}" = Windows Live Writer Resources
"{5D90ABE5-8A35-4947-8269-6F40BCE47A95}" = Windows Live Messenger
"{5DA7D148-D2D2-4C67-8444-2F0F9BD88A06}" = Windows Live Writer
"{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
"{5F6E678A-7E61-448A-86CB-BC2AD1E04138}" = Windows Live Messenger
"{6033673D-2530-4587-8AD0-EB059FC263F9}" = Crysis® 2
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{60C3C026-DB53-4DAB-8B97-7C1241F9A847}" = Windows Live Movie Maker
"{625D45F0-5DCB-48BF-8770-C240A84DAAEB}" = Windows Live Mesh
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}" = Nero Multimedia Suite 10 Essentials
"{63AE67AA-1AB1-4565-B4EF-ABBC5C841E8D}" = Windows Live Messenger
"{63CF7D0C-B6E7-4EE9-8253-816B613CC437}" = Windows Live Mail
"{640798A0-A4FB-4C52-AC72-755134767F1E}" = Windows Live Movie Maker
"{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live
"{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh
"{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6986737B-F286-40D1-87AF-938339DCF6AB}" = Windows Live Messenger
"{69C9C672-400A-43A0-B2DE-9DB38C371282}" = Windows Live Writer
"{69CAC24D-B1DC-4B97-A1BE-FE21843108FE}" = Windows Live Writer Resources
"{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
"{6A563426-3474-41C6-B847-42B39F1485B2}" = Windows Live Messenger
"{6ABE832B-A5C7-44C1-B697-3E123B7B4D5B}" = Windows Live Mesh
"{6B556C37-8919-4991-AC34-93D018B9EA49}" = Windows Live Photo Common
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{6D30E864-46AE-435B-8230-8B5D42B4AE37}" = Windows Live Messenger
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6EE9F44A-B8C7-4CDB-B2A9-441AF2AE315A}" = Windows Live Messenger
"{6EF2BE2C-3121-48B7-B7A6-C56046B3A588}" = Windows Live Movie Maker
"{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{709E38A9-7F80-4598-96CC-44B0D553FECE}" = Windows Live Messenger
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-packardbell" = WildTangent Games App (Packard Bell Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71527C7C-5289-4CB2-88C9-23344C0FF6C1}" = Windows Live Movie Maker
"{71A81378-79D5-40CC-9BDC-380642D1A87F}" = Windows Live Writer
"{71C95134-F6A9-45E7-B7B3-07CA6012BF2A}" = Windows Live Mesh
"{7272F232-A7E0-4B2B-A5D2-71B7C5E2379C}" = Windows Live Fotótár
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7327080F-6673-421F-BBD9-B618F357EEB3}" = Windows Live UX Platform Language Pack
"{734104DE-C2BF-412F-BB97-FCCE1EC94229}" = Windows Live Writer Resources
"{7373E17D-18E0-44A7-AC3A-6A3BFB85D3B3}" = Windows Live Movie Maker
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
"{748590DB-44CD-48D2-8585-2496BBFE919F}" = DDPB
"{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
"{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
"{7655E113-C306-11D9-A373-0050BAE317E1}" = MCE Software Encoder 1.1
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
"{7ADFA72D-2A9F-4DEC-80A5-2FAA27E23F0F}" = Windows Live Photo Common
"{7AF8E500-B349-4A77-8265-9854E9A47925}" = Windows Live Movie Maker
"{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}" = Pošta Windows Live
"{7C2A3479-A5A0-412B-B0E6-6D64CBB9B251}" = Windows Live Photo Common
"{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
"{7D0DE76C-874E-4BDE-A204-F4240160693E}" = Windows Live Photo Common
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7D926AD2-16D6-42C2-8CA1-AB09E96040BA}" = Windows Live Writer Resources
"{7D99B933-E29C-4599-92F0-DAED2AF041E3}" = Windows Live Essentials
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{7E90B133-FF47-48BB-91B8-36FC5A548FE9}" = Windows Live Writer Resources
"{7F6021AE-E688-4D03-843A-C2260482BA0D}" = Windows Live Messenger
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management
"{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
"{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{827D3E4A-0186-48B7-9801-7D1E9DD40C07}" = Windows Live Essentials
"{82803FF3-563F-414F-A403-8D4C167D4120}" = Windows Live Mail
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{84267681-BF16-40B6-9564-27BC57D7D71C}" = Windows Live Photo Common
"{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
"{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{861B1145-7762-4794-B40C-3FF0A389DFE6}" = Windows Live Photo Gallery
"{86F444A5-C9B9-41DC-AF28-B5E46F5497C7}" = Windows Live Argazki Galeria
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{88359341-883A-4BFF-A201-BF531AD9D235}" = Print To Go 2.0
"{885F1BCD-C344-4758-85BD-09640CF449A5}" = Windows Live Photo Gallery
"{8909CFA8-97BF-4077-AC0F-6925243FFE08}" = Windows Liven asennustyökalu
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CF5D47D-27B7-49D6-A14F-10550B92749D}" = Windows Live UX Platform Language Pack
"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E285C75-9BE2-4349-972B-DECDDF472656}" = Windows Live Writer Resources
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0405-0000-0000000FF1CE}" = Sada Compatibility Pack pro systém Office 2007
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90140011-0066-0405-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - čeština
"{924B4D82-1B97-48EB-8F1E-55C4353C22DB}" = Windows Live Mail
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{93C4B7D5-4E00-491F-BA3E-25B7B63EE7F6}" = Windows Live Mail
"{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{95140000-00AF-0405-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
"{99BE7F5D-AB52-4404-9E03-4240FFAA7DE9}" = Windows Live Mesh
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DA3F03B-2CEE-4344-838E-117861E61FAF}" = Windows Live Mail
"{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
"{9E2C5B0E-7A2D-4767-A9B2-77469FB1873A}" = Windows Live Mesh
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A101F637-2E56-42C0-8E08-F1E9086BFAF3}" = Windows Live Movie Maker
"{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
"{A23660A9-073B-4F8F-A3E4-EC8C262A6CE4}" = BlackBerry Link
"{A2AA4204-C05A-4013-888A-AD153139297F}" = PC Connectivity Solution
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = HomeMedia
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AADD1C8F-D59F-4D55-A726-768C71A205A8}" = Pinnacle Studio 14
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB0B2113-5B96-4B95-8AD1-44613384911F}" = Windows Live Mesh
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
"{ABE2F2AA-7ADC-4717-9573-BF3F83C696AC}" = Windows Live Mail
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.8) - Czech
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
"{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
"{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
"{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B0AD205F-60D0-4084-AFB8-34D9A706D9A8}" = Windows Live Essentials
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
"{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
"{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer
"{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
"{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7B67AA5-12DA-4F01-918D-B1BF66779D8A}" = Windows Live Writer Resources
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BD4EBDB5-EB14-4120-BB04-BE0A26C7FB3E}" = Windows Live Photo Common
"{BD695C2F-3EA0-4DA4-92D5-154072468721}" = Windows Live Fotoğraf Galerisi
"{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
"{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh
"{BF6CF460-40C3-49BA-800A-4B934B6498B1}" = Scan Assistant
"{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
"{C01FCACE-CC3D-49A2-ADC2-583A49857C58}" = Windows Live Essentials
"{C08D5964-C42F-48EE-A893-2396F9562A7C}" = Windows Live Mesh
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C1C9D199-B4DD-4895-92DD-9A726A2FE341}" = Windows Live Writer
"{C2229A1A-AC81-42E4-B514-98A71BB436F0}" = ASUS GadgeTV
"{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2EECB42-2C7F-11E3-8960-00163E98E7D0}" = Evernote v. 5.0.2
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C8421D85-CA0E-4E93-A9A9-B826C4FB88EA}" = Windows Live Mail
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live
"{CB66242D-12B1-4494-82D2-6F53A7E024A3}" = Galerie foto Windows Live
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CD442136-9115-4236-9C14-278F6A9DCB3F}" = Windows Live Movie Maker
"{CD7CB1E6-267A-408F-877D-B532AD2C882E}" = Windows Live Photo Common
"{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
"{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF671BFE-6BA3-44E7-98C1-500D9C51D947}" = Windows Live Photo Gallery
"{D07B1FDA-876B-4914-9E9A-309732B6D44F}" = Windows Live Mail
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
"{D31169F2-CD71-4337-B783-3E53F29F4CAD}" = Windows Live Mail
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D54A52A8-DF24-4CE8-850B-074CA47DFA74}" = Windows Live Messenger
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D6CBB3B2-F510-483D-AE0D-1CF3F43CF1EE}" = Windows Live Writer Resources
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{D82F4E66-B3F6-4482-879E-AAC745CCFE0F}" = DraftSight
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA29F644-2420-4448-8128-1331BE588999}" = Windows Live Writer
"{DA60AB6B-6C9C-4B5F-BC61-3B0D9BCBD50B}" = ASUS U3100MINI PLUS V2 Utilities
"{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
"{DB1208F4-B2FE-44E9-BFE6-8824DBD7891B}" = Windows Live Movie Maker
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.10.324
"{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
"{DCAB6BA7-6533-44BF-9235-E5BF33B7431C}" = Windows Live Writer
"{DDC1E1BD-7615-4186-89E1-F5F43F9B6491}" = Windows Live Movie Maker
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
"{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2AE009D-37E5-4724-A6B8-0ED6A6BA4F68}" = Elements STI Installer
"{E2B4FE1C-2CFA-47EE-A88C-A14D0FF1F0B0}" = BBSAK
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E5377D46-83C5-445A-A1F1-830336B42A10}" = Windows Live Galerija fotografija
"{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer
"{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}" = Microsoft SQL Server Compact 3.5 SP1 English
"{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}" = Fotogalerija Windows Live
"{E5DD4723-FE0B-436E-A815-DC23CF902A0B}" = Windows Live UX Platform Language Pack
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E7688C7D-DE09-4D43-9785-534EDE9BC18E}" = Windows Live Messenger
"{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
"{E8524B28-3BBB-4763-AC83-0E83FE31C350}" = Windows Live Writer
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{E9D98402-21AB-4E9F-BF6B-47AF36EF7E97}" = Windows Live Writer Resources
"{EA777812-4905-4C08-8F6E-13BDCC734609}" = Windows Live UX Platform Language Pack
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Packard Bell Updater
"{EE492B20-FB15-4A98-883C-3054354A11F8}" = Windows Live Messenger
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.174
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F0F5D89A-197C-495B-827E-3E98B811CD2E}" = Windows Live Photo Common
"{F0F9505B-3ACF-4158-9311-D0285136AA00}" = Windows Live Essentials
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F13587F7-AA4C-4C2E-AE7D-F33F3CCE57A9}" = Windows Live Messenger
"{F302F4F0-588D-6501-1ACF-BE3FDCC9135D}" = Adobe Community Help
"{F4BEA6C1-AAC3-4810-AAEA-588E26E0F237}" = Windows Live UX Platform Language Pack
"{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
"{F5C372A1-40F3-49DA-A049-F75CDE9177DC}" = Pinnacle Studio Ultimate Collection Plugins
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F694D1F7-1F12-4550-9B7A-C871273ABAD5}" = Windows Live Messenger
"{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
"{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
"{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F8B2F1B6-5EB5-489C-8DB3-155464925C4A}" = Faces of War
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
"{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
"{FCBC19F7-E068-4B7A-ACBB-CE9CCEB4B21F}" = Windows Live Messenger
"{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FEEF7F78-5876-438B-B554-C4CC426A4302}" = Windows Live Essentials
"{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FF737490-5A2D-4269-9D82-97DB2F7C0B09}" = Windows Live Movie Maker
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = KMP Service
"4Story_CZ_is1" = 4Story CZ 4.1.98
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 9" = Adobe Photoshop Elements 9
"AoA DVD Ripper_is1" = AoA DVD Ripper
"aTube Catcher" = aTube Catcher
"avast" = avast! Pro Antivirus
"BlackBerry_10_Desktop" = BlackBerry Link
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cool Edit Pro v1.2a" = Cool Edit Pro v1.2a
"DVD Decrypter" = DVD Decrypter (Remove Only)
"Google Chrome" = Google Chrome
"HijackThis" = HijackThis 2.0.2
"Identity Card" = Identity Card
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Video Web Camera
"InstallShield_{07A540AB-D785-11D5-8E89-0090275862A0}" = CorelDRAW Graphics Suite 11
"InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Packard Bell MyBackup
"InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"LManager" = Launch Manager
"Mozilla Firefox 26.0 (x86 cs)" = Mozilla Firefox 26.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MyTomTom" = MyTomTom 3.2.0.1116
"Office14.Click2Run" = Microsoft Office Klikni a spusť 2010
"Packard Bell Registration" = Packard Bell Registration
"Packard Bell Screensaver" = Packard Bell ScreenSaver
"Packard Bell Welcome Center" = Welcome Center
"Print_To_Go" = Print To Go 2.0
"ProFact 3.0 Free_is1" = ProFact 3.0 Free
"PunkBusterSvc" = PunkBuster Services
"Red Giant ToonIt Studio" = Red Giant ToonIt Studio
"Samsung Easy Printer Manager" = Samsung Easy Printer Manager
"Samsung SCX-3200 Series" = Samsung SCX-3200 Series
"T-Mobile Communication Centre" = T-Mobile Internet Manager
"Trapcode Particular Studio" = Trapcode Particular Studio
"TVRTLDrv" = ASUS U3100MINI PLUS V2
"Update Engine" = Sony Ericsson Update Engine
"VLC media player" = VLC media player 2.1.0
"WildTangent packardbell Master Uninstall" = Packard Bell Games
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.1
"WinZip" = WinZip
"WTA-06eb6600-64b5-47c3-b6fa-7ff1ff2f3cfc" = Jewel Quest Solitaire
"WTA-07606b8a-2b3b-4542-be1e-1fbd0fb8a291" = FATE
"WTA-08088377-5408-490f-bc00-811ab5c6a155" = Slingo Deluxe
"WTA-0f12f38c-a64a-46af-b289-be2a46c95da0" = Mystery P.I. - The London Caper
"WTA-46208327-facf-4724-b4eb-fcd31a20c91a" = Virtual Villagers - The Secret City
"WTA-71cb4c31-7f0a-4f0e-8614-b0758e707d95" = Bejeweled 2 Deluxe
"WTA-7a931507-7018-49b2-8194-f5270f35e64a" = Zuma Deluxe
"WTA-813785b6-6024-4c2d-9ceb-4ed1e8a22c86" = Torchlight
"WTA-82596a95-dbbf-4624-92d7-4a0580689489" = Polar Bowler
"WTA-82c3f7f1-e3e5-4d3e-879e-fed9df6ddd15" = Wedding Dash
"WTA-93b4139e-5995-45d6-b869-7e49ad69221d" = John Deere Drive Green
"WTA-98473aaf-1a49-4a16-86b0-e0d836409520" = Diner Dash 2 Restaurant Rescue
"WTA-9e7c7af7-67b5-4fe6-b560-e140de7c5560" = Crazy Chicken Kart 2
"WTA-aa97fe7c-8120-467e-a783-7e1ffa9a52fc" = Plants vs. Zombies - Game of the Year
"WTA-b98c8cd9-181a-464d-b6f1-2e8e061acf54" = Penguins!
"WTA-c2b35758-fa65-4d7c-9f2d-924256554958" = Agatha Christie - 4:50 from Paddington
"WTA-f63728e7-2d28-4ae0-a675-d8025ecad800" = Chuzzle Deluxe
"Xvid_is1" = Xvid 1.1.3 final uninstall

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1538805423.www.idoklad.cz" = iDoklad
"Dropbox" = Dropbox
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 1/2/2014 1:11:37 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = 596: Could not write data to client because of error - aborting connection

Error - 1/2/2014 1:11:37 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = 596: DNSServiceGetAddrInfo v4v6 Ot@sZ10.local.

Error - 1/2/2014 1:11:37 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = ERROR: mDNSPlatformReadTCP - recv: 10053

Error - 1/2/2014 1:11:37 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = 636: ERROR: read_msg errno 0 (Operace byla dokončena úspěšně.)

Error - 1/2/2014 1:11:43 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = send_msg ERROR: failed to write 69 of 69 bytes to fd 612 errno 10053
(Software v hostitelském počítači ukončil vytvořené připojení.)

Error - 1/2/2014 1:11:43 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = 612: Could not write data to client because of error - aborting connection

Error - 1/2/2014 1:11:43 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = 612: DNSServiceGetAddrInfo v4v6 Ot@sZ10.local.

Error - 1/2/2014 1:11:44 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = ERROR: mDNSPlatformReadTCP - recv: 10053

Error - 1/2/2014 1:11:44 PM | Computer Name = kram | Source = RIM MDNS | ID = 100
Description = 620: ERROR: read_msg errno 0 (Operace byla dokončena úspěšně.)

Error - 1/2/2014 1:57:01 PM | Computer Name = kram | Source = Customer Experience Improvement Program | ID = 1008
Description =

[ Media Center Events ]
Error - 10/7/2013 1:37:00 PM | Computer Name = kram | Source = MCUpdate | ID = 0
Description = 19:37:00 - Chyba při připojování k Internetu 19:37:00 - Nelze kontaktovat
server..

Error - 10/7/2013 1:37:12 PM | Computer Name = kram | Source = MCUpdate | ID = 0
Description = 19:37:05 - Chyba při připojování k Internetu 19:37:05 - Nelze kontaktovat
server..

Error - 10/26/2013 10:24:07 AM | Computer Name = kram | Source = MCUpdate | ID = 0
Description = 16:23:24 - Chyba při připojování k Internetu 16:24:07 - Nelze kontaktovat
server..

Error - 10/26/2013 10:39:41 AM | Computer Name = kram | Source = MCUpdate | ID = 0
Description = 16:38:13 - Chyba při připojování k Internetu 16:39:35 - Nelze kontaktovat
server..

[ System Events ]
Error - 1/1/2014 12:41:51 PM | Computer Name = kram | Source = DCOM | ID = 10010
Description =

Error - 1/1/2014 12:41:57 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 1/1/2014 12:43:08 PM | Computer Name = kram | Source = Service Control Manager | ID = 7038
Description = Služba nvUpdatusService se nemohla přihlásit jako .\UpdatusUser s
aktuálně konfigurovaným heslem z důvodu následující chyby: %%1330 Chcete-li zajistit
správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management
Console (MMC).

Error - 1/1/2014 12:43:08 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku
následující chyby: %%1069

Error - 1/2/2014 1:10:01 PM | Computer Name = kram | Source = Application Popup | ID = 1060
Description = Načtení \SystemRoot\SysWow64\Drivers\ASPI32.SYS bylo zablokováno kvůli
nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi
ovladače.

Error - 1/2/2014 1:10:20 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 1/2/2014 1:10:45 PM | Computer Name = kram | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: ASPI32

Error - 1/2/2014 1:11:22 PM | Computer Name = kram | Source = DCOM | ID = 10010
Description =

Error - 1/2/2014 1:12:50 PM | Computer Name = kram | Source = Service Control Manager | ID = 7038
Description = Služba nvUpdatusService se nemohla přihlásit jako .\UpdatusUser s
aktuálně konfigurovaným heslem z důvodu následující chyby: %%1330 Chcete-li zajistit
správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management
Console (MMC).

Error - 1/2/2014 1:12:50 PM | Computer Name = kram | Source = Service Control Manager | ID = 7000
Description = Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku
následující chyby: %%1069

< End of report >

#25 Příspěvek od **Márty84** » 02 led 2014 19:52

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
AdobeARMservice
PanService
Skype C2C Service
gupdate
SkypeUpdate
AdobeFlashPlayerUpdateSvc
gupdatem

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:otl
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.chatzum.com/?q={searchTerms}
IE - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..\SearchScopes\{890C15F3-0F34-4D29-82D6-0F6566D50494}: "URL" = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=RY&apn_dtid=YYYYYYYYCZ&apn_uid=c302ef1a-fd96-4028-9b9a-695531110e52&apn_sauid=8F76F7E2-EDD7-4CD5-93F6-0378925AAA75
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKLM\..Trusted Domains: mojebanka.cz ([etrading] https in Trusted sites)
O15 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..Trusted Domains: mojebanka.cz ([*] https in Důvěryhodné servery)
O15 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..Trusted Domains: mojebanka.cz ([etrading] https in Důvěryhodné servery)
O15 - HKU\S-1-5-21-3243394068-3903203777-451099978-1001\..Trusted Domains: mojebanka.cz ([www] https in Důvěryhodné servery)
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
[2011/11/13 10:40:30 | 000,000,000 | ---D | M] -- C:\Users\Otas\AppData\Roaming\ESET
[1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[4 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[313 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:30FD0CBD

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-
"SunJavaUpdateSched"=-
"4StoryPrePatch"=-

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

Ot@s · #26 Příspěvek od **Ot@s** » 02 led 2014 20:33

Tak tady je ten log...ale na poprvé se OTL spustil v modrém okně a NTB se samavolně restaroval a po té uvedl do stavu nouze. Na podruhé proběhlo vše OK...

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56466 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Otas
->Temp folder emptied: 88320516 bytes
->Temporary Internet Files folder emptied: 26230391 bytes
->Java cache emptied: 6734314 bytes
->FireFox cache emptied: 372289852 bytes
->Google Chrome cache emptied: 6351561 bytes
->Flash cache emptied: 88702 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 41569560 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67978 bytes
RecycleBin emptied: 14970364531 bytes

Total Files Cleaned = 14,793.00 mb

[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Otas
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0.00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service PanService stopped successfully!
Service PanService deleted successfully!
Service Skype C2C Service stopped successfully!
Service Skype C2C Service deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\Software\Microsoft\Internet Explorer\SearchScopes\{890C15F3-0F34-4D29-82D6-0F6566D50494}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{890C15F3-0F34-4D29-82D6-0F6566D50494}\ not found.
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com deleted successfully.
File C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mojebanka.cz\*\ deleted successfully.
Invalid CLSID key: *
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mojebanka.cz\etrading\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mojebanka.cz\*\ deleted successfully.
Invalid CLSID key: *
Registry key HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mojebanka.cz\etrading\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3243394068-3903203777-451099978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mojebanka.cz\www\ deleted successfully.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll not found.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ not found.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll not found.
C:\Users\Otas\AppData\Roaming\ESET\ESET Smart Security folder moved successfully.
C:\Users\Otas\AppData\Roaming\ESET folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP82D5.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6A57.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPA6F9.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPC19A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPEDB8.tmp folder deleted successfully.
C:\Windows\Installer\MSI32D0.tmp deleted successfully.
ADS C:\ProgramData\Temp:30FD0CBD deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\4StoryPrePatch scheduled to be deleted on reboot.

OTL by OldTimer - Version 3.2.69.0 log created on 01022014_202218

Files\Folders moved on Reboot...
C:\Users\Otas\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Otas\AppData\Local\Temp\MMDUtl.log moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\LMutilps.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\4StoryPrePatch scheduled to be deleted on reboot.

#27 Příspěvek od **Márty84** » 02 led 2014 20:58

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

vyosek píše: T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe
Stahnete a spustte

Pro potvrzeni volby mackejte A, Enter

Po pouziti utilitu smazte

Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.

Pak napiste, jak je na tom pc.

Ot@s · #28 Příspěvek od **Ot@s** » 02 led 2014 21:33

Tak ten druhý a třetí prográmek se nestáhl, stránka napsala Error...tak jsem provedl čištění pomocí CC Cleaner a teď defragmentuji...Ozvu se zítra...

Ot@s · #29 Příspěvek od **Ot@s** » 02 led 2014 22:55

Defragmentace provedena, provedeno vypnutí a následné zapnutí NTB a start se mi zdá být dooost dlouhý...ale když celý systém naběhne, reakce jsou rychlé... Nevím, jestli jsem mohl udělat nějakou koninu s tím prvním programem v poslední sérii...bo mi nešlo potvrdit, jak jste psal A, ENTR...ale z ničeho nic se NTB sám zrestartoval...
Jinak jak jsem již psal...už se na tom dají dělat zase psí kusy...

#30 Příspěvek od **Márty84** » 03 led 2014 05:31

Zkuste jeste ty dva programky, co vam vcera nesly, ted uz by to jit melo. Alespon ja jsem je ted stahnul bez potizi.

Po startu se vam zapina dost veci. Nevim ale, ktere pouzivate, takze jsem vypnul jen ty bezne, co vypinam vzdycky.

Kliknete na START -> Spustit -> napiste msconfig -> OK

V okne najdete zalozku Po spuštění a povypinejte vse, co nepotrebujete aby se spoustelo hned pri startu pc

VIRY.CZ

Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly

Re: Prosim o preventivku, NTB je silene pomaly